The protection of your personal data is important to us. This Privacy Notice (the "Notice") is intended to inform you about the terms and conditions concerning the collection, storage, and use of your personal information when you visit or use our online Platform (www.oikoteck.com), provided that you are a natural person.
- Controller
“OikoTeck P.C.”, a company functioning under the Laws of Greece acts as the Data Controller of any personal data entered in or collected through our website and platform.
Our business is Based in Athens, Greece, at Stournari Str. No. 38 (P.C. 10438). It possesses VAT Number 802531830, and has been registered with Business Registry (ΓΕΜΗ) number 178122003000.
If you wish to contact us, for any issue related to the processing of your Personal Data and the exercise of your rights, you can use the following contact details.
Tel: +30 694 029 7558. Email address: info@oikoteck.com.
- A few words about our website www.oikoteck.com
This website hosts our platform which connects house seekers with real estate brokers and homeowners, provides information about real estate listings posted by its users, and provides brokers and homeowners with subscription-based data insights (hereinunder “Platform”).
The personal data that you provide to us while browsing in or registering as a user in our Platform, or when you are using our Platform’s subscription services are subject to processing and will be kept on file under the responsibility of our Company, according to the conditions contained in this Notice.
- What is Personal Data?
The term "personal data", as used in this Notice, refers to any information relating to you as a natural person, either as an individual or as a professional, that can be linked to you and/or can identify you, directly or indirectly, such as, for example: full name, postal address, email address, contact telephone number, details about your subscription, etc. (hereinafter referred to as "Personal Data or Data")
- What is the Processing of Personal Data?
Processing of Personal Data refers to any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organizing, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Which types of Data are we collecting about you, and how?
5.1 As a rule, we only collect the personal data that you choose to provide to us with directly when you browse or interact with our website/Platofrm. This may take place:
- When you register as a member/create an account on our Platform
Indicative categories of collected data: name, email, log in credentials (username/password), phone number, confirmation on whether you are signing up as a regular user or a real estate agent, VAT number (only for Real Estate Agents/Professional Users).
- When you post a listing for one of your properties
Indicative categories of collected data: type of listing (rental/sale), information about your listing (listing details, photos, and prices), details on whether you post the listing as a private owner or a real estate broker
- When you purchase/activate a subscription package in our Platform
Indicative categories of collected data: chosen subscription package, price of subscription and points balance, method of payment, confirmation on whether the payment was successful, invoicing information
- When you use our platform’s registered user services/features (Dashboard, Favorite Properties, Recent Searches etc.)
Indicative categories of collected data: usage data and data related to your preferences, data related to your searches, data disclosed in the dashboard about you and your team, information about your favorite listings etc.
- When you fill in one of our forms in order to submit an offer for a property, to chat or send a message to a homeowner/real estate broker or to contact them to request a tour of a property
Indicative categories of collected data: Name, phone number, email address, contents of your message, Date and time of the requested tour, type of the requested tour, offered price for the property.
- When you communicate with us through the use of the Platform’s “Live Chat” feature.
Indicative categories of collected data: Name, contact details (email, phone etc.), contents of your message.
- When you file a report for user generated content, according to our “Notice and Takedown” Procedure.
Indicative categories of collected data: Name, Email Address, Content of the report/notification
Please note that your password is stored in encrypted form, solely to control access to your account, and the Platform cannot gain access to the actual characters/digits that make up your password.
5.2 In addition to the abovementioned cases, the following personal data are also collected for the purposes of the Platform:
- Platform usage and browsing data and metadate are collected during your browsing and use of the platform’s services as a registered user.
- Website usage data and metadata are collected through the use of cookies. For more information about the collection and use of this data, please read our Website’s Cookies Policy, and
- Confirmation of the success or failure of transactions, made with a debit/credit card or with an online payment method, to pay for our subscription packages. This confirmation is automatically provided to us by the banks and online payment service providers, with whom we cooperate, whose secure systems are used to carry out your online transactions with the Platform. Please note that the Platform does not, in any case, have knowledge of your card details, and that the competent banks and online payment service Providers act as independent controllers for your personal data processed by them when you use their payment services, which operate under their sole responsibility.
- Confirmation on successful authentication from Google or Facebook, which is collected by the aforementioned companies if you choose to use the respective log-in methods, using your Google or Facebook accounts, to gain access to our Platform.
- Are we processing personal data belonging to minors?
