GDPR – PERSONAL DATA

UPDATE FORM FOR THE PROCESSING OF PERSONAL DATA ACCORDING TO REGULATION (EU) 2016/679 AND THE RELEVANT GREEK LEGISLATION

Geoland Real Estate Services informs you, in accordance with Regulation (EU) 2016/679 and the provisions of the relevant current Greek and EU legislation on the protection of personal data, in its capacity as data controller, that it processes personal data of customers - prospective customers and in general dealings with the Company.

1. What personal data does the Company collect from you and from where?

The personal data collected and processed by the Company mainly belong to the following categories, it is expressly clarified that you may not be concerned with all the data mentioned below and in general information provided through this Update: 

a) Your identification data: first and last name, patronymic, social security number, VAT number, AMKA, date of birth, gender, etc. We collect this data directly from you.

b) Your contact data: postal and email address, landline and mobile phone, etc. Data is collected directly from you and/or a third party acting on your behalf.

c) Data on your financial and property situation, occupation, earnings, your dependents, E1 and E9 forms, settlement notes, etc. The said data is collected either directly from you or at your command, or from publicly accessible sources, such as mortgage registries, land registry offices, etc.

d) Data from the operation of your contract(s) with the Company and the use of the services provided to you.

e) Image data from the video recording systems of the premises where the Company is housed, in which there are the relevant legal markings.

In the concept of the above collection of the data by you also includes the collection by a third party acting on your behalf as well as by a customer or prospective customer related to you (natural or legal person).

Also, in case you provide us with personal data of third parties, you should have secured their consent and referred them to the present information of the Company.

2. Why does the Company collect your data and for what purposes does it process it?

The Company collects and processes your personal data:

A. To perform a contract and take steps at your request before entering into a contract.

The aforementioned processing of the data under 1. serves purposes such as:

a) Your identification and communication with you during the stage of both the pre-contractual and contractual relationship with you, as well as any other transaction you have with the Company.

b) The drawing up of the contract (provision of services, etc.) with you, its execution and generally its smooth operation and the fulfillment of the Company's obligations towards you.

c) Communicating with you, informing you about the best use of the services provided by the Company (e.g. information notes for sale/lease of properties, etc.), for their improvement, as well as for sending to questionnaires to investigate your degree of satisfaction with the services provided by the Company, as well as your level of service from the Company.

The aforementioned (under A.) processing also serves the Company's compliance with its legal obligations (below under B.), as well as the Company's legal interests  or of a third party (below under C.)

B. For the Company's compliance with its legal obligations The aforementioned processing of the data under 1. serves purposes such as:

a) The prevention and suppression of money laundering and the financing of terrorism, as well as the prevention, detection and suppression of fraud against the Company or its other customers, as well as any other illegal act.

b) The Company's compliance with the obligations imposed by the current legal, regulatory and supervisory framework, as well as the decisions of any authorities (public, supervisory, etc.) or courts.

c) The protection of customers and employees and their property, as well as the Company's facilities and property in general.

The aforementioned (under B.) processing also serves the legal interests of the Company  or of a third party (below under C.).

C. For purposes of legitimate interests of the Company or a third party The said processing of the data under 1. serves purposes, such as the security of the IT systems, the Company's facilities and assets, the prevention and prevention of criminal acts or fraud,  the defense of the legal rights and interests of the Company, your information and/or participation in promotional actions for new services, as long as your consent has not been selected for the said processing as a legal basis. This processing is preceded by a weighting that compared to the Company's interests, your interest or fundamental rights and freedoms that require the protection of your data do not prevail.

D. With Your Consent In cases where we have asked you and received your consent, the processing of the data under 1. is based on this consent. In these cases you have the right to withdraw your consent at any time, without, however, affecting the lawfulness of the processing based on your consent before its withdrawal.

E. Profiling or Automated Decision Making

In order to fulfill the above purposes, and in particular under , 2.B.a, as well as for promotional purposes, the Company may compile your profile using your data under 1.

