Privacy Policy (GDPR)
Last updated: 15/12/2025
This Privacy Policy explains how Spasić Real Estate (hereinafter "Company" or "Data Controller") collects and processes personal data through the website https://www.spasic-property.com, in accordance with GDPR (EU) 2016/679 and ePrivacy rules for cookies/trackers. For cookies that are not strictly necessary, consent is required before installation.
1. Data Controller – Contact Details
2. Categories of Data We Process
Depending on usage, we may process:
- Contact details: name, email, phone, and message content (contact form)
- Preference/interest data: information you provide about property/area/budget in your message
- Technical data: IP, user agent, security logs, navigation data (to the extent collected by server/provider)
- Third-party channel data: when you choose to communicate via WhatsApp, communication occurs through a third-party provider
- reCAPTCHA: data collected for security/anti-spam purposes via Google reCAPTCHA
3. Purposes and Legal Bases (Article 6 GDPR)
(a) Managing contact/interest requests
Purpose: responding to inquiries, communication about properties/services.
Basis: Article 6(1)(b) (pre-contractual measures upon request) and/or 6(1)(f) (legitimate interest in customer service).
(b) Website security – abuse/fraud prevention
Purpose: system protection, logs, anti-spam.
Basis: 6(1)(f) legitimate interest.
(c) Consent for cookies/analytics/marketing
Purpose: statistics, experience improvement, advertising.
Basis: 6(1)(a) consent (where required by ePrivacy).
4. Recipients – Data Processors
Data may be transferred to:
- hosting/infrastructure provider and technical support (IT)
- email/communication provider
- Google reCAPTCHA (anti-spam)
- WhatsApp when you select "Chat with us on WhatsApp"
5. Transfers Outside the EEA
Use of services such as Google/WhatsApp may involve transfer/storage of data outside the EEA. In these cases, the Data Controller relies on appropriate safeguards (e.g., Standard Contractual Clauses).
6. Retention Period
- Contact requests: up to 24 months from last communication
- Technical security logs: up to 12 months
- Marketing data: until consent is withdrawn
7. Data Subject Rights (Articles 12–22 GDPR)
You have the right to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (where applicable). To exercise rights: spasic-realestate@hotmail.com.
8. Complaint to Supervisory Authority
You have the right to lodge a complaint with the competent supervisory authority. For Greece: Hellenic Data Protection Authority (HDPA).
9. Cookies
The Website may use cookies:
- Strictly necessary: functionality/security
- Preferences: e.g., user choices
- Statistics/analytics: if enabled
- Marketing: if enabled
For non-essential cookies, prior consent and the ability to withdraw are required.
10. reCAPTCHA (Google)
The Website is protected by reCAPTCHA and Google's policies/terms apply to this functionality.
11. Security
The Company implements reasonable technical and organizational measures to protect data. However, no system guarantees absolute security.
12. Modifications
The Company may modify this Policy. The updated version takes effect from its posting.