In general, we do not process data concerning children under the age of 18, as the services of our Platform are addressed to persons over the age of 18 who have legal capacity to perform a purchase contract (see also our Platform’s Terms & Conditions). If we discover that we have collected Data of a minor under 18 years of age, without a legal basis for this, we will proceed to the immediate deletion of the data. In any case, the provisions of chapters 7 and 8 of this policy shall also apply to minors.
- For what purposes is your data processed?
We collect your Data exclusively for purposes related to the provision and promotion of our services, and to maintaining the efficient day-to-day operation of our Platform.
More Specifically, your data is processed for the following purposes:
- To provide the Platform’s services to the Platform’s users (both unregistered and registered) and subscribers,
- To provide our users and subscribers with user/customer support,
- To respond to your inquiries on our Platform,
- To produce Analytics and Statistics related to the use of the Platform and/or to the Real Estate Market in general,
- To invoice subscribers,
- To disseminate our Platform’s newsletter and similar promotional communications to you,
- To connect end users with real estate agents based on the end-user’s preferences and needs,
- To provide you with advertisements relevant to your listing searches,
- To ensure the information security on our Platform, and
- To comply with our legal and regulatory obligations.
- To review reports and make decisions for reports made under our Notice and Takedown Procedure
- What is the legal basis for the processing of your Data by our Platform?
According to the applicable legislation (GDPR, Law 4624/2019), the processing of your personal data, for any intent and purpose, must be based on specific legal grounds.
The processing of website users' data for the abovementioned purposes (chapter 7 of this Notice) is carried out on the following legal bases:
- For the purposes of providing you with our Platform’s services (purpose "a") and invoicing our subscribers (purpose “e”), the processing is carried out because it is necessary for the performance of a contract between us, and specifically for the provision of our services based on the Terms & Conditions for the use of the Platform and the -subscription service specific- Service Plan Terms.
- Where data is processed to provide our users and subscribers with user/customer support (purpose “b”), to respond to user inquiries (purpose “c”), and to ensure the information security of our website (purpose "i"), the legal basis for the processing is the pursuit of the legitimate interests of our Platform and our users. More specifically, processing "b" and “c” seek to maintain efficient communication channels with our users and increase user satisfaction levels, while processing "i" seeks to secure the data and intellectual property of both our Platform and our users, as well as of the visitors of our website.
- For the purpose of Analytics and Statistics related to the use of the Platform and/or to the Real Estate Market (purpose “d”), processing is carried out, depending on your relationship with the Platform, on two distinct legal bases:
- If you are a registered user or a subscriber of our Platform, the legal basis for the processing is the pursuit of thelegitimate interests of our Platform and our users. More specifically, the processing aims to increase the platform users’ satisfaction level in relation to our offerings and to facilitate the improvement and constant development of our Platform and its services.
- If you are not a registered user, the processing of your data for this purpose only takes place through the use of cookies and similar technologies. In this case, the legal basis for the processing of your data is your explicit consent which you provide to us by enabling the “statistical/analytics” cookies category in our cookie banner. For more information on how we use cookies and how you can configure their usage, please refer to our platform’s Cookie Policy.
- For the purpose of disseminating our platform’s newsletters and similar promotional material (purpose "f"), we only process data belonging to registered users and/or subscribers, the processing based on our legitimate interest as recognized by article 11 paragraph 3 of Greek Law 3471/2006, unless you have declared your opposition to receiving the relevant messages. In this case, you may declare opt-out from receiving such communications, at any time, either by selecting the "unsubscribe" option, which is included at the end of each relevant message or by informing us of your opposition by sending an email to the following email address: info@oikoteck.com .
- For the purpose of providing you with advertisements relevant to your listing searches (purpose “h), processing is carried out, depending on your relationship with the Platform, on two distinct legal bases:
- If you are a registered user or a subscriber of our Platform, the legal basis for the processing is the pursuit of the legitimate interests of our Platform and our users. More specifically, the processing seeks to allow us to provide you with higher quality services and personalized experiences, to increase the chances of end users identifying properties that fill their search criteria, and to allow the professional users of the platform (real estate agents) to promote their properties to end users which have a higher chance of being interested in them.
- If you are not a registered user, the processing of your data for this purpose only takes place through the use of cookies and similar technologies. In this case, the legal basis for the processing of your data is your explicit consent which you provide to us by enabling the “advertising/marketing” cookies category in our cookie banner. For more information on how we use cookies and how you can configure their usage, please refer to our platform’s Cookie Policy.
