Privacy Policy

Effective date: 17 October 2026

1. Who we are

Hellas Residences I SINGLE MEMBER P.C. (Hellas Residences I ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε.) is responsible for your personal data.

Address: Kefallinias 46, 11251 Athens, Greece
Phone: +30 694 877 1135
Email: info@hellasresidences.gr
G.E.MI. no.: 183893601000

We have no Data Protection Officer, because the law does not require one for a business like ours. For any privacy question, email info@hellasresidences.gr.

2. What data we use

When you email us: your email address, your name if you give it, and what you write.
Newsletter: only if you sign up: your email address, the language of the page you signed up on (EN/EL), and your consent record (when you signed up and confirmed, the IP address used, and the version of the form you saw).
Website visits: technical data such as your IP address and browser type, and the cookies described in our Cookie Notice.

3. Why we use it, and on what legal basis

To answer your emails. Basis: our legitimate interest in replying (GDPR art. 6(1)(f)).
To send our newsletter. Basis: your consent (art. 6(1)(a)). You can withdraw it at any time.
To keep our website secure and to defend legal claims. Basis: legitimate interest (art. 6(1)(f)).
To comply with the law when it requires us to keep or share data. Basis: legal obligation (art. 6(1)(c)).

Do you have to give us your data? No. But without your email address we cannot reply to you or send you the newsletter.

We do not make decisions about you by automated means alone.

4. Who receives your data

Cloudflare, Inc. (USA) hosts and protects our website and runs our newsletter signup form. Your signup details pass through Cloudflare; they are not stored there. Cloudflare does log technical data, such as your IP address.
Papaki (ENARTIA SINGLE-MEMBER S.A., Greece) provides our domain and email. Emails you send us are kept in our mailbox there.
MailerLite (MailerLite Limited, Ireland) stores and sends our newsletter.
We use no analytics, advertising or third-party embeds.
Our accountants and lawyers, and public authorities when the law requires it.

Our service providers may use your data only on our instructions, under data processing agreements (GDPR art. 28).

5. Data outside the EU

Cloudflare may process data in the USA and in other countries. For the USA, Cloudflare is certified under the EU-U.S. Data Privacy Framework; if that stops applying, the EU Standard Contractual Clauses apply. For other countries, the safeguards in Cloudflare’s data processing agreement apply. Papaki is based in Greece.

Emails we send may pass through our email provider’s servers, some of which may be outside the EU, under the safeguards our provider applies.

MailerLite keeps newsletter data in the EU.

6. How long we keep it

Emails you send us: 12 months after our last contact.
Newsletter: until you unsubscribe.
Cookies: see our Cookie Notice.

Who: Hellas Residences I IKE (see §1).
What we use: your email address, the language of the page you signed up on (EN/EL), and your consent record (when you signed up and confirmed, the IP address used, and the version of the form you saw). We use them to send you launch news and offers, and to show that you agreed.
Legal basis: your consent (GDPR art. 6(1)(a); Law 3471/2006 art. 11(1)). Signing up is voluntary. If you don’t, you just won’t get the newsletter.
Confirming: you are only added after you click the link in our confirmation email. We send that email from newsletter@hellasresidences.gr through Papaki (see §4). The link works for 30 days. If you don’t confirm, you won’t be added.
Link clicks: when you click a link in our newsletter, our email provider records the click against your subscription. We use this to improve our emails. This is part of your newsletter consent. We do not track whether you open our emails.
Unsubscribing: use the link in any email, or write to info@hellasresidences.gr. This does not affect emails sent before.
Email provider: MailerLite Limited (Ireland) stores and sends the newsletter for us, under a data processing agreement. Your data stays in the EU. Our signup form runs on Cloudflare (see §4–5).
How long: until you unsubscribe. After that, we keep the record of your consent and of your unsubscribe for 6 months, then delete it together with your contact details.
Your rights: as in §7. You can stop marketing at any time, and you can complain to the HDPA (www.dpa.gr).

7. Your rights

You can ask us to:

show you the data we hold about you;
correct it;
delete it;
limit how we use it;
give it to you, or to another company, in a common format.

You can also object to how we use your data, and you can always say no to marketing. If you gave consent, you can withdraw it at any time; this does not affect what we did before. (GDPR arts. 15–22; Law 4624/2019.)

Email info@hellasresidences.gr. We reply within one month.

Complaints: you can complain to the Hellenic Data Protection Authority (HDPA), www.dpa.gr, contact@dpa.gr, tel. +30 210 6475600.

8. Security

We protect your data with encrypted connections (HTTPS), access controls and careful choice of suppliers.

9. Children

Our website is not meant for children under 15.

10. Changes

If we change this policy, we will post the new version here with a new date.

Laws that apply: the GDPR (EU Regulation 2016/679), Greek Law 4624/2019 and Law 3471/2006.