Legal Information
Privacy Policy
How we collect, use and protect personal data in line with GDPR principles.
Last updated: 24/08/2026
1. Data Controller
Oikodomisis acts as data controller for the processing activities described in this Privacy Policy.
For personal data requests, contact: info@oikodomisis.gr.
2. What data we collect
We keep only data that is necessary to communicate with you and deliver a client project.
This usually includes contact details (name, email, phone) and basic project details (e.g. project type, area, message).
For contact-form anti-spam protection, we also process minimal technical security data (e.g. IP, user-agent, anti-bot checks).
For website measurement, Google Analytics 4 may process the page URL, referring page, device and browser information, approximate location, consent state and interactions with the website. When analytics storage is accepted, Google Analytics may also use analytics cookies and pseudonymous identifiers.
Before analytics consent, Google's Advanced Consent Mode sends limited cookieless measurements with analytics and advertising storage denied. We have disabled Google advertising signals and advertising-personalization signals.
3. Purpose and legal basis
- Responding to inquiries and discussing potential project requests.
- Legitimate interest for security, abuse prevention and service integrity.
- Your consent for analytics cookies and full Google Analytics measurement. You may withdraw this consent at any time through the Cookie settings link in the footer.
- Compliance with legal obligations where applicable.
4. Sharing with third parties
We use selected infrastructure and communication providers (e.g. hosting/email delivery) only as necessary to operate the service.
For website analytics, the recipient and service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may use other Google group companies and subprocessors to provide the service.
We do not sell personal data.
5. International data transfers
Google may process analytics data outside the European Economic Area. Where this happens, Google relies on a transfer mechanism recognized by EU data-protection law, such as an adequacy decision or Standard Contractual Clauses.
6. Retention period
We retain data only as long as necessary for the collection purpose and a reasonable period for security/documentation.
Google Analytics user-level and event-level data is retained for up to 14 months. Aggregated reports that no longer identify a user or device may remain available for longer.
After the retention period, data is deleted.
7. Your rights (plain language)
You can ask us what personal data we hold about you.
You can ask us to correct inaccurate data, or delete data where legally allowed.
You can also ask us to limit processing or object to specific processing.
If you believe your data is not handled correctly, you can file a complaint with the competent Data Protection Authority.
8. Security measures
We apply technical and organizational safeguards to protect data from unauthorized access, alteration or loss.
9. Cost calculator disclaimer
The cost calculator and estimates are provided for informational purposes only.
They are not a binding offer, contract, or guarantee of final project cost/duration by the company.
10. Policy updates
This policy may be updated from time to time. The latest version is always published on this page.