- For the purpose of connecting end users with real estate agents based on the end-user’s preferences and needs (purpose “g”), we are sharing your contact information with real estate agents who list similar properties to the ones you have expressed an interest in. These real estate agents may then contact you to provide you with information about properties in which you may be interested. This processing is carried out, depending on your interaction with the Platform and its listings, on two distinct legal bases:
- If you have already interacted with a listing or a property listed by a specific real estate agent/agency, the legal basis for the processing is the pursuit of the legitimate interests of our Platform and our users. More specifically, the processing seeks to allow us to provide both you and our professional users with higher quality services and personalized experiences, to increase the chances of end users identifying properties that fill their search criteria, and to allow the professional users of the platform (real estate agents) to promote their properties to end users which have a higher chance of being interested in them.
- We may also provide your contact details and listing/property search history to other real estate agents/agencies who provide similar listings in similar areas, with whom you had no interaction on our platform in the past. The processing of your data for this purpose is carried out under the legal basis of your explicit consent and we shall not process your data for this purpose if you do not consent to it. You may provide your consent to us by choosing to tick the relevant tickbox “I consent to the sharing of my contact information and search preferences with real estate agents who offer listings which may align with my interests” either during the sign-up to our platform (if you are a registered user or subscriber) or during your interaction with one of the listing related features of our platform such as the “send a message” or “request a tour” features (if you are an unregistered user).
- For the purpose of reviewing reports and making decisions based on our Notice and Takedown Procedure (purpose “k”), the processing is carried out because it is necessary for us to comply with our legal obligations, as an intermediary service/platform provider.
- In general, with regard to the use of cookies on our website, to the extent that the cookies used are not necessary for the functioning and the smooth and secure operation of our website, the lawfulness of their processing relies on your consent, which you may choose to provide to us through the options of our website's "cookie banner". For more information on this issue, please see our Cookies Policy .
- Who are the recipients of your Data/Where are your data transferred?
As a rule, your data is only being processed by the competent, in each case, personnel of our Platform, who have been duly informed about the secure processing of your personal data.
Additionally, your data may also be transferred, where applicable and necessary, to:
- Natural and legal persons to whom we entrust the performance of specific tasks on our behalf, such as the companies that provides us with platform development services and hosting services for our servers, the provider of the “live chat” feature of our website, the company who supports us with the digital distribution of our newsletters, the provider of our invoicing software, and the external accounting firm with whom we cooperate. These persons, who act as data processors (hereinunder “Processors”) on our behalf, have been informed and committed in advance to respecting the confidentiality of your data, are aware of and follow our instructions regarding the processing of personal data, and take all appropriate measures to protect it.
- Partner Banks and online payment services (i.e. Stripe), whose secure payment systems support your electronic payments to our Platform. These partners act as independent Data Controllers for your data within the scope of the regulatory/legal frameworks governing their operations. You may find more information on the processing of your personal data by these partners in the respective Privacy Policies of these organizations.
- Supervisory, auditing, independent, judicial, public and/or other official authorities and bodies within the scope of their statutory powers, and duties when the transmission, of your data, to them is required by law. As well as private individuals when the transfer of your data to them is obligatory by law or when they have a legal right to access such data.
- Lawyers, law firms, bailiffs, experts, and expert witnesses, in cases where we need to take legal actions to safeguard our rights and interests.
- Other users of the platform and real estate agents, when the transfer of your data to them is necessary for the purposes described in chapter 7 of this Privacy Notice.
- How do we ensure that our Processors respect your Personal Data?
The Processors, who process your data on our behalf, have agreed and contractually bound themselves to:
- Processing your personal data solely in accordance with our instructions,
- Maintaining strict confidentiality,
- Not disclosing data to third parties without our permission,
- Undertake appropriate security measures to protect your data.
- Complying with the legal framework for the protection of personal data, including the European GDPR Regulation and Greek Law 4624/2019.
- Is your data being processed outside the European Union?
As a rule, we try not transfer your Data outside the EU, if such a transfer is not necessary to ensure the provision of our services to you.
As regards the use of partners and features provided by non-EU providers (such as social media or US-based tech firms), we have ensured that, where such options are available to us, your data is stored within EU-based servers. Where this possibility does not exist, and to the extent that your data would need to be processed outside the EU to provide you with the services of the abovementioned service providers, we ensure that any such third-party transfers are covered by at least one of the legal bases and safeguards of Chapter V GDPR.
