Privacy Policy

01Data controller

The data controller is StayCare IKE (StayCare Property Management).

Registered address: Leoforos Dimokratias 49, 57013 Oraiokastro, Greece.

VAT number: 803330057 · Tax Office (ΔΟΥ) Ampelokipon.

Email: contact@staycare.gr · Phone: +30 694 020 1436.

02Data we collect

We only collect data you give us, or data necessary for the secure operation of the website:

• Name, email and phone number.
• Area/location of the property.
• Property type, listing status (whether it is already on platforms), furnishing status and number of bedrooms.
• The free-text message you choose to send us.
• Browsing language (Greek/English) and the URL of the page from which the enquiry was submitted.
• Campaign attribution parameters (UTM or similar), where present in the link you arrived through.
• Reasonable technical and security data generated during your visit (e.g. server request data), for stability and protection of the website.

03Sources of collection

Data comes from the website contact form and from your direct communication with us (email or phone).

04Purposes of processing

• Answering your enquiry or question.
• Evaluating a potential cooperation for managing your property.
• Pre-contractual communication and preparing a proposal.
• Managing contacts and enquiries in a CRM system.
• Sending the communication you requested.
• Protecting the website, preventing misuse, and establishing, exercising or defending legal claims.

We do not send a newsletter and we do not carry out automated decision-making or profiling.

05Legal bases (GDPR Article 6)

• Article 6(1)(b): steps taken at your request prior to entering into a contract.
• Article 6(1)(f): our legitimate interests in handling enquiries, site security and defending legal claims.
• Article 6(1)(a): consent, only where it is explicitly requested from you.
• Article 6(1)(c): compliance with a legal obligation, where applicable.

06Recipients and processors

Access to data is limited to authorised StayCare personnel and to the providers necessary for our operations:

• Website hosting and infrastructure provider (Lovable).
• HubSpot, for contact and enquiry management (CRM).
• Google/Gmail, for email communication.
• External professional advisers (e.g. accounting or legal), where necessary.

07International transfers

Some of the above providers may process data outside the European Economic Area. Where this happens, the transfer relies on an adequacy decision, Standard Contractual Clauses or another lawful safeguard under Chapter V of the GDPR.

08Retention

• Enquiry and lead data: up to 24 months after the last meaningful communication, unless a cooperation begins, a longer legal retention obligation applies, or retention is required for legal claims.
• Contractual and accounting/tax data: for the statutory periods that apply.

09Security

We apply reasonable technical and organisational measures to protect your data. However, no transmission or storage of data over the internet can be considered absolutely secure, and we do not guarantee absolute security.

10Your rights

• Access to your data.
• Rectification of inaccurate or incomplete data.
• Erasure, where the legal conditions are met.
• Restriction of processing.
• Objection to processing based on legitimate interests.
• Portability, where applicable.
• Withdrawal of consent, where processing is based on it, without affecting the lawfulness of processing before withdrawal.

11Exercising your rights

You can exercise your rights by sending a request to contact@staycare.gr. We respond within the time limits set by the GDPR and may ask for information to verify your identity.

12Complaint to the supervisory authority

You have the right to lodge a complaint with the Hellenic Data Protection Authority: https://www.dpa.gr/

13Minors

The website is aimed at property owners and is not intended for children. We do not knowingly collect children's data. If we become aware of such data, we delete it.

14Cookies and local storage

• Strictly necessary functionality: technical elements required for the website to work correctly and securely.
• Enquiry attribution: we store campaign parameters (e.g. UTM) and the source page locally in your browser so we can understand where an enquiry came from.

We do not currently use third-party advertising or analytics tools. If optional analytics or marketing technologies are introduced in the future, appropriate notice will be given and, where required, your consent will be requested.

15Policy updates

We may update this Policy to reflect changes in our operations or in the legal framework. The current version is always published on this page together with the last updated date.