PERSONAL DATA PROTECTION POLICY

Green Properties (brand name of the company under the name “Nova Constructions SA”, which hereafter and for the sake of brevity will be referred to as “the company”) has taken all necessary technical and organizational measures to fully ensure your privacy and the security of your personal data, in accordance with the applicable European and national legislation.

Please take some time to read this Privacy Policy (hereinafter referred to as “Policy”) and find out how the Company, acting as a Data Controller, collects, stores, uses and generally processes your personal data when you visit, register or use the Company’s website as well as when you meet and interact at the Company’s offices, whose headquarters are located in Kallithea, at 33 Alexandrou Pantou Street.

This Policy also describes how we use, share and protect your personal data, the choices you have regarding your personal data, and how you can contact us.

This Policy applies to all of your personal data processed by the company in the course of providing its services to you. In particular, it records and analyses: the type of personal data processed by the company, the legal basis of the processing, the period of data retention, the recipients of the personal data and the technical and organizational measures taken by the company to guarantee privacy security.

1) What is personal data?

The term “personal data” refers to information of natural persons, such as name, postal address, e-mail address, contact telephone number, IBAN/ No., Account number, etc., which identifies or can identify you, hereinafter referred to as “Personal Data or Data”.

2) Data we process

The Company collects your personal data when you contact us either by telephone or email or even when you visit the Company’s offices.

In particular, the Company collects the following data and personal data:

-first name and surname, father’s name, mother’s name

-email, mobile and fixed telephone number,

-data for the conclusion of contracts and for payments/deposits of amounts: TIN, Tax Office, IBAN, occupation, copy of identity card

-address details

– Your image may be recorded on CCTV when you visit our offices

– Your comments and reviews on social media and other networks

– Educational details such as education, skills, language skills, language proficiency, work experience (only when applying for a job)

We comply with the law and do not allow the processing of data of children under 16 years old without the written consent of the parent.

The processing by us of your above data is carried out solely to ensure the Company’s proper performance and provision of its services to you, as well as for the conclusion of private agreements or purchase and sale contracts and for the issue of the corresponding documents (receipt). In addition, and if you wish, we process and store your contact details for the purposes of promotional activities only, in order to send you information about any promotional activities, if you accept it.

In case you visit the company at our offices, we collect the data related to your convenience and solely for this purpose (name and surname). In addition, in the context of the current coronavirus pandemic, you may be asked for a certificate of vaccination or a Rapid Test when you enter the company’s offices.

Finally, we inform you that the processing of your Data is carried out either by the Company’s specifically authorized personnel and, exceptionally, by third parties who, having been contractually bound to respect confidentiality and protect your Data, carry out operations necessary to achieve the purposes strictly related to the use of our website and the provision of our services to you. You will find information about this below:

3) Lawful basis for processing your data

Green Properties processes your basic personal data solely for the proper and lawful provision of its services to you and for your convenience. Therefore, your expression of interest and the provision of services to you in accordance with our company’s purposes is the lawful basis for the processing of your data. Also a lawful basis for processing your data may be any request for the evaluation of your applications and CVs for the purpose of recruitment to our Company.

In particular, the basis for data processing is :

Data protection legislation sets out various reasons why a company may collect and process your personal data, including: the terms of our contractual relationship

Your consent, where required. For example, when you opt in to receive newsletters. When collecting your personal data, we will always inform you what data is necessary in relation to a particular service.

The Company’s obligations arising from the law (e.g. tax legislation, e-commerce legislation, etc.)

The legitimate interest of our Company. In certain circumstances, we collect your Data in a way that is reasonably expected as part of our Company’s operations and that does not substantially affect your rights, freedom or interests.

4) Retention period of your Data

We retain your Personal Data for as long as the purposes for which it was collected and listed above remain valid.

Our Company may retain your personal data even after the purposes for which they were collected and processed have been fulfilled in the following limited cases:

1) Where we have a legal obligation under a relevant legal provision.

2) For use before tax and social security authorities and any other controlling authority within the legal limitation period.

3) If required for the proper organization and operation of our company (e.g. for statistical purposes) provided that anonymization and pseudonymisation of your data takes place.

4) Until the statute of limitations has expired for the defense of the rights and legitimate interests of the company before any competent Court or other public authority.

Please note that, after the expiration of the retention period, your personal data will be destroyed from our archives and system in compliance with our company’s policy and provided that their retention is no longer required to fulfill the purposes described above.

5) Recipients of your personal data

In order to serve the processing purposes set out in this policy, our company may provide access to or transfer the following types of your personal data to the following processors on behalf of our company:

-Name/First name, address details and contact telephone number to partner courier companies and post offices.

