Legal
How we handle your data, and your rights
We ask for as little as we need: for most requests, a first name and an e-mail address. This notice explains what happens to it.
TPL S.A. as data controller
The controller of your personal data is TPL S.A., Ethnomartyron 40, 263 33 Patras, Greece (GEMI 143336716000). For anything about your data, write to us through the contact page and mark your message “Privacy”.
Data collected by each form
| Where | What | Required |
|---|---|---|
| Eligibility checker, when you ask for your summary | First name and e-mail; optionally surname, phone or WhatsApp, nationality, country of residence, language; your answers (family size, budget band, timeline) and the result shown | First name, e-mail, consent |
| Investor pack request | First name and e-mail; optionally the other contact fields and a residence of interest | First name, e-mail, consent |
| Video-call request | First name and e-mail; optionally the contact fields, your preferred times and time zone, call app, topics and family size | First name, e-mail, consent |
| Residence enquiry | First name and e-mail; optionally the contact fields, the residence, your interest and timeline | First name, e-mail, consent |
| With every request | The page you sent it from, the page you first landed on, the referring site and campaign tags if any; the country your connection comes from and your browser type | Recorded automatically |
We never ask for passports, bank statements or other documents through this site. Please do not send them.
Purposes and legal grounds
- To answer your request (send the pack, arrange the call, reply to your enquiry): steps you ask for before a possible contract, and your consent.
- To follow up on your request within a reasonable time: our legitimate interest in answering people who asked us about the residences. You can tell us to stop at any time.
- To keep the site secure and prevent spam (rate limits, automated-abuse checks): our legitimate interest.
We do not sell your data, and we do not use it for advertising profiles.
Processors and other recipients
- Cloudflare, which hosts the site and stores form submissions for us, acting on our instructions.
- The people at TPL S.A. who answer requests.
- If you choose WhatsApp, your conversation is handled by WhatsApp (Meta) under its own terms.
- Your lawyer or other people only if you ask us to include them.
We do not currently use Google Analytics or advertising tools on this site. If we add them, we will update this notice and ask for your consent where the law requires.
Processing beyond Europe
Cloudflare is a US company operating a global network. Where your data is processed outside the EEA, the transfer relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Retention periods
Form submissions are deleted automatically 24 months after they are received, unless they become part of a reservation or purchase file, which we keep for as long as the law requires. The address used for rate-limiting is kept for one hour.
Access, correction, erasure and complaints
Under the GDPR you can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Write to us through the contact page. You can also complain to the Hellenic Data Protection Authority.
Tools that decide nothing
The eligibility checker and the cost calculator run in your browser. They decide nothing about you: they show general information based on your answers, and only send anything if you ask for your summary.
Safeguards
The site is served over HTTPS only, form submissions are stored in access-controlled storage, and access is limited to the people who answer requests.
Updates, dated
We will update this notice when our practice changes; the date at the top shows the current version.
Speak directly with the developer
No agents in between. Ask anything, in English or Greek.