- For how long is your data stored and when do we delete them?
As a general rule, we delete your data as soon as the processing is no longer necessary to achieve the purpose for which the data was collected or for us to comply with our legal obligations. In any case, your data will not be kept for more than 20 years.
Your user account data are deleted within twelve (12) months, following the deletion of your account.
Data concerning your subscription, will be deleted five (5) years after the processing of each subscription order.
Data concerning your consent to receiving our newsletter are deleted as soon as you indicate that you no longer wish to receive our newsletter, by following the instructions included in Section 8 of this Policy.
Any personal data stored in our server security logs for information security purposes (i.e. IP address), is retained for a period of two (2) years.
We delete the Data collected by Cookies in accordance with our Cookies Policy .
Once the abovementioned time periods expire, your data will be irreversibly deleted.
- Is your data safe?
We are committed to safeguarding your Personal Data. We have taken appropriate organizational and technical measures to ensure the security and protection of your Data from any form of accidental or unlawful processing. These measures are reviewed and modified at regular intervals and also on an ad-hoc basis when necessary.
- Which rights do you possess in regard to your personal data?
- You have the right to access your personal data.
This means that you have the right to be informed by us on whether we are processing your Data. If we are processing your Data, you can request to be informed about the purpose of the processing, the type of your Data we hold, who we give it to, how long we store it for, whether automated decision-making is taking place, and on how to exercise your remaining data protection rights, such as the right to rectification, the right of erasure, and the right of restriction of processing and the right to file a complaint with the Data Protection Authority.
- You have the right to rectify inaccurate personal data.
If you find that there is an error in your Data, you may submit a request for us to correct it (e.g., correcting your name or updating a change of telephone number).
- You have the right ask for the deletion of your personal data/right to be forgotten.
You may ask us to delete your Data if it is no longer necessary for the processing purposes listed above or if you wish to withdraw your consent, where your consent is used as the sole legal basis for the processing.
- You have the right to restrict the processing.
You may ask us to restrict the processing of your Data for as long as your objections to the processing are pending or if part of the processing is no longer necessary to fulfil the purposes for which your Data was collected.
- You have the right to object to the processing of your Data.
You may object to the processing of your Data where it is carried out in the pursuit of our legitimate interests, and we will stop processing your Data if there are no other compelling and legitimate grounds that override your rights and interests.
- You have the right to portability of your Data.
You may request to receive the Data you have provided to us in a readable form or request us to transfer it to another controller directly, when the processing is based on your consent or is necessary for the performance of a contract between us.
- You have the right to withdraw your consent.
In cases where the processing of your data, for a specific purpose, is based solely on your prior consent to the processing, you have the right to withdraw your consent at any time.
- How can you exercise your rights?
To exercise your rights, you may send us a request either to our postal address (Stournari Str. No. 38 (P.C. 10438), Athens, Greece,) or to our e-mail address ( info@oikoteck.com) with the title "Exercise of the right of access/ correction/ deletion/ portability/ restriction/ objection/ consent withdrawal" and the description of your request. From our part, we will examine your request and reply to you as soon as possible.
- When will you receive a response to your request?
We will respond to your Requests free of charge and without delay. We aim to always respond to your requests within one (1) month of receiving them. However, if your Request is complex or there is a large number of pending Requests, we will let you know within the first month if we need an extension of two (2) additional months within which to respond to you.
If your Requests are manifestly unfounded or excessive, in particular because of their repetitive nature, our Platform may impose a reasonable fee, taking into account the administrative costs of providing the information or performing the requested action, or refuse to follow up on your request.
- Right to lodge a complaint
If you believe that: a) your request has not been adequately and/or lawfully fulfilled, or b) your personal data protection rights are being violated by any processing carried out by us, you have the right to lodge a complaint with the Hellenic Data Protection Authority-HDPA (postal address: 1-3 Kifisias Ave,P.C. 115 23, Athens, website: https://www.dpa.gr/, tel: 210 6475600, e-mail:contact@dpa.gr) or the competent data protection authority of your country of residence (within the EU).
- How will you be informed about potential updates to this Data Protection Notice?
We will update this Data Protection Notice whenever necessary. If there are significant changes to this Notice or to the way we use your Personal Data, we will notify you either by posting an announcement in a prominent place within our website before the changes take effect or by any other appropriate means. We encourage you to periodically read this Notice to keep updated on how your Data is being protected.