Privacy Policy

1. Data Controller

The controller responsible for the processing of your personal data is Metropolis Citizen Properties, Dionysiou Aiginitou 17, 115 28 Athens, Greece, VAT 801770215, GEMI 163002803000. You may contact us at info@metropolis-realestate.gr or +30 211 705 9124.

2. What data we collect

Through this website we may process the following categories of personal data:

• Identification and contact data you provide voluntarily, such as your name, email address and telephone number, when you contact us.
• Content of your communication, including messages sent by email or WhatsApp.
• Property-related information you choose to share in the course of an enquiry.
• Technical data collected by strictly necessary cookies, such as session information required for the website to function.

This website does not host owner, tenant, financial or document records. Any portal imagery shown is illustrative only and contains no real client data.

3. Purposes and legal bases

• Responding to your enquiries and providing information about our services — performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR).
• Operating and securing the website — legitimate interest (Art. 6(1)(f) GDPR).
• Optional analytics cookies — your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Law 3471/2006).
• Compliance with legal and tax obligations — legal obligation (Art. 6(1)(c) GDPR).

4. Recipients

Personal data may be disclosed to service providers acting as processors on our instructions, such as hosting and communication providers, and to professionals engaged on your behalf, such as lawyers, accountants or engineers, where you have requested such coordination. Data may also be disclosed to public authorities where required by law. We do not sell personal data.

5. International transfers

Where a provider processes data outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission or on Standard Contractual Clauses together with appropriate supplementary measures.

6. Retention

Enquiry correspondence is retained for as long as necessary to handle the enquiry and for a reasonable period thereafter. Data relating to a contractual relationship is retained for the duration of the relationship and for the statutory limitation and tax retention periods that apply under Greek law. Consent-based cookie data is retained for the lifetime of the relevant cookie.

7. Your rights

Under Articles 15 to 22 GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, contact info@metropolis-realestate.gr. We respond within one month, which may be extended where permitted.

8. Right to lodge a complaint

You may lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifissias 1-3, 115 23 Athens, telephone +30 210 6475600, website www.dpa.gr.

9. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the nature of the processing and the risks involved.

10. Changes

This policy may be updated to reflect changes in our processing activities or legal requirements. The date of the most recent update is shown at the end of this page.