PERSONAL DATA PROTECTION
The protection of the privacy, personal information, and data of all who visit our website is our priority so that you can enjoy all our services with the greatest possible security.
As part of this ongoing effort, we will explain below the nature and method of processing the data we handle, as well as your rights regarding it. Browse and using the Website presupposes and implies your explicit and clear acceptance and consent to these Personal Data Protection Terms. The Company, as the data controller, has taken all necessary measures for the maximum possible protection of your personal data in accordance with current legislation. However, the transmission of data over the internet is not completely secure, and any data transfer is done at your own risk.
i) What is personal data?
Personal data is any information that refers to you, the natural persons who use this website, and can lead to the knowledge or verification of your identity. Indicatively, such information includes your full name, address, phone number, e-mail, etc.
The processing of personal data is any act or series of acts performed with or without the use of automated means on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction (Articles 4(1)&(2) of the General Data Protection Regulation).
ii) Information Collection
KYMBA.GR has designed its website so that its users can visit it without having to reveal their identity unless they wish to do so. Visitors to our website are asked to provide us with their personal data only if they want to register on our website and/or send an email to info@kymba.gr.
The personal data our company collects does not in any case concern special categories of data as specified by European and National legislation, specifically data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation. The personal data our company collects does not concern criminal convictions, offenses, or related security measures.
Therefore, when you visit our Website, when you send us an e-mail, and when you contact us through our Website’s contact form, we necessarily, and for the sole purpose of providing our services and communicating with you, collect, process, and use some of your personal data. These actions are taken only with your consent and within the strict framework of performing the service we provide to you. We explicitly state that we comply with the provisions of European and National law regarding the protection of your data and guarantee that we manage it in the most secure and reliable way to minimize any risk of leakage or destruction.
We note that in cases where your personal data is provided by you in the context of your communication with us via e-mail or through the relevant contact form, it is presumed that you have consented and given your permission for this personal data to be used exclusively for the purpose of serving you, as this purpose will be determined by the relevant content of your communication with us.
In summary, the collection, maintenance, and processing of your personal data by us is based on your consent and, depending on the case, on the necessity of its collection, maintenance, and processing for the execution of contracts between us, the provision of services to you, or the response to your requests and/or questions.
iii) Data Processing
We process all data in accordance with the law. The Company uses the data to provide you with the services of its website, to measure the traffic of the Website and the requirements of the Users (production of website usage statistics), to improve and further develop the website, to respond to your requests and messages, to send you informational material about its new activities, promotional actions, events, news & announcements regarding its activity and any important developments in the real estate market sectors, to send you informational and/or advertising notes – newsletters, and also to express interest in cooperation, based on your preferences, as these have either been explicitly stated to the Company or are inferred from your Browse choices on the Website, your expressions of interest, your “favorites” choices, and to analyze your data on an aggregate basis for business intelligence purposes.
How we use your personal data We collect, process, and use your personal data when you visit our site or when you provide it to us through some communication with us. We use your personal data, always being bound by European and National legislation and by this privacy policy. In many cases, your personal data is used after anonymization or pseudonymization.
a) Newsletters – Promotional Actions – Offers If you have provided the relevant consent, we may contact you at the email address you have already provided during your communication with us, proposing products and services and for other promotional actions and special offers. You can object to this email function at any time.
We want you to enjoy reading our emails, and in order to continuously improve their content and use this data for statistical purposes, we measure and store message open and click-through rates.
b) Miscellaneous We collect, process, and store the personal data and technical information we obtain from your access to our website, from any telephone communication or communication by email or through a contact form: a) only within the scope of the specific purpose of your communication with us, b) to the extent that this is necessary for the prevention or prosecution of abuse or other illegal behavior on our website, c) if required by Law or legally compelled by a state authority, for example, in view of an official directive or a judicial or other decision of the Authorities, and d) to safeguard our rights and claims.
c) LEGAL BASIS FOR DATA PROCESSING The legal basis for the processing of your data is its necessity for the fulfillment of the purposes of the legitimate interests pursued by our Company (in accordance with Article 6 (1f) of the European General Data Protection Regulation “GDPR”). When we enter into a contract with you concerning the provision of real estate services, the legal basis for the collection and general processing of your personal data collected in connection with this agreement is the necessity for the performance of the contract (Article 6(1b) GDPR). Furthermore, where none of the above legal bases exist, your personal data may be transferred with your consent, which will be requested separately from you (Article 6(1a) GDPR). When consent is requested, you will be able to withdraw it at any time. This action will not render the previous processing of your data, for which you gave your consent before withdrawing it, unlawful.
IV) Data and Transaction Security
The security of your personal data is a high priority for us. Therefore, we protect your data, which is stored with us, through appropriate technical and organizational measures to effectively prevent loss or misuse by third parties. Specifically, our employees who process personal data are bound by confidentiality. To ensure the long-term protection of your data, the technical security measures are regularly monitored and, if necessary, updated with the corresponding prevailing technology standards.
We apply the appropriate level of security and have therefore implemented reasonable physical, electronic, and administrative procedures to safeguard the data we collect from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed. Our information security policy procedures are closely aligned with widely accepted international standards and are regularly reviewed and updated, whenever necessary, to meet our business needs, changes in technology, and regulatory requirements. Access to your personal data is granted only to staff or direct associates of the Company who are required to have such information to serve orders. In the event of a data breach containing personal data, the Company will comply with applicable law regarding breach notification.
V) Data Retention Period
We retain and process your data only for as long as is necessary to fulfill the purposes for which it was collected. We will retain your data, which we collect automatically when you visit the website, for a period not exceeding six months. If you have subscribed to our newsletter, we will retain your email address until you unsubscribe from our newsletter. If you have registered on our website by creating an account, we will retain your data for as long as your account exists and thereafter only for as long as we are legally obliged to retain your data. Furthermore, we will retain your personal data which we receive from other members of our franchise network at least until the end of your business relationship with any of these network members and thereafter for as long as the legal obligation to retain or any potential claims have not expired. The same applies to your personal data, which we collect in the context of performing a contract we have concluded with you.
VI) Rights and Remedies
Under the current legislation for the protection of personal data, you have the right (i) to check if and what kind of personal data we hold and to have access to or request copies of this personal data, (ii) to demand correction, completion, or deletion of your personal data that is inaccurate or obtained by means not compliant with applicable regulations, (iii) to request that we restrict the collection, processing, or use of your personal data, (iv) in exceptional cases, not to allow for legitimate reasons the processing of your personal data, (v) to the extent that the processing of your personal data is done with your consent, to request the transfer of your data, (vi) to know the identity of third parties to whom your personal data has been transferred and (vii) to provide instructions on how to manage your personal data after your death.
MISCELLANEOUS
The Company reserves the right to unilaterally modify, renew, or revise the Personal Data Protection Statement, whenever it deems necessary and always in accordance with business ethics. The modification or renewal will be effective from the moment this text is updated for any change or modification. In such a case, the User’s consent will be requested again.
This Personal Data Protection Statement is governed by Greek Law. For the resolution of any dispute that may arise from it, the courts of Athens will be exclusively competent.
VII. Amendments to this Personal Data Protection Information
We always want to present our customers with attractive product offers and therefore, to continuously adapt our range of products to the wishes of our customers. Consequently, it may be necessary to renew and amend this data protection information again. For this reason, we recommend that you stay informed about any amendments to this page on a regular basis.
To the extent that such amendments may affect the consent granted by you, we will inform you separately in this regard.