PRIVACY POLICY

Last updated: 14 August 2026

1. WHO WE ARE

Santheos provides real-estate information, property selection support and related services for investors interested in Greece and the Greek Golden Visa programme. For the personal data described in this notice, Santheos acts as the data controller.

Contact details:

Santheos

Mouson 24, Palaio Faliro, Athens, Greece

Email: info@santheos.com

Telephone: +30 210 982 7120

2. INFORMATION WE COLLECT

We may collect:

• Identity and contact data, such as your name, email address, telephone number, country and preferred contact method.

• Enquiry and qualification data, such as your property budget, investment interests, preferred locations, purchase timeline and messages you send us.

• Advertising lead data submitted through Google-hosted lead forms or other advertising platforms.

• Technical and usage data, such as IP address, device and browser information, pages viewed, referral source, campaign parameters and cookie choices.

• Communications and records created when you speak with us by email, telephone, WhatsApp, website form or in person.

• Transaction, due-diligence and documentation data where you ask us to assist with a property purchase or related professional services.

Please do not send passport, financial, health or other sensitive documents through a general enquiry form unless a Santheos representative has specifically requested them through an appropriate channel.

3. HOW WE USE YOUR INFORMATION AND OUR LEGAL BASES

We use personal data to:

• Respond to enquiries, assess your requirements and recommend suitable projects — to take steps at your request before entering into a contract and for our legitimate interest in providing relevant services.

• Contact you by email, telephone or WhatsApp about the enquiry you submitted — to take requested pre-contractual steps and for our legitimate interest in following up genuine enquiries.

• Manage appointments, property viewings, customer relationships and service delivery — to perform a contract or take requested pre-contractual steps.

• Prevent spam, fraud, abuse and security incidents — for our legitimate interests in protecting our business, website and users.

• Measure website and advertising performance and improve our services — based on your consent where cookies or similar technologies require it, and otherwise on our legitimate interests where permitted by law.

• Send marketing communications — with your consent where required. You may unsubscribe or object at any time.

• Meet accounting, tax, compliance and other legal obligations — to comply with applicable law.

Where we rely on legitimate interests, we consider your rights and reasonable expectations and use the data only where those interests are not overridden by your rights.

4. GOOGLE ADS, GOOGLE ANALYTICS AND COOKIES

Our website may use Google Ads, Google Analytics and related Google services to measure visits, advertising interactions and completed enquiries. Analytics storage is disabled by default until the relevant cookie consent is given through our cookie banner. You can accept, decline or change your choices using Cookie Preferences on the website.

If you submit a Google-hosted lead form, Google sends the information you chose to provide to Santheos. Google also processes information under its own privacy terms. We use lead-form information only to assess and respond to the enquiry, maintain appropriate records and prevent abuse.

We may also use Squarespace functionality, reCAPTCHA and similar security technologies to operate forms, prevent automated spam and protect the website.

5. WHO RECEIVES YOUR INFORMATION

We may share personal data only as necessary with:

• Website, hosting, analytics, advertising, email, communications, CRM and IT service providers, including Squarespace and Google.

• Professional advisers, lawyers, notaries, engineers, accountants, property owners, developers or other partners where this is necessary to answer your request or provide a service and you would reasonably expect the sharing.

• Public authorities where disclosure is required by law or necessary to protect legal rights.

We do not sell your personal data. Service providers act under appropriate contractual and confidentiality obligations.

6. INTERNATIONAL TRANSFERS

Some service providers may process data outside Greece or the European Economic Area. Where required, we rely on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism, together with appropriate safeguards.

7. HOW LONG WE KEEP INFORMATION

We keep personal data only as long as reasonably necessary for the purposes described above. As a general guide:

• General enquiry and lead records: up to 24 months after the last meaningful contact, unless you become a customer or a longer period is required for a dispute or legal obligation.

• Marketing records: until you withdraw consent or object, or after a reasonable period of inactivity.

• Contract, transaction, accounting and compliance records: for the period required by applicable Greek or EU law.

• Cookie and analytics data: according to the settings and retention periods of the relevant tools, and no longer than necessary.

We may retain a minimal suppression record to respect an unsubscribe or objection request.

8. YOUR DATA PROTECTION RIGHTS

Subject to the GDPR and applicable law, you may have the right to:

• Request access to your personal data.

• Ask us to correct inaccurate or incomplete data.

• Ask us to erase data in certain circumstances.

• Ask us to restrict processing.

• Object to processing based on legitimate interests or to direct marketing.

• Receive certain data in a portable format.

• Withdraw consent at any time, without affecting processing already carried out lawfully.

To exercise a right, email info@santheos.com with the subject “Data Protection Request”. We may need to verify your identity. You also have the right to complain to the Hellenic Data Protection Authority or another competent supervisory authority.

9. AUTOMATED DECISION-MAKING

Advertising platforms may use automated systems to measure or optimise ad delivery. Santheos does not use your enquiry data to make solely automated decisions that produce legal or similarly significant effects for you.

10. SECURITY

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or loss. No internet transmission is completely secure, so please use appropriate care when sending information online.

11. CHILDREN

Our services are intended for adults. We do not knowingly collect personal data from children through our enquiry forms.

12. CHANGES TO THIS NOTICE

We may update this policy when our services, legal obligations or technology change. The latest version and its effective date will be published on this page.

13. CONTACT

For privacy questions or requests, contact info@santheos.com or write to Santheos, Mouson 24, Palaio Faliro, Athens, Greece.