GDPR – General Data Protection Regulation
This website is owned and operated by CERVED PROPERTY SERVICES SINGLE MEMBER S.A. , registered with General Commercial Registry (G.E.MI.) number 002296701000 and VAT number 094158466, located at 7 Eslin Street and 20 Amaliados Street, Ampelokipoi, Attica, P.C. 11523 (hereinafter the “Company”, “we”, “us”, or “our”). The Company is also responsible for the operation and management of the website.
The Company hereby informs you about how it processes and protects your personal data (hereinafter the “Notice”), in its capacity as data controller (within the meaning of the GDPR), when you browse and use this website (hereinafter the “Website”) and when you communicate with us. Additionally, you will find on the Website a notice regarding the processing of personal data through the use of tracking technologies (hereinafter the “Trackers Notice”). By using the Website, you acknowledge and unconditionally declare that you have reviewed and understood all the terms contained in this Notice and in the Trackers Notice. If you do not agree with any of these terms, you should refrain from browsing and using the Website.
The terms “you” or “your” in this Notice refer to the individuals whose personal data we process, namely any natural person who visits the Company’s Website and uses its available features, such as searching for properties, submitting contact requests, receiving informational content, or sending a résumé/CV as part of a job application.
In this Notice, “Personal Data” means any information that allows your identification, directly or indirectly, in particular by reference to an identifier such as your name, an online identifier (e.g., IP address), etc.
The Company complies with the applicable legislation on the protection of personal data, including Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”), Law 4624/2019, Law 3471/2006, as well as the guidelines and directions of the Hellenic Data Protection Authority (“HDPA”) and the European Data Protection Board.
We may update this Notice from time to time (e.g., to reflect changes in the applicable legal framework or our practices), and we will revise the date at the beginning hereof to indicate when such update has been made. You should check for updates regularly. By accessing the Website after the effective date of this Notice, you are deemed to have reviewed and accepted the applicable version of our Notice at any given time.
1. What Personal Data DoWe Process
When you visit and use the Website, we collect and further process certain of your Personal Data in order to provide you with access to the Website and its functionalities.
When you access and browse the Website, search for properties, express interest in a specific property, request to view a property, request information about our services (e.g., real estate advisory services, property valuations, property management), or subscribe to our newsletter, the Company will collect and further process the following Personal Data: your full name, email address, telephone number, your preferences regarding properties or services, your request to view a property, your request to receive our newsletter (for more information, please refer to the Notice on the processing of personal data in the context of promotional activities ), any comments you may provide, your request for us to contact you, the criteria you set when searching for a property, and data collected through trackers (for more information, please refer to the Notice of the use of trackers ).
Additionally, when you apply for a job position, we collect and further process Personal Data such as your résumé/CV, contact details, professional experience, education, and any additional information you provide as part of the evaluation process.
2.Legal Basis and Purpose of Processing
We process your Personal Data where there is a legal basis for such processing, only if and to the extent that at least one of the following conditions applies:
- The processing is necessary to provide you with access to the Website, to communicate with you if you express interest in a specific property or in any of our services, or to evaluate your job application for the purpose of entering into an employment contract (Contract).
- The processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. Such legitimate interests include: (a) monitoring how you use the Website to ensure its effective and secure operation, as well as for the detection and prevention of fraud and misuse, (b) improving the Website’s functions and services, (c) providing additional information following a request you submit through the contact form, and (d) establishing, exercising, or defending legal claims (Legitimate Interests).
- The processing is necessary for compliance with a legal obligation to which the Company is subject, such as providing information to competent authorities (e.g., the public prosecutor) (Legal Obligation), and/or
- You have given your consent to the processing of your Personal Data. This applies when you subscribe to our newsletter and/or when you accept the use of certain cookies and tracking technologies (Consent).
3. Recipients of Personal Data
We engage external service providers to deliver certain services who, in the context of their cooperation with the Company, have access to or further process your Personal Data. These services include, among others, IT and systems management services, such as the development and maintenance of the Website; marketing and communication services, such as newsletter management and promotional activities; human resources and recruitment services; as well as data hosting services.
To the extent necessary, we may disclose Personal Data to law enforcement authorities, competent independent regulatory/supervisory authorities, competent courts and other judicial bodies, as well as to our external professional advisors, including lawyers, auditors, accountants, and insurers who provide relevant services to us. In the event of a merger or acquisition, your Personal Data may be disclosed to the third parties involved in such merger or acquisition.
4. International transfers of Personal Data
In the context of our cooperation with the above recipients, any transfer of your Personal Data outside the European Economic Area (“EEA”) for the purposes described above will be based on an adequacy decision issued by the European Commission or will be subject to appropriate safeguards and conditions to ensure an adequate level of data protection, such as data transfer agreements based on standard contractual clauses approved by the European Commission. For more information on how the Company protects Personal Data transferred outside the EEA, or to obtain a copy of the safeguards applied for such transfers, please contact us at: cps.dpo.gr@iongroup.com .
5. Retention of your Personal Data
Personal Data processed for the purposes described above will generally be retained for as long as necessary to fulfill the purposes for which it was collected, for example until you withdraw your consent to receive personalized information. Once the purpose of processing has been fulfilled, we will delete or anonymize your Personal Data.
If you submit your résumé/CV for a specific job position and the position is filled by another candidate, your Personal Data may, where appropriate, be retained for the purpose of assessing your suitability for future positions or for the establishment, exercise, or defense of legal claims.
The Company periodically reviews the necessity of retaining your Personal Data and, accordingly, proceeds with its deletion.
With regard to the retention of data collected through cookies and other tracking technologies, please refer to the Notice of the user of trackers.
6. Security of your Personal Data
Taking into account the latest technological developments, the cost of implementation, and the nature, scope, context, and purposes of processing, as well as the risks of varying likelihood and severity to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risks of processing.
7.Your rights
Subject to the conditions set out in the applicable legislation, you have the following rights regarding the protection of your Personal Data:
Right of access:You may contact us to be informed and receive explanations as to whether we process Personal Data concerning you, the categories of such data, and the manner in which we process it. You may also request a copy of your Personal Data that we process.
Right to rectification:If you believe that your Personal Data is inaccurate or incomplete, you have the right to request its correction or completion.
Right to erasure:Under certain conditions, such as when the data is no longer necessary, you may request that we delete your data.
Right to restriction of processing:If you believe that your Personal Data is inaccurate, that the processing is unlawful, that we no longer need the Personal Data, or if you object to automated processing (where applicable), you have the right to request the restriction of processing.
Right to object:You may object to the processing of your Personal Data on grounds relating to your particular situation, unless, among other things, there are compelling and legitimate grounds for the processing which override your interests, rights, and freedoms. You also have the right to object where a decision concerning you is based solely on automated processing, including profiling, and that decision produces legal effects or significantly affects you (legal exceptions may apply).
Right to data portability:You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, as well as the right to transmit such Personal Data to another organization (data controller) that you designate.
Withdrawal of consent:You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal.
Right to file a complaint before HDPA: You have the right to file a complaint before the Hellenic Data Protection Authority (HDPA) regarding matters related to the processing of your Personal Data by the Company. More information about the responsibilities of the HDPA and how to submit a complaint can be found on its website at www.dpa.gr.
8.Contact details
If you have any concerns or questions regarding this Notice, or if you wish to exercise any of the rights described in the section “Your Rights,” please contact us at: cps.dpo.gr@iongrou.com .