-Personal data to the company’s web hosting and software maintenance and support service provider

-Your financial data to the credit institution with which we work each time to process payments to and from your bank and credit card accounts at the time of purchase.

-Your personal data to accountants, lawyers and notaries in the context of the performance of their services to our company or to auditors in the event of an audit.

-The evaluation of applications and CVs for the purpose of recruitment to our Company.

-Access to your Data is granted to the strictly necessary personnel of the Company, who are bound by confidentiality obligations, and to our partner companies or third party service providers, who process your Data as Processors on our behalf and in accordance with our instructions.

The processing of your Personal Data by the aforementioned affiliates is always carried out under our control and only on our instructions and is subject to the same data protection policy or a policy of at least the same level of protection.

In the event that we are obliged by a court or other administrative authority and in any other case where we are under a legal obligation to do so, our company may disclose your personal data up to the extent provided by law and after informing you,

It is clarified that the company is not responsible in any way for the management of your personal data by third parties.

However, and for maximum assurance that your data will not be leaked even by the third party partners (processors), the company provides the guarantee regarding third parties that:

They observe confidentiality,

They do not send your Data to third parties without the Company’s permission,

Take appropriate security measures,

They comply with the legal framework for the protection of personal data and in particular Regulation 979/2016/EU (otherwise GDPR)

6) The Security of your data

Our Company’s priority is to keep your personal data secure. Our company has taken and implements a number of measures to keep your personal data safe and secure. These measures include, where applicable, role based access control to the data as well as pseudonymisation, encryption or other technical and organizational measures.

7) Your rights

We inform you that you have the right of :

Access to your data:

This means that you have the right to be informed by us if we process your Data. In this case, you can request to be informed about the purpose of the processing, the type of your Data we hold, to whom we give it, how long we store it, whether automated decision-making is carried out, and your other rights, such as rectification, erasure, restriction of processing and lodging a complaint with the Data Protection Authority.

Correction of your data in case of inaccuracy:

If you find that there is an error in your Data, you may submit a request to us to correct it (e.g., correcting your name or updating a change of address or other information).

Deletion of your data in certain circumstances/the right to be forgotten:

You can ask us to delete your Data if it is no longer necessary for the processing purposes listed above or you wish to withdraw your consent where this is the only lawful basis.

Restriction of processing of your data:

You may ask us to restrict the processing of your Data for as long as your objections to the processing are pending.

Objection to the processing of your Data:

You may object to the processing of your Data and we will stop processing your Data unless there are other compelling and legitimate grounds that override your right. If you have consented to the collection, processing and use of your Personal Data, you may withdraw your consent at any time with future effect.

ΔTransfer of your data to another controller (portability):

You may request to receive in a readable format the Data you have provided or request us to transfer it to another controller.

Complaining to the Personal Data Protection Authority in the event of an unfortunate data breach incident.

Our company will respond to your above requests promptly and within a maximum of one month from receipt, and this deadline may be extended by an additional 2 months if your request is complex or if further time is required due to a large number of requests.

If your requests do not meet the legal requirements, our company reserves the right either to charge a reasonable fee, taking into account the administrative costs of providing the information or the communication or execution of the requested action, or to refuse to comply with your request.

Remember, if you choose not to share the Data with us or deny certain communication rights, we may not be able to provide some of the services you have requested. For example, if you have even requested us by email to inform you of the availability of a property, we cannot serve you if you have withdrawn your general consent to receive updates from us.

In the event of a breach of your personal data, which may pose a high risk to your rights and freedoms and provided that it does not fall within one of the exceptions expressly provided for by law, we undertake to inform you accordingly without undue delay.

However, if there are doubts about the identity of the natural person submitting the request, we reserve the right to request additional information necessary to confirm his or her identity.

In case you need clarification or further information about your rights as described above, you can contact our call center or contact our Data Protection Officer (contact details below).

8) User obligations

By using our website as well as when providing your personal data upon consent, you acknowledge that you are under the obligation to provide the true, accurate and complete information requested by our company.

9) Cookies

Our website works with cookies. Learn more about how we use cookies here.

10) Officers

We inform you that you can contact our company for any issue concerning the security of your data on the following telephone number +30 2160000027 and by email: dpo@greenpropertiesdc.com

The Data Protection Officer in our company is Mrs. Argyriou Konstantina-Maria (tel. Contact: +30 2160705490, Address: 33 Alexandrou Pantou Kallithea, P.O. Box: 17671).

If you are not satisfied with the way your data is processed, you can submit a complaint to the Personal Data Protection Authority. However, we would appreciate the opportunity to resolve any complaint as soon as possible before you make a complaint to the Data Protection Authority.