Privacy Policy
Last updated: 23 September 2026
This Privacy Policy explains what personal data we collect when you visit our website or contact us, why we use it, who we share it with, how long we keep it and what rights you have.
We act in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Greek Law 4624/2019 and Greek Law 3471/2006 on electronic communications.
The website carries out no transactions and takes no payments. It is purely informational and receives only contact messages and appointment requests. If a working relationship with us follows from such an enquiry, you will be informed separately about the processing it involves.
Business details
- Legal name
- Panagiotis Mantis
- Legal form
- Sole proprietorship
- Trading as
- PM Real Estate
- Registered address
- Evrou 32, 115 27 Athens, Greece
- Business activity
- Bookkeeping services, real estate brokerage and related activities
- Tax office (Δ.Ο.Υ.)
- ΚΕΦΟΔΕ
- Company registry no. (Γ.Ε.ΜΗ.)
- 164566803000
- Real estate brokers' registry no.
- 405045
1. Who is responsible for your data
The data controller is the business identified above. You can reach us about anything concerning your personal data at the email address or phone numbers listed.
We have not appointed a Data Protection Officer, as the conditions of Article 37 GDPR do not apply to our activity; your requests are handled directly by the business.
2. What data we collect
a) Data you give us:
- Contact form: your name, email address, phone number (optional) and the content of your message.
- Viewing appointment request: your name, email address, phone number (optional), the date and time slot you choose, the property you are interested in, any note you add and the language you were browsing in.
- When you call or email us: whatever details and content you choose to share.
b) Data recorded automatically by our hosting provider: the website is hosted with Hostinger. Like any web server, the provider keeps technical logs containing your IP address, the date and time of the request, the page requested, your browser and operating system type and any referring page. These logs exist solely to operate, secure and troubleshoot the website.
c) What we do NOT do: we run no website analytics (such as Google Analytics), no advertising cookies, tracking pixels or profiling tools; we carry out no automated decision-making or profiling within the meaning of Article 22 GDPR; and we never sell or rent personal data.
d) Administrator accounts: for our own staff we store a name, email address and a hashed password so they can access the website's management area.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your message and informing you about properties | Contact form details | Art. 6(1)(b) GDPR (steps prior to entering a contract) and Art. 6(1)(f) (our legitimate interest in answering enquiries) |
| Arranging and confirming property viewings | Appointment request details | Art. 6(1)(b) GDPR |
| Keeping the website secure, stable and free of abuse | Server logs, IP address | Art. 6(1)(f) GDPR (legitimate interest in system security) |
| Remembering your language preference | PREFERRED_LOCALE cookie | Art. 6(1)(f) GDPR; exempt cookie under Art. 4(5) of Law 3471/2006 |
Where we rely on legitimate interests, we have assessed that the processing is limited in scope, expected by you and does not override your rights. You may object at any time (see section 8).
4. Cookies and similar technologies
The website uses only the cookie listed below. It serves no advertising or analytics purpose, which is why you are not shown a consent banner: it is a user-preference cookie, exempt from the consent requirement under Art. 4(5) of Law 3471/2006.
| Cookie | Purpose | Lifetime |
|---|---|---|
| PREFERRED_LOCALE | Remembers the language you chose to browse the site in | 12 months |
You can delete or block cookies at any time through your browser settings. If you block the language cookie the site still works, but it will pick a language from your browser settings on each visit.
5. Who we share data with
We do not sell or commercially exploit your data. It may be accessed by:
- Our authorised staff, in the course of their duties.
- Our website and database hosting provider (Hostinger), acting as a processor on infrastructure within the European Union.
- The email service provider through which we receive and answer your messages and appointment notifications.
- The owner or manager of the property, to the extent necessary to carry out the viewing you asked for.
- Public authorities, where we are required by law or where necessary to establish, exercise or defend legal claims.
We do not transfer data outside the European Economic Area. Should a provider use infrastructure outside the EEA, the transfer is covered by a European Commission adequacy decision or by Standard Contractual Clauses.
6. How long we keep it
| Category | Retention |
|---|---|
| Contact form messages | Up to 24 months from our last exchange, unless a working relationship has begun |
| Viewing requests and appointments | Up to 24 months from the appointment date |
| Server logs | Per our hosting provider's policy, typically up to 12 months |
| Administrator accounts | For as long as the employment or collaboration lasts |
Once these periods expire, the data is deleted or anonymised.
7. Security
The website is served exclusively over an encrypted connection (HTTPS). Access to the management area requires a username and password, passwords are stored as one-way hashes, and administrator sessions expire automatically. We take regular backups and limit data access to those who need it.
If a data breach occurs that is likely to put your rights at risk, we will notify the Hellenic Data Protection Authority within 72 hours and, where required, you directly.
8. Your rights
Under Articles 15-22 GDPR you have the right to:
- Access your data and obtain a copy of it.
- Have inaccurate data corrected or incomplete data completed.
- Have your data erased ("right to be forgotten") where there is no longer a reason to keep it.
- Restrict processing.
- Receive the data you provided in a structured, machine-readable format and have it ported.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time where processing is based on it, without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, email or call us. We reply without undue delay and in any event within one (1) month; that period may be extended by a further two months for complex requests, in which case we will tell you. Exercising your rights is free of charge. We may ask for further information to confirm your identity.
If you believe your data is being handled unlawfully, you may lodge a complaint with the Hellenic Data Protection Authority: 1-3 Kifissias Avenue, 115 23 Athens, Greece, tel. +30 210 6475600, email contact@dpa.gr, www.dpa.gr.
9. Children
This website is intended for adults. We do not knowingly collect data from anyone under 16. If we learn that we have received such data without the consent of a parent or guardian, we delete it.
10. Property details and photographs
Listings contain property details and photographs supplied to us by owners or clients. Listings do not identify the owners. If you are an owner and want a listing amended or withdrawn, please contact us.
11. Third-party links
The website may contain sharing links to third-party platforms. You only reach them by your own action, and they are governed by their own terms and privacy policies, for which we are not responsible.
12. Changes to this policy
We may update this policy, particularly if our services or the legal framework change. The version in force is always published on this page with an updated date. We suggest you check it from time to time.