In cases where the Company makes a decision solely on the basis of automated processing, including profiling, which produces legal effects that concern you or significantly affect you in a similar way, it will provide you with more specific information and, where necessary, ask for your consent.<

3. Who are the recipients of your data?

When fulfilling the Company's contractual and legal/regulatory obligations, serving its legal interests, as well as in cases where the Company  is authorized or has received your consent, recipients of your data may for example be the following:

a) The employees of the Company who are responsible for the evaluation of your requests, the management and operation of the contract(s) with the Company, for the fulfillment of the obligations arising from it(s), as well as the relevant obligations imposed by law.

b) Entities to which the Company entrusts the execution of specific tasks on its behalf (executors of the processing) such as, indicatively but not limited to, engineers, appraisers, energy inspectors, lawyers, law firms, notaries and bailiffs, experts, experts, product providers and/or IT services and/or support of all kinds of information and electronic systems and networks, including online systems and platforms, companies for storage, archiving, management and destruction of files and data, companies, or other natural or legal persons that process data for reasons checking them and updating them (including updating your contact details, in case you have failed to notify the relevant change to the Company, companies providing consulting (e.g. financial, audit) services, customer satisfaction or market research in general, service promotion etc., subject to compliance in each case with the terms of security and confidentiality.

c) Supervisory, independent, judicial, prosecutorial, public and/or other authorities or bodies.

4. Can the Company transfer your data to third countries (outside the EU)?

The Company may transmit your personal data to third countries, outside the EU, if:

a) an adequate level of protection is ensured according to the European Commission by the third country, by territory or by one or more specific sectors in that third country or

b) appropriate guarantees have been provided for their processing by the recipient, based on the law. If none of the above conditions apply, transmission can be made if:

a) you have provided the Company with your express consent to this end or

b) the transmission is required for the execution of your contract with the Company, such as for the execution of your orders or

c) the transfer is necessary for the establishment or exercise of legal claims or the defense of the rights of the Company or

d) there is a relevant obligation of the Company from a provision of law or an international agreement or

e) in the context of the Company's compliance with the rules of the automatic exchange of information in the tax sector, as they derive from Greece's international obligations.

In order to fulfill the obligations under d or e above, the Company may proceed with the transmission of your personal data to competent national authorities in order to be forwarded through them to the corresponding authorities of third countries.

5. For how long will the Company keep your data?

The data is kept only for the period of time required to fulfill the purposes of its collection and processing and/or the applicable legal and regulatory framework. They are deleted in a secure manner or anonymized after the completion of the processing, unless the current legislation provides for their continued observance or if this is required to defend the Company's rights before a Court and/or other Authorities.

6. What rights do you have to protect your data?

You have the following rights:

a) Be aware of the categories of your personal data that we keep and process, their origin, the purposes of their processing, the categories of their recipients, their retention period, as well as your relevant rights (right of access).
< br> b) To request the correction and/or completion of your personal data, so that it is complete and accurate (right of correction), by providing any necessary document from which the need for correction or completion arises.

c) Request the restriction of the processing of your data (right to restriction).

d) Object to any further processing of your personal data held by us (right to object).

e) Request the deletion of your personal data from the files we keep (right to be forgotten).

f) Request the transfer of your data from the Company to any other data controller (right to data portability).
Please note the following in relation to your above rights:

i. Your rights under c, d and e may not be satisfied, in part or in whole, if they concern data that is necessary for the preparation and/or continued operation of the contract, regardless of the source of their collection.

ii. The Company  has in any case the right to refuse your request to limit the processing or delete your personal data if the processing or keeping of the data is necessary for the establishment, exercise or support of its legal rights or the fulfillment of its obligations.
< br> iii. The exercise of the right to portability does not entail the deletion of the data from the Company's records, which is subject to the conditions of the immediately preceding paragraph.

iv. The exercise of the above rights acts for the future and does not concern already performed data processing.

g) Submit a complaint to the Personal Data Protection Authority (www.dpa.gr), if you consider that your rights are violated in any way.

7. How can you exercise your rights?

To exercise your rights, contact

The Company will make every effort to respond to your request within thirty (30) days of its receipt. This deadline can be extended for an additional sixty (60) days, if this is deemed necessary at the absolute discretion of the Company, taking into account the complexity of the request and the number of requests. The Company will inform you in any case of extension of the deadline within thirty (30) days of receipt of the request.

The above service is provided by the Company free of charge. However, in case the requests  to you are manifestly unfounded, excessive or repetitive, the Company may either charge you a reasonable fee, informing you accordingly, or refuse to respond to your request(s).

8. Contact for privacy issues

You can contact for issues related to the processing of your personal data at the address Grigoriou E 29 Kos 85300 (attention of the person responsible for personal data) stgeorgaras14@gmail.com

9. How does the Company protect your personal data?

The Company applies appropriate organizational and technical measures to secure your data, ensure its privacy, processing and protection against accidental or unlawful destruction, accidental loss, alteration, prohibited dissemination or access and any other form of unlawful processing.