Privacy Policy

1. Data controller

Cretan Prime Group L.P.
Trading name: KYDORA Real Estate & Investments
Platanias, Chania, Greece
info@kydora.gr
+30 2821 821 705

For any question about this policy or our processing of your data, contact us using the details above.

2. Data we collect

Depending on how you interact with us, we may collect:

• your name, email address, telephone number and preferred contact method,
• information about a property you own or seek, such as location, type, budget, features and timeframe,
• the content of messages, enquiries, appointments and other communications,
• information submitted through the website, email, telephone or Meta Lead Forms,
• technical data such as IP address, device or browser type and cookie data, where used.

Please do not send sensitive personal data unless it is strictly necessary and we have requested it through an appropriate secure method.

3. Purposes of processing

We use personal data to respond to enquiries, arrange communications and appointments, recommend or assess properties, provide real estate and advisory services, prepare or perform an engagement, comply with legal obligations and protect our rights, security and business operations. We send promotional updates only when an appropriate lawful basis applies and an opt-out is available.

4. Lawful bases

Depending on the circumstances, we rely on:

• steps taken at your request before entering into a contract or performance of a contract,
• compliance with a legal obligation,
• our legitimate interests, including handling enquiries, security, fraud prevention and the establishment, exercise or defence of legal claims, balanced against your rights,
• your consent where required, particularly for optional updates or non-essential cookies.

Where processing relies on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

5. Meta Lead Forms and social media

When you submit a lead form on Facebook or Instagram, Meta collects the information you choose to provide and makes it available to KYDORA. Meta also processes data under its own policy and, depending on the feature, may act as an independent controller. Once received, KYDORA uses the lead information under this policy, mainly to contact you about the enquiry you submitted.

Meta Privacy Policy ↗

6. Recipients

Your data may be accessed by authorised KYDORA personnel and, only where necessary, providers of hosting, email, contact management or technical support, professional advisers, lawyers, notaries, engineers, accountants, cooperating real estate professionals or other parties to a potential transaction, and public authorities where required by law. Providers acting for us must protect the data and use it only according to our instructions. We do not sell personal data.

7. Transfers outside the EEA

Some technology or social media providers may process data outside the European Economic Area. Where required, appropriate safeguards are used, such as a European Commission adequacy decision or approved Standard Contractual Clauses. You may request further information about the safeguards that apply by contacting info@kydora.gr.

8. Retention

We keep data only for as long as necessary for the purpose for which it was collected. As an operational rule, enquiries and leads that do not result in an engagement are kept for up to 24 months after the last meaningful contact. Optional marketing details are kept until you withdraw consent or object, with periodic review. If an engagement or transaction begins, relevant records are kept for its duration and afterwards for as long as tax, professional or other legal obligations require, or as needed to establish, exercise or defend legal claims. Data is then securely deleted or anonymised.

9. Your rights

Subject to the conditions of the GDPR, you may request access, correction, erasure, restriction and portability of your data, and object to processing based on legitimate interests or for direct marketing. You may also withdraw consent you have given. To exercise a right, email info@kydora.gr. We may request reasonable information to verify your identity and will respond within the GDPR time limits.

10. Complaint to the Hellenic DPA

You may lodge a complaint with the Hellenic Data Protection Authority: 1–3 Kifisias Street, 115 23 Athens, Greece, tel. +30 210 6475600, email contact@dpa.gr, www.dpa.gr ↗. We would appreciate the opportunity to consider your concern first, without limiting your right to contact the Authority.

11. Security

We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. Access is limited to people who need it for a lawful business purpose, and measures are reviewed in light of risk. No system can guarantee absolute security.

12. Cookies

The website may use strictly necessary cookies for basic operation. Analytics, functional or advertising cookies are enabled only where the required choice or consent is available. The current “Coming Soon” site does not install optional analytics or marketing cookies.

13. Policy updates

We may update this policy when our services, practices or legal obligations change. The revised version will be published on this page with a new effective date. We will provide additional notice of material changes where required.