Santheos Privacy Policy
Last updated: 6 September 2026
This Privacy Policy explains how Santheos (“Santheos”, “we”, “us” or “our”) collects and uses personal data when you visit this website, submit an enquiry, request information about a property project, or communicate with our team.
1. Who is responsible for your data
Santheos operates this website and is the data controller for personal data collected through it. You can contact us at info@santheos.com, by telephone at +30 210 982 7120, or by post at Mouson 24, Palaio Faliro, Athens, Greece. Our Design & Architecture office is at Egeos 54, Kallithea, Athens, Greece.
2. Personal data we collect
When you contact us, we may collect your name, email address, telephone or WhatsApp number, country of residence, subject, message, preferred language, property interests, and any information you choose to provide.
When you use the website, our systems may process technical and security data such as your IP address, browser and device type, requested pages, timestamps, referral information, cookie choices, and diagnostic or security logs.
If you decide to proceed with a property or professional service, additional identity, financial, legal, family, source-of-funds, or transaction documents may be required. Where appropriate, separate privacy information will be provided for that process.
3. Why we use your data and our legal bases
- To answer enquiries and arrange consultations: to take steps at your request before a possible contract and for our legitimate interest in communicating with prospective clients.
- To provide project and property information: to take requested pre-contract steps and to provide accurate, relevant information.
- To deliver agreed services and manage transactions: for contract performance and compliance with legal obligations.
- To operate, protect, and improve the website: for our legitimate interests in security, fraud prevention, troubleshooting, and service quality.
- To send optional marketing communications: with consent where required. You may withdraw consent or object to direct marketing at any time.
- To keep legal, tax, accounting, and compliance records: to meet legal obligations and establish, exercise, or defend legal claims.
4. Contact forms and communications
Website form submissions may be stored securely in the WordPress administration area and are delivered to Santheos business email through our website mail service and Google Workspace. We use the information to respond to your request and manage any follow-up. Please do not send passports, bank records, or other sensitive documents through a general website form unless our team has specifically requested them through an appropriate channel.
We do not sell or rent personal data.
5. Cookies and analytics
We use essential cookies or local storage for functions such as security, language selection, and recording your privacy choices. Optional Google Analytics and Google Tag Manager services are loaded only after analytics consent is granted through the website’s consent control. You can refuse optional analytics or change your choice through the available cookie settings. You can also manage cookies in your browser, although blocking essential storage may affect website functions.
6. Videos, maps, messaging, and social links
The website may include YouTube videos in privacy-enhanced mode, OpenStreetMap maps displayed with Leaflet, a WhatsApp contact link, and links to Instagram or LinkedIn. When you play embedded media, open a map, or follow an external link, the relevant provider may receive your IP address, device information, and interaction details under its own privacy policy. External services are responsible for their own processing.
7. Who may receive your data
Access within Santheos is limited to people who need the data for their work. Where necessary, data may also be processed by:
- Papaki and related hosting or technical infrastructure providers;
- Google services used for business email, analytics, tag management, or authorised backups;
- WordPress website, form, security, maintenance, and backup service providers;
- lawyers, notaries, engineers, accountants, banks, translators, property professionals, and other advisers involved in a service you request;
- public authorities or regulators where disclosure is required by law.
Recipients receive only the information reasonably necessary for their role and act as processors or independent controllers according to the circumstances.
8. International data transfers
Some service providers may process data outside the European Economic Area. Where GDPR transfer restrictions apply, we use an applicable adequacy decision, the European Commission’s Standard Contractual Clauses, or another lawful safeguard. You may ask us for information about the safeguard relevant to your data.
9. How long we keep data
General enquiry records are normally kept for up to 24 months after the last meaningful contact, unless a longer period is required for an ongoing business relationship, a legal obligation, or a legal claim. Transaction, tax, accounting, and compliance records are kept for the periods required by applicable law. Technical and security logs are retained only as long as reasonably necessary for security and troubleshooting. Analytics data follows the retention settings configured in Google Analytics. Data that is no longer required is deleted or anonymised.
10. Your data protection rights
Subject to the GDPR and applicable limitations, you may request access to your personal data, correction, erasure, restriction, or data portability. You may object to processing based on legitimate interests and may object to direct marketing at any time. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.
Send a request to info@santheos.com. We may ask for information needed to verify your identity and normally respond within one month.
11. Complaints
You have the right to lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority. We encourage you to contact us first so we can try to resolve the concern.
12. Security and children
We use appropriate organisational and technical measures designed to protect personal data. No internet service can guarantee absolute security. This website and our property services are not directed to children under 18, and we do not knowingly collect their data through general enquiries.
13. Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The date at the top identifies the current version.