PERSONAL DATA PROTECTION POLICY

This website (hereinafter the “Website”) is owned and operated by the general partnership under the name Arcus O.E., with the distinctive title ARC BNB, established in Thessaloniki at 75 Ermou Street (hereinafter the “Company”).

Browsing and using the Website presupposes and entails your (hereinafter also “you”, “your”, “User”) express and clear acceptance of and consent to these Personal Data Protection Terms. The Company, as the controller of personal data, has taken all necessary measures for the maximum possible protection of your personal data in accordance with applicable law. However, the transmission of data over the internet is not entirely secure, and any transfer of data is at your own risk.

Personal Data Protection Terms

The use of the Website by the User presupposes and entails their unconditional agreement to the following:

1. User Identification

To register, the User will be asked for their full name, a contact telephone number and an email address. By registering, the User consents to the display of the name under which they registered, so that they can be searched for and found by the ARCUS office or its Associate who wishes to contact them through the Website. Under no circumstances will the Company ask the User for information regarding bank accounts or tax details.

When you visit this website, the following are automatically collected:

• Information about the pages you visit on the website
• The date and time of your visit
• Your IP address
• Your web browser
• The website (URL) you visited before this one, and
• Certain “cookies” (see Section 2.1 below)

In addition, any information you submit when using the website will be collected.

In cases where you are asked to provide any additional personal data, you are not obliged to do so.

2. Cookies and Google Analytics

2.1. Cookies

This website uses so-called cookies. A cookie is a small file that may be installed on your computer when you visit a website. Cookies are generally used to provide a website’s visitors with additional functionality during their visit. For example, they may be created to record your visit and support your navigation of the website, help you continue from where you left off, and/or remember your preferences and settings should you visit the website again. Cookies do not access, read or modify any other data on your computer.

Most of the cookies used on the website are so-called “session cookies”. They are deleted automatically as soon as you leave the website. Persistent cookies, on the other hand, remain on your computer until you delete them from your browser. We use persistent cookies in order to recognise you the next time you visit our website.

If you wish to control the cookies installed on your computer, you can change your browser settings so that it notifies you whenever a website wants to install a “cookie”, or you can block the installation of “cookies” altogether. You can also delete cookies that have already been installed on your computer. Consult the “Help” section of your browser for more information.

On your first visit, a dedicated consent banner is displayed. Analytics and statistics cookies (e.g. Google Analytics) remain inactive until you expressly give your consent, by means of Google Consent Mode v2 technology. You can withdraw your consent at any time by deleting the cookies from your browser.

2.2. Google Analytics (GA4)

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), via Google Tag Manager. GA4 uses cookies and similar technologies that help us analyse how you use the website (e.g. which pages you visit and how you interact with them). GA4 masks/anonymises IP addresses by default and does not store them. Data collection through GA4 is activated only if you have given the relevant consent via the cookie banner (Google Consent Mode v2).

You can opt out of Google Analytics data collection by installing the browser opt-out add-on: https://tools.google.com/dlpage/gaoptout. More information about Google’s processing of data is available in Google’s Privacy Policy: https://policies.google.com/privacy.

3. Purpose of processing personal data

We process all of your personal data in accordance with the law. The Company uses your data to provide you with the services of its website, to measure the Website’s traffic and Users’ requirements (producing website-usage statistics), to improve and further develop the website, to respond to your requests and messages, and to express interest in cooperation, based on your preferences — whether these have been expressly declared to the Company or are inferred from your navigation choices on the Website, your expressions of interest and your “favourites” selections — and to analyse your data on an aggregated basis for business-intelligence purposes.

4. Legal basis for processing data

The legal basis for processing your data is that it is necessary for the purposes of the legitimate interests pursued by our Company (in accordance with Article 6(1)(f) of the European General Data Protection Regulation, “GDPR”).

When we are bound to you by a contract for the provision of real-estate brokerage services, the legal basis for collecting and otherwise processing your personal data gathered in connection with that agreement is the necessity to perform the contract (Article 6(1)(b) GDPR).

