Privacy policy

Who we are

The controller of your personal data is Α.Β.Λ. ΑΝΑΠΤΥΞΙΑΚΗ Ε.Π.Ε. (A.V.L. Anaptyxiaki E.P.E.), the company behind Hydra Bay Residences (“A.V.L.”, “we”, “us”).

• Legal form: Greek limited liability company (Ε.Π.Ε.)
• Registered office: Zaimi 7, 151 27 Penteli, Attica, Greece
• General Commercial Registry (GEMI) number: 005155301000
• Tax ID (ΑΦΜ): 999649890
• Email: alexanderleandros@gmail.com
• Phone: +30 697 720 2434

Full company details are in our Legal notice.

This policy covers this website and the enquiries you send us, through the site or directly. The site is not aimed at people under 18.

In short

• We use your details to answer your enquiry and, if you buy a home, for the purchase.
• Only A.V.L. staff read your enquiry.
• We email you news only if you tick the box on the form.
• We never use analytics or advertising cookies without your consent.
• Some of our providers are in the USA; those transfers are protected by EU safeguards.
• You can ask to see, correct or delete your data, or object to its use: write to alexanderleandros@gmail.com.

Your enquiry and our replies

When you send the enquiry form, we receive:

• Your name
• Your email address
• Your phone or WhatsApp number
• The home or type of home you are interested in
• How you would use it
• How you would like us to reply
• Your message
• The language of the site and the page you sent the form from

We use these details, and anything you send us directly by email, phone or WhatsApp, to answer you and to take the steps you ask for before a possible purchase. Legal basis: Article 6(1)(b) of the General Data Protection Regulation (GDPR), steps taken at your request before entering into a contract.

Only your name and one way to reach you are required; without them we cannot reply. Everything else is optional. Please do not send us sensitive information, such as details about your health.

The form passes your enquiry through our website’s server and emails it to our company mailbox (info@vipbeachvilla.com), where only A.V.L. staff read it. It goes nowhere else: no customer database and no spreadsheet.

We reply the way you prefer: by email from our mailbox, by phone, or by WhatsApp from the WhatsApp account of A.V.L.’s owner. If you use WhatsApp, WhatsApp’s own privacy policy also applies.

Optional news by email

If you tick the optional box on the form, we will email you occasional news about Hydra Bay Residences. The box starts unticked, and leaving it that way does not affect your enquiry. We send no promotional messages without this consent.

Legal basis: your consent (Article 6(1)(a) GDPR). To show that you agreed, we record the wording of the box, the language and the time with your enquiry.

You can unsubscribe at any time by replying “unsubscribe” or by writing to alexanderleandros@gmail.com. This does not affect our replies to your enquiry.

Security and server logs

To limit repeated submissions of the form, our server keeps the sender’s IP address in memory for about 10 minutes.

Our hosting provider, Vercel, keeps technical logs for a short period: IP address, browser and the pages requested.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in keeping the site and the form secure and working.

The location map

When you scroll to the map on the Location page, your browser loads its images directly from Esri and, as a fallback, from the OpenStreetMap Foundation, so they receive your IP address and browser information. The map sets no cookies. Legal basis: Article 6(1)(f) GDPR, our legitimate interest in showing you where the homes are.

If you buy a home

If you go on to reserve or buy a home, we use your details to prepare and carry out the reservation agreement and the purchase (Article 6(1)(b) GDPR). We also use them to meet our legal duties, for example under Greek tax, accounting and notarial rules (Article 6(1)(c) GDPR). Some details are required by law or for the contract; we will tell you which at the time.

For this, your data may go to the notary, lawyers, engineers, our accountant, banks and public authorities, as needed for the purchase or required by law.

Our legitimate interests

Where we rely on legitimate interests (Article 6(1)(f) GDPR), these are:

• Keeping the website and the enquiry form secure and working
• Showing you where the homes are, on the Location map
• Keeping records of our correspondence and dealings with you, to establish, exercise or defend legal claims

You can object to this use of your data; see “Your right to object”.

Who receives your data

We use these providers to run the site and handle enquiries:

• Vercel Inc. (USA): hosts the website and runs the enquiry form (currently in the USA).
• Resend (Plus Five Five, Inc., USA): delivers your enquiry to our mailbox. Emails are sent from the EU; message data is stored in the USA.
• Fusioned (Greece): hosts our company mailbox, info@vipbeachvilla.com, where enquiries arrive and from which we reply.
• WhatsApp Ireland Ltd (Meta, Ireland): if you choose WhatsApp.
• Esri (Environmental Systems Research Institute, Inc., USA) and the OpenStreetMap Foundation (UK): the images for the Location map.

If you buy a home, your data may also go to the parties named in “If you buy a home”.

Transfers outside the EEA

Some of these providers are outside the European Economic Area (EEA): Vercel, Resend, Esri and Meta (for WhatsApp), and Google if you accept analytics or advertising cookies, are based in the USA or store data there. They are certified under the EU–US Data Privacy Framework, so transfers to them rely on the European Commission’s adequacy decision of 10 July 2023. Where a transfer is not covered by a certification, we rely on the Commission’s standard contractual clauses (Decision (EU) 2021/914).

The OpenStreetMap Foundation is in the United Kingdom, which the Commission recognises as providing adequate protection.

You can ask for a copy of these safeguards at alexanderleandros@gmail.com.

How long we keep it

• Enquiries and correspondence with people who do not buy: deleted 24 months after our last contact (longer only if we need them for a legal claim that has arisen).
• News by email: until you unsubscribe.
• Buyers’ records: as long as Greek tax, accounting and notarial rules require.
• IP addresses used to limit repeated submissions: about 10 minutes.
• Hosting logs: the short period set by Vercel, our hosting provider.

Your rights

You have the right to:

• Access your data and get a copy
• Have inaccurate data corrected (rectification)
• Have your data erased
• Have its use restricted (restriction of processing)
• Receive the data you gave us in a common, machine-readable format, or have it sent to another organisation (portability)
• Withdraw your consent at any time, without affecting our use of your data before then

To use these rights, or your right to object below, write to alexanderleandros@gmail.com. We will answer within one month and may ask you to confirm your identity.

We make no decisions about you by automated means alone, and we do not use profiling.

Your right to object

You can object at any time, for reasons relating to your situation, to our use of your data based on legitimate interests. We will then stop, unless we have compelling grounds that outweigh your interests and rights, or need the data for legal claims.

You can also object at any time, without giving a reason, to the use of your data for direct marketing, including our news by email. We will then stop using it for that purpose.

To object, write to alexanderleandros@gmail.com.

Making a complaint

You can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias Ave 1–3, 115 23 Athens, Greece; tel. +30 210 6475600; complaints@dpa.gr; www.dpa.gr. You can also complain to the data protection authority of the EU or EEA country where you live or work, or where you believe the infringement took place.

Changes to this policy

We may update this policy, for example if we add or change a service. The date at the top of this page shows the latest version.