Μετάβαση στο περιεχόμενο
Home close
2510231233 kspiridis2@gmail.com

Privacy Policy & Personal Data Protection

Last updated: [September 2026]

1. Introduction

K Spiridis Building Construction (hereinafter referred to as “the Business”, “we”, “us”, or “our”) is committed to protecting and respecting the privacy of visitors and users of our website kspiridis.gr (hereinafter referred to as “the Website”).

This Privacy Policy transparently explains what personal data we collect, why and how we process it, the legal basis for processing, how long we retain it, and your rights under the General Data Protection Regulation (GDPR – EU 2016/679) and Greek Law 4624/2019.

2. Data Controller

The Data Controller responsible for the processing of your personal data is:

  • Trade Name / Business Name: K Spiridis Building Construction (Konstantinos Spiridis)
  • Registered Address: 19 Eleftheriou Venizelou Str., Kavala, P.C. 65403, Greece
  • Telephone: +30 2510 231233
  • Email: 
  • Website: https://kspiridis.gr

3. Personal Data We Collect and Why

We collect only the strictly necessary data required to provide our services and ensure the smooth operation of our Website:

a) Contact & Inquiry Information

When you fill out our contact form or express interest in a property or our construction/design services, we collect:

  • Full name
  • Email address
  • Phone number
  • The content of your message or specific requirements regarding properties and projects

Purpose: To respond to your inquiries, provide price quotes, share details about available properties, and arrange appointments.
Legal Basis: Performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) and our legitimate interest in responding effectively to client inquiries (Art. 6(1)(f) GDPR).

b) Technical & Browsing Data

When you visit our Website, the server automatically collects certain technical information recorded in server log files:

  • IP address (anonymized where applicable)
  • Browser type and version
  • Operating system and device type
  • Date and time of visit

Purpose: Ensuring the proper operation and security of the Website, diagnosing technical issues, and preventing malicious attacks.
Legal Basis: Our legitimate interest in safeguarding the security and integrity of our IT systems and website (Art. 6(1)(f) GDPR).

c) Analytics Data & Cookies (Google Analytics)

We use cookies and related technologies (via Google Analytics / Google Site Kit) to measure website traffic and enhance user experience.

  • Purpose: Statistical analysis of website visitor interactions (e.g., most viewed properties, page performance).
  • Legal Basis: Your explicit consent (Art. 6(1)(a) GDPR), provided freely via the cookie consent banner. You may change or withdraw your consent at any time.

4. Cookies and Related Technologies

Our Website uses cookies. For detailed information regarding the types of cookies we use (functional, analytics, marketing), their lifespans, and their providers, please consult our dedicated [Cookie Policy] page.

You can modify or withdraw your cookie preferences at any time by clicking the cookie settings button located at the bottom of our pages.

5. Recipients of Personal Data

Your data is handled with strict confidentiality. We do not sell, lease, or disclose your personal data to third parties for commercial or marketing purposes.

Access to your data is granted only to:

  1. Authorized personnel and associates of our Business, bound by confidentiality agreements.
  2. Data Processors (Service Providers):
    • Web hosting and technical maintenance providers.
    • Google LLC (for Google Analytics), provided you have granted consent. Data transfers to the United States comply with the EU-U.S. Data Privacy Framework and standard contractual clauses (SCCs).
  3. Public or judicial authorities, solely when strictly required by applicable law or a formal court order.

6. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact & Inquiry Data: Retained for up to 12 months following the completion of communication, unless a business engagement/contract is established, in which case data is kept in compliance with statutory tax and commercial retention obligations.
  • Analytics Data: Retained in accordance with Google Analytics retention settings (up to 14 months).
  • Server Logs: Retained for a maximum period of 30 to 90 days for security and auditing purposes.

Upon expiration of the retention periods, the data is securely deleted or irrevocably anonymized.

7. Data Security

We implement robust technical and organizational security measures to protect your personal data:

  • SSL/TLS encryption (HTTPS) across the entire website.
  • Regular security and software updates (CMS core, plugins) and strict role-based access control.
  • Server-side defenses against unauthorized access and cyber threats.

8. Your Legal Rights

Under the GDPR, you have the following rights regarding your personal data:

  1. Right of Access (Art. 15): To be informed whether we process your data and receive a copy of it.
  2. Right to Rectification (Art. 16): To request the correction of inaccurate or incomplete data.
  3. Right to Erasure (“Right to be Forgotten” – Art. 17): To request the deletion of your personal data under certain conditions.
  4. Right to Restriction of Processing (Art. 18): To request the restriction of processing under statutory conditions.
  5. Right to Data Portability (Art. 20): To receive your data in a structured, commonly used format or request its transfer to another controller.
  6. Right to Object (Art. 21): To object to the processing of your data based on legitimate interests.
  7. Right to Withdraw Consent: Where processing relies on your consent (e.g. tracking cookies), you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

Exercising Your Rights:

You may exercise any of your rights by sending an email to  or by post to 19 Eleftheriou Venizelou Str., Kavala, P.C. 65403, Greece. We will respond to your request within one (1) month of receipt (extendable by up to two additional months for complex requests).

Right to Lodge a Complaint:

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
Hellenic Data Protection Authority (HDPA)

  • Address: 1-3 Kifissias Ave., P.C. 115 23, Athens, Greece
  • Phone: +30 210 6475600
  • Website: www.dpa.gr

9. Third-Party Links

Our Website may contain links to external third-party websites or social media platforms (such as Facebook and Instagram). This Privacy Policy applies solely to kspiridis.gr. We encourage you to review the privacy statements of any third-party websites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal amendments or operational updates. Any revisions will be published directly on this page with an updated effective date.