Privacy
Privacy notice.
What we collect, why we are allowed to hold it, who else sees it, how long we keep it, and how to make us stop.
Version: September 2026
1. Introduction
This notice explains how GH Buyers Agency collects, uses, shares, stores and protects personal data in connection with the buyer representation services we provide and this website.
We comply with:
- Regulation (EU) 2016/679 — the General Data Protection Regulation
- Greek data protection legislation (Law 4624/2019 and related instruments)
- The supervisory requirements of the Hellenic Data Protection Authority
It applies to clients, prospective clients, and anyone else whose personal data reaches us in connection with a property purchase.
2. Data controller
GH Buyers Agency is a sole trader, so the controller is the individual behind it:
Data protection enquiries go straight to us at the address above. We are not required to appoint a Data Protection Officer.
3. What we collect
Only what you send us, or what your purchase requires. There is no tracking on this site, no advertising pixels and no profiling.
When you get in touch
If you engage us
We do not ask for, and do not want, special category data — health, religion, political views and the like. Please do not put any into the message box.
4. Where we get it from
- Directly from you, by form, email, telephone or WhatsApp
- From the professionals working on your purchase — lawyers, notaries, engineers, accountants and translators
- From selling agents, developers and owners, about the properties themselves
- From public registers where a purchase requires it, such as the Land Registry (Cadastre) and the Tax Authority (AADE)
5. Why we process it, and our lawful basis
You are not obliged to give us anything. If you do not complete the required fields we simply cannot reply — there is no other consequence.
6. Who we share it with
We will never sell your personal data, and we do not share it for advertising. Your data may be shared with these categories of recipient, only for the purposes set out above:
- Legal professionals — lawyers, notaries and certified translators involved in your purchase
- Engineers, surveyors and valuers engaged to inspect or value a property
- Selling agents, developers and owners, in the course of negotiating for you
- Tax and accounting professionals, for ΑΦΜ registration and tax compliance
- Greek government bodies, including the Tax Authority (AADE) and the Land Registry (Cadastre), where a purchase requires it
- Service providers acting as our processors — email, hosting and IT support, bound by data processing agreements
- Regulatory and supervisory authorities, where the law requires it
The processors behind this website are:
The professionals we introduce act as controllers in their own right and are responsible for their own handling of your data. You are never obliged to use anyone we introduce. At the start of your engagement we will tell you which categories of recipient your data may go to, we will disclose only what is necessary for the agreed purposes, and you may ask us at any time which specific recipients your data has gone to — we will confirm it in writing.
GreekHomeLoans, which we link to for mortgage enquiries, is a separate business under the same ownership, with its own website and its own privacy notice. We do not pass your data to it — if you go there, you deal with it directly and its notice applies.
7. International transfers
Your purchase is in Greece, so your data is processed in Greece — an EU member state fully subject to the GDPR — and otherwise within the European Economic Area.
Where data goes to a recipient outside the EEA we make sure appropriate safeguards are in place, being the European Commission's standard contractual clauses or an adequacy decision, in accordance with Chapter V of the GDPR. Transfers are limited to what is strictly necessary to deliver the service. The one such transfer on this website is Calendly, in the United States, and only if you choose to load the calendar — if you would rather nothing left the EEA, contact us by email, phone or WhatsApp instead. You lose nothing by doing so.
8. How long we keep it
We keep your personal data for as long as your purchase needs it — through the search, the due diligence and the completion — and no longer.
When your purchase completes, or the engagement ends for any other reason, your file is deleted. You can also ask us in writing to delete it at any earlier point. Deletion is secure and permanent, and we confirm it to you in writing.
The one exception is the accounting record of the fees you paid us — the invoice and the payment — which Greek tax law requires us to keep. That exception does not extend to your identity documents, your property documents or our correspondence: those go.
If you enquire but never engage us, we delete the correspondence within two years. This website has no database of its own: an enquiry reaches us as an email and lives in our mailbox, so there is nothing held in the site to be queried or breached.
9. Data security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration:
- Encrypted transmission (HTTPS/TLS) across the site and our email
- Encryption at rest in the systems that hold your file
- Access controls, so that only the people who need a file can open it
- Confidentiality obligations on everyone who works on your purchase
- Regular review of the systems we use
If a personal data breach poses a risk to your rights and freedoms, we notify the Hellenic Data Protection Authority within 72 hours and, where required, notify you directly. If you suspect a breach, tell us immediately at dplatsis@ghbuyersagency.com.
10. Automated decisions and AI-assisted tools
We make no decisions about you by automated means and we do not profile you. We are not a lender and make no lending decisions.
To work accurately and quickly we may use secure AI-assisted tools for document review, translation, extracting information, drafting communications and administrative support. They are used under strict confidentiality obligations and only to deliver the service you have asked for. They do not decide anything about you.
11. Your rights
Subject to applicable law, you can ask us to:
To exercise any of these, write to us at dplatsis@ghbuyersagency.com. We respond within 30 days, and no fee is charged for ordinary requests. We may ask you to confirm who you are first, so that we do not hand your data to someone else.
12. Complaints
If you believe we have handled your data unlawfully you can complain to the supervisory authority:
You may also complain to the supervisory authority in your own country of residence. We would encourage you to come to us first, so we have the chance to put it right.
13. Records of processing
We keep records of our processing activities, consent logs, data sharing events and retention schedules in accordance with Article 30 of the GDPR. These are available to the Hellenic Data Protection Authority on request.
14. Children
Our services are not directed at anyone under 18 and we do not knowingly collect their personal data. If you believe a minor has sent us data, tell us and we will delete it promptly.
15. Cookies
Set out in full in our cookie policy. In short: no analytics or advertising cookies, and the only third-party cookies come from the booking calendar, which loads only if you ask it to.
16. Changes to this notice
We may update this notice to reflect changes in law, regulation or our services. The version date at the top reflects the most recent revision, and where a change is material we will say so here or tell you by email.