Privacy Policy

GENERAL INFORMATION REGARDING THE PROCESSING OF YOUR PERSONAL DATA BY OTEestate THROUGH THE WEBSITE www.ote-estate.gr

(General Data Privacy Notice)

Last updated: 23.06.2026

OTEestate considers the protection of your personal data to be of paramount importance and adheres to the principle of transparency regarding their processing.

1. What is the identity and contact information of the data controller?

The data controller is the company "OTE ESTATE SOCIÉTÉ ANONYME" with the distinctive title "OTEestate", with registered office in Maroussi, Attica, at 99 Kifisias Avenue, 151 24 - Greece (tel. +30 210 6372700, email: info@ote-estate.gr) (hereinafter referred to as "OTEestate" or "the Company").

OTEestate (www.ote-estate.gr) is a subsidiary of OTE S.A., to which the entire real estate portfolio of OTE S.A. has been transferred, with business activities including, among others, the management, development, and commercial exploitation of its real estate portfolio. Furthermore, OTEestate is a licensed Electricity Supplier, covering, among other things, the energy needs of the OTE Group.

2. Who can you contact regarding matters concerning the protection of your personal data?

For information regarding the protection of your personal data, you may contact us by telephone at +30 210 6372700, by email at info@ote-estate.gr, or by sending a letter to the postal address: 99 Kifisias Avenue, P.C. 15124, Maroussi, Attica (OTE ESTATE S.A. - 1st floor).

3. What categories of personal data do we process, for what purpose, and what is their retention period?

(A). Data you provide when submitting a request/inquiry/complaint (via the Contact Form for other matters) to OTEestate through the OTEestate website. In this case, we will process the following data: full name/company name, contact email, and contact telephone number.

Legal Basis: This processing is carried out pursuant to Article 6 par.1 (b) of the GDPR.

Retention Period: Upon submission of a request/inquiry/complaint through the Company's website, personal data is retained for six (6) months from the completion of processing your request/inquiry.

(B). Data you provide to register on the OTEestate website for its newsletter, for the purpose of informing you about future real estate sales tenders, such as your email and full name.

Legal Basis: This processing is carried out pursuant to Article 6 par.1 (a) of the GDPR.

Retention Period: We retain personal data for as long as you remain registered on our recipient list and delete it in case you withdraw your consent.

(C). Data you provide when registering on the OTEestate website for the activation of services that OTEestate provides from time to time within the framework of its commercial activity and which you wish to use (e.g., provision of properties’ information during a tender process with regard to their sale). In this case, we will process the following data: full name/company name, contact email, Tax Identification Number (TIN) (if required), and mobile/fixed telephone number.

Legal Basis: This processing is carried out pursuant to Article 6 par.1 (b) of the GDPR.

Retention Period: We retain personal data for as long as the services remain active. After permanent termination of the service, your personal data is retained for a maximum of eight (8) months from the date of termination.

(D). Data you provide through the OTEestate website when submitting the Rental or Purchase Interest Form. Specifically:

(i). When expressing rental interest, we will process the following data: full name/company name, Tax Identification Number (TIN), Competent Tax Office/Attica Center for Tax Procedures and Services (KE.FO.D.E.), mobile/fixed telephone number, postal address, email address, fax number, and recent Tax Clearance Certificate (as applicable, i.e., when its submission to OTEestate is requested).

OTEestate processes the above personal data for the purpose of conducting an investigation in a credit check system to evaluate the rental interest, as well as the potential transactional risk assumed by OTEestate in case of entering into a property lease agreement it owns, aiming to satisfy its legitimate interest, namely the exercise of its right to economic freedom, with the purpose of ensuring commercial credit, reliability, and transaction security within the framework of its business activities.

Legal Basis: This processing is carried out pursuant to Article 6 par.1 (f) of the GDPR.

(ii). When expressing purchase interest. In case OTEestate needs to contact you, we will process the following data: full name/company name, mobile/fixed telephone number, and email address.

Legal Basis: This processing is carried out pursuant to Article 6 par.1 (b) of the GDPR.

Retention Period: Personal data in both (2) above cases [(i) and (ii)] are retained for one (1) year from the completion of the evaluation of your submitted rental/purchase interest. In case negotiations take place with the purpose of entering into a lease agreement or in case of expressing purchase interest and potential intention to participate in a future tender process for the sale of a property, OTEestate lawfully retains the personal data of the prospective tenant for as long as negotiations last in the case of rental or until the completion of the tender process that may be announced and conducted, in which the data subject expressing purchase interest (prospective buyer) will have participated.

4. Will OTEestate process your personal data for other purposes?

OTEestate will not process your personal data for purposes other than those mentioned above. Should OTEestate wish to use your personal data for other purposes, it will do so only after informing you accordingly and obtaining your explicit consent.