Furthermore, where none of the above legal bases applies, your personal data may be transferred as set out in Section 5 below with your consent, which will be requested separately (Article 6(1)(a) GDPR). Where consent is requested, you will be able to withdraw it at any time. Doing so will not render unlawful the prior processing of your data carried out on the basis of your consent before its withdrawal.

5. Disclosures and transfer of data

When deemed necessary for the purposes described above, we will transfer your personal data to the following recipients:

• To our offices in Thessaloniki.
• To other IT service providers that we use.
• Banks and third parties (e.g. Notaries, Lawyers, engineers, other external associates of ours, etc.), where necessary to perform the contract between us.

One such service is the arrangement of financing (a mortgage or other loan) for a property. Our company will transmit directly to cooperating Mortgage Credit Intermediaries licensed by the Bank of Greece, under par. 4 art. 28 of Law 4438/2016, the following: (a) the User’s personal data described above, namely full name, telephone number, email address, etc.; (b) the information completed by the User in a dedicated expression-of-interest form regarding the reason for financing, the type of property, the desired loan amount and timing, whether or not a specific property has been found, annual net household income, etc.; and (c) specific information about the property (property price, category, subcategory, location). The purpose of the above is for users to be informed of the terms, conditions and procedure for granting such property financing. The above transfer of personal data to the cooperating Mortgage Credit Intermediaries licensed by the Bank of Greece under par. 4 art. 28 of Law 4438/2016 is conditional upon the completion of the aforementioned dedicated expression-of-interest form for the acquisition of, or other actions concerning, a property through financing. Submission of the form will also operate as the granting of consent to that transfer.

Some of the recipients mentioned above are established in, or process personal data outside, your country. The level of personal-data protection in another country may not be the same as in your country. Nevertheless, our Company transfers your personal data only to countries that the European Commission has decided provide an adequate level of data protection, or we take measures to ensure that all recipients provide an adequate level of personal-data protection.

6. Retention period of your data

We retain and process your data only for as long as is necessary to fulfil the purposes for which it was collected.

We will retain the data we collect automatically when you visit the website for a period not exceeding one year.

The same applies to your personal data that we collect in the context of performing a contract we have concluded with you.

7. Rights and remedies

Under the applicable personal-data protection legislation, you have the right (i) to check whether and what kind of personal data we hold about you and to access or request copies of such personal data, (ii) to demand the correction, completion or deletion of your personal data that is inaccurate or obtained by means not compliant with the applicable rules, (iii) to request that we restrict the collection, processing or use of your personal data, (iv) in exceptional cases, to object on legitimate grounds to the processing of your personal data, (v) insofar as the processing of your personal data is carried out on the basis of your consent, to request the portability of your data, (vi) to know the identity of the third parties to whom your personal data has been transferred, and (vii) to provide instructions on how your personal data is to be managed after your death.

In any case of breach, and also where you wish to exercise the above rights, you may either call 6989010606 or send a relevant email to info@arcusrealestate.gr so that we are informed of the breach and send you the relevant form to complete for the exercise of your rights. In such a case, we respond to your request within one month, unless the request is particularly complex or there is a large number of similar requests.

Where the exercise of your right is not satisfied, for more information about your rights and about the European Union’s General Data Protection Regulation 2016/679 which governs them, you may contact the Company’s Data Protection Officer at the following details: Athanasios A. Gkiourkas, Lawyer-DPO, 65 Ermou Street, Thessaloniki, Tel.: 6982447494, Email: athanasiosgkiou@gmail.com

8. Miscellaneous

The Company reserves the right to unilaterally amend, update or revise this Personal Data Protection Statement whenever it deems necessary and always in accordance with commercial good faith. The amendment or update will take effect from the moment this text is updated for any change or modification. In such a case, the User’s consent will be requested anew.

This Personal Data Protection Statement is governed by Greek law. For the resolution of any dispute arising from it, the courts of Thessaloniki shall have exclusive jurisdiction.

9. Contact the DPO

The Company’s Data Protection Officer: Athanasios A. Gkiourkas, Lawyer-DPO, 47 Vasileos Irakleiou Street, Thessaloniki, Tel.: 6982447494, Email: athanasiosgkiou@gmail.com