Draft for company review — not yet an approved privacy notice. The legal entity, recipients, retention periods and cookie inventory must be confirmed before publication.
1. Who is responsible for your information?
This notice concerns the website operated under the Horizon Properties brand. Data controller: [insert registered legal entity, registered address and company registration details]. Privacy contact: [confirm designated email]. General enquiries can be sent to info@horizonproperties.gr.
2. Information submitted through the website
When you contact us, you may provide your name, email address, telephone number, country, preferred contact method, project or unit of interest, budget, property requirements, purchase timeframe and message. Provide only information relevant to your enquiry. Do not send passport copies, bank details or sensitive personal information through the general enquiry form.
3. Purposes and legal bases
Proposed processing to confirm: responding to a purchase or viewing request may be necessary to take steps at your request before entering a contract (Article 6(1)(b) GDPR). General correspondence and proportionate website security may rely on legitimate interests (Article 6(1)(f)), subject to a documented assessment. Records required by law may rely on a legal obligation (Article 6(1)(c)). Optional marketing or technologies requiring consent must rely on a separate valid consent where applicable (Article 6(1)(a)). An enquiry must not automatically subscribe you to marketing.
4. Hosting, forms, maps and media
The website is built with Framer and includes externally hosted maps and media. Loading these resources can transmit technical information such as an IP address and browser details to the provider. The About map uses OpenStreetMap tiles and Leaflet files served through unpkg. Other pages and services must be included in the final inventory. [Confirm hosting arrangements, form delivery destinations, email provider, CRM, analytics, advertising services and each recipient’s role.]
5. Sharing and international transfers
The final notice must identify who receives enquiry information and why, including service providers and any project partners. [List the confirmed recipients or sufficiently specific categories.] If information is transferred outside the European Economic Area, identify the relevant countries and the applicable adequacy decision or safeguards, together with how to obtain a copy. Do not assume a provider keeps all information in the EU without checking its contract.
6. How long information is retained
[Insert the approved retention period or clear criteria for unanswered enquiries, active buyer discussions, transaction records, marketing records, security logs and consent records.] Information should be kept only as long as necessary for its stated purpose, subject to applicable legal obligations and legitimate claims.
7. Cookies and similar technologies
The final notice must list the technologies actually used, their providers, purposes, durations and whether they are essential. Non-essential technologies requiring consent must remain disabled until consent is given, with an accessible way to reject them and withdraw consent. [Complete a cookie and storage audit and document the preference controls before publication.] Browser settings alone do not replace required consent controls.
8. Your data protection rights
Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction, portability or object to processing. You may object to direct marketing at any time. Where processing relies on consent, you may withdraw consent without affecting the lawfulness of processing before withdrawal. Send requests to the confirmed privacy contact. A proportionate identity check may be required. Requests are normally answered within one month; any lawful extension must be explained.
9. Complaints and further information
You may complain to the Hellenic Data Protection Authority (www.dpa.gr) or another competent supervisory authority. [Confirm whether any solely automated decisions with legal or similarly significant effects are made; if so, provide the required explanation.] The final notice must also explain which fields are mandatory, why they are required and the consequences of not supplying them.
10. Updates
Effective date: [insert approval date]. Material changes to this notice will be explained through an appropriate website notice.