Who is responsible for your data
EleFon.GR, a real-estate agency in Thessaloniki, Greece, is the controller of the personal data described here. For any question about your data, or to exercise your rights, contact us at info@elefon.gr.
What we collect
When you send an enquiry, a viewing request or a property-management request, we collect the details you enter: your name, email address, optional phone number, your message, your preferred language and, for viewings, your preferred dates and times.
We also record the page you sent the form from, the property it relates to, any campaign tags in the link you followed (for example utm_source), the time you accepted this policy and whether you chose to receive news about new properties.
To block spam and abuse we count submissions per network address and per email address. Both are stored only as one-way hashes and these counters are deleted automatically within a day. Our spam check, Cloudflare Turnstile, processes technical data from your browser (such as your IP address and browser characteristics) when you send a form; it does not set advertising cookies.
Why we use it and our legal basis
To answer your request, arrange viewings and follow up on the service you asked about. Legal basis: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
To send you news about new properties, only if you tick the optional box. It is never pre-selected and is not required to send a request. Legal basis: your consent (GDPR Article 6(1)(a) and Article 11 of Greek Law 3471/2006). You can withdraw it at any time by writing to info@elefon.gr; this does not affect anything we did before.
To keep the website and your data secure and to prevent spam. Legal basis: our legitimate interest in running a safe service (GDPR Article 6(1)(f)).
To understand, in total, how the website is used so we can improve it, we use Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not identify you or follow you across websites. We see only totals, such as page views, referring websites, countries and device or browser types. Legal basis: our legitimate interest in running and improving the website (GDPR Article 6(1)(f)).
To meet legal obligations, for example record-keeping under tax or anti-money-laundering rules that apply to estate agents, where a transaction goes ahead. Legal basis: GDPR Article 6(1)(c).
When you send a request we email you a confirmation that it was received.
Your name and email address are needed so that we can reply; without them we cannot handle your request. All other fields are optional. We do not make decisions about you by automated means, including profiling.
Who receives it
Only authorised EleFon.GR staff can access your requests. Cloudflare, Inc. hosts this website and provides our database, file storage, spam protection, website statistics and email delivery as our processor, under a data processing agreement.
We disclose data to public authorities only where the law requires it. We do not sell your data, and we do not use advertising trackers or anything that follows you across websites.
Transfers outside the EU
Cloudflare is based in the United States and may process data there. These transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, under which Cloudflare is certified, and otherwise on the EU standard contractual clauses (GDPR Articles 45 and 46).
How long we keep it
Enquiries and viewing requests are kept for up to 24 months after our last contact with you and are then deleted, unless the law requires us to keep them longer. Marketing consent is kept until you withdraw it.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time.
To exercise any right, write to info@elefon.gr. We will confirm your identity before acting and reply within one month; for complex requests this may be extended by two further months, and we will tell you if so.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr, complaints@dpa.gr).
Favourites and maps
Properties you save as favourites, and your choice to show maps, are stored only in your own browser. They are not sent to us. Maps are provided by OpenStreetMap and load only after you choose to show them; loading them connects your browser to OpenStreetMap's servers, which receive your IP address. Property videos work the same way: they come from YouTube (in its privacy-enhanced mode) or Vimeo and load only after you choose “Load video”, at which point the video provider receives your IP address and its own privacy policy applies.
Changes to this policy
We will update this page if the way we handle your data changes. Last updated: 18 October 2026.