Who We Are
This website (skiathoshomes.com, “Skiathos Homes”) is operated by Skiathos Anaptiksiaki I.K.E., which acts as the data controller under the EU General Data Protection Regulation (Reg. (EU) 2016/679, “GDPR”) and Greek Law 4624/2019. Our company and registry details are set out in the Terms of Use.
Write to us on any data-protection matter at info@skiathoshomes.com. We are not required to appoint a Data Protection Officer.
Data We Collect & Why
We collect only what we need, on the following legal bases (GDPR Art. 6):
- Identity & contact (name, email, phone) — from our forms, to respond to your request. Basis: consent and/or pre-contractual steps.
- Messages you send us (your phone number, profile name and the content of the conversation) — if you contact us on WhatsApp, to answer you and to keep a record of what was agreed. Basis: consent and/or pre-contractual steps.
- Buyer profile (budget, timeline, purchase purpose, funding source, mortgage/loan status, profile/LinkedIn, location) — from the clearance, off-market and standing land brief forms, to assess your interest before private information is released, and to match a brief against a suitable opportunity. Basis: explicit consent.
- Property documents you upload — from the owner form, to assess a property you wish to sell. Basis: pre-contractual steps / consent.
- Confidentiality records (name, email, IP, browser, time, terms version and property reference where applicable) — when you accept the Private Access Terms, as evidence of agreement. Basis: legitimate interests / contract.
- Technical & security data (IP, browser, device, access & view logs) — automatically, for security, spam prevention and access control. Basis: legitimate interests.
- Usage & campaign attribution (cookieless — see §8) — page interest, campaign parameters and Google Ads click identifiers, linked through pseudonymous server-side visitor/session keys so we can understand campaign performance and connect successful property enquiries. Basis: legitimate interests.
We do not collect special-category data (health, religion, etc.) — please do not submit it through our forms.
Who Sees It
Access is strictly limited to the core Skiathos Homes team and to essential processors acting on our behalf — our hosting provider (which stores the site and database) and the host's email delivery for office notifications. If you choose to contact us on WhatsApp, that conversation is carried and stored by WhatsApp Ireland Ltd. (Meta) under its own privacy terms, over which we have no control; you can always write to us by email instead. We disclose data to public authorities or advisers only where required by law or to establish, exercise or defend legal claims. We never share your mandate with other brokers for their own marketing.
International Transfers
Your data is stored within the EU/EEA (Greece). We do not intentionally transfer personal data outside the EEA. WhatsApp is the exception you should be aware of: messages sent to us there are handled on Meta’s global infrastructure and may be processed outside the EEA under that company’s own safeguards. Some pages also load external services that receive your IP address and basic browser information: icons are delivered through the cdnjs network (Cloudflare), some emoji images may be loaded from WordPress.org, and a property video is loaded from YouTube (privacy-enhanced mode) or Vimeo only if you choose to play it. Our maps are drawn by this site from OpenStreetMap data, without an external map service. Where these services or email providers operate internationally, any such transfer relies on appropriate safeguards (e.g., EU Standard Contractual Clauses or adequacy).
How Long We Keep It
We keep personal data only for as long as it is reasonably needed for the purpose for which it was collected. The criteria include whether your request or relationship with us is still active, whether the information is needed to provide the requested service, and whether it must be retained for legal, accounting, security or claims purposes.
- Enquiries, buyer profiles and clearance data: while we handle your request and for a reasonable follow-up period afterwards.
- Owner property documents: while the assessment or instruction remains active, and afterwards only where reasonably needed for follow-up or legal purposes.
- Confidentiality records: for the term of the applicable Private Access Terms and afterwards where reasonably needed as evidence of the agreement or to handle a legal claim.
- Security/access logs & statistics: for limited operational periods in masked or aggregated form. Campaign-attribution events are limited to 400 days, and inactive attribution profiles are removed after 400 days.
When information is no longer needed under these criteria, it is deleted or anonymised. You may also ask us to review or delete your information, subject to any lawful reason that requires continued retention.
Data Security
We apply measures proportionate to a boutique operation: individually issued access keys held in restricted administrative storage and never included in public page content; keyed hashes for used-token markers; signed and HttpOnly session cookies; masking of IP addresses in analytics logs; private (non-public) storage of uploaded documents with restricted, authenticated download; and nonce, honeypot and rate-limit controls on form submissions.
Your Rights
Under the GDPR and Law 4624/2019 you may: access your data; request rectification or erasure; restrict or object to processing; request portability; and withdraw consent at any time (without affecting prior processing).
To exercise a right, email info@skiathoshomes.com; we respond within one month. You may also complain to the Hellenic Data Protection Authority (Α.Π.Δ.Π.Χ.), Kifissias 1-3, 115 23 Athens, www.dpa.gr.
Cookies & Statistics
We use only a few strictly-necessary cookies, and no advertising or third-party trackers. Our own Site Signals are cookieless: campaign parameters (UTM values and Google click identifiers) are kept in our WordPress database and associated with pseudonymous server-side visitor/session keys. Nothing is sent to Google and no campaign identifier is stored on your device. This lets us count paid visits and connect only successful property enquiries to a campaign. Network or browser changes can create a new pseudonymous visitor. Full cookie details are in our Cookie Policy.
Children & Changes
Our services are intended for adults; we do not knowingly collect data from minors. We may update this policy: the version published on this page is always the one in force, and material changes will be flagged in this section. If you need to know the terms that applied on a particular date, write to us and we will confirm them.