5. Who are the recipients and for what purpose is personal data transmitted to them?

Apart from us, our business partners or third-party companies may also process your personal data. However, OTEestate remains solely responsible for the security of your personal data, taking all necessary measures:

Our business partners are always selected based on the high technological and organizational level of security they offer.
Before collaborating with any company, especially if our collaboration requires the processing of your personal data, we bind them contractually to ensure the high level of protection of your personal data.

Recipients of your personal data may include:

In the case of evaluating rental/purchase interest, companies that conduct audits at OTEestate in accordance with legal requirements and/or its regulatory provisions and Policies (certified auditors, internal audit, etc.), legally operating credit check companies (only for cases of expressing rental interest), as well as any other companies that provide OTEestate with data storage facilities (data centers) or software products.
For the provision and support of the company’s Website, OTEestate collaborates with "Bold Ogilvy S.A.” (trade name “Ogilvy”), which is based in Pallini, Attica, at 10 Imathias Street.

In these cases, the above third-party companies are data processors on behalf of OTEestate, i.e., OTEestate partners who undertake the execution of a specific project following our instructions and applying the strict procedures of the OTE Group regarding the processing of your personal data. In these cases, OTEestate continues to be responsible for the processing of your personal data.

The processing of your personal data for the above purposes by our business partners is carried out primarily within Greece and the European Union (EU). In case we collaborate with companies outside the EU, they will process your data only upon our request and only if there is an adequacy decision by the European Commission or if appropriate clauses ensuring a high level of security regarding the processing of your personal data are agreed upon.

OTEestate does not process or disclose your personal data to third parties except in cases where their disclosure/transmission is required by applicable law or court decision or order.

6. What are your rights regarding the processing of your personal data?

The rights you can exercise include:

Right of access: You have the right to receive information regarding your personal data that we process (e.g., the purposes of processing, types of data, recipients to whom they are disclosed, the period for which they are retained) and to receive copies thereof.

Right of correction: You have the right to request the correction of your personal data (e.g., correction of address, contact details, identity number).

Right to erasure: You have the right to request the deletion of your personal data in case they are no longer necessary in relation to the purposes for which they were processed or in case you withdraw the consent on the basis of which we collected and processed them.

Right to restriction of processing: You have the right to request restriction of processing for a specific purpose (e.g., I do not want to receive email updates for marketing purposes).

Right to data portability: You have the right to receive your personal data that you have provided to the company in a structured, commonly used format that is also readable, so that it is technically feasible to transmit them to another controller.

Right to object to the processing of your personal data in cases where you do not wish the processing of your personal data.

We further inform you that OTEestate has appointed a Data Privacy Officer (DPO) pursuant to the provisions of applicable legislation. To contact the Data Protection Officer, you can send an email to info@ote-estate.gr

To exercise your rights, you can:

Send an email to info@ote-estate.gr
Send a letter to the address: OTEestate, 99 Kifisias Av., 1st Floor, P.C. 15124, Maroussi, with the subject "Exercise of Personal Data Rights" stating your full name and contact telephone number.
Complete the Contact Form for Other Matters, which is found on the OTEestate website.

Should you deem that we have not adequately satisfied your request and your personal data protection is affected in any way, you may file a complaint through a special online portal to the Hellenic Data Protection Authority (Athens, 1-3 Kifisias Avenue, P.C. 115 23 | tel: +30 210 6475600). Detailed instructions for submitting a complaint are provided on the Authority's website.

OTEestate will respond to your requests free of charge without delay within one (1) month of receiving the request. In exceptional cases, this deadline may be extended by two (2) months if required due to the complexity of your request. In any case, we will inform you of such extension and the reason for the delay.

If we deem your request to be manifestly unfounded or excessive, we reserve the right to request payment of a reasonable fee for its satisfaction, taking into account the administrative costs for its execution or even to refuse to proceed with your request.

7. What types of measures are applied to protect your personal data?

OTEestate takes appropriate organizational and technical measures for data security and their protection from accidental or unlawful destruction, accidental loss, alteration, prohibited dissemination or access, and any other form of unlawful processing.

8. INFORMATION FROM ICAP CRIF (DATA CONTROLLER) TO THIRD PARTIES SUBMITTING THE RENTAL INTEREST FORM REGARDING PERSONAL DATA PROCESSING

ICAP CRIF informs you through OTE ESTATE SOCIÉTÉ ANONYME (OTEestate) that within the framework of its legitimate interest, which consists of providing commercial and financial information regarding the creditworthiness of contracting parties with the purpose of exercising the right to economic freedom based on information ensuring commercial credit, reliability, and transaction security, it maintains a database ("ICAP CRIF Database") with data on economic behavior concerning you and collected from legal sources (such as courts, mortgage registries, General Commercial Register {G.E.M.I.}). The recipient of the aforementioned ICAP CRIF Database data will be OTE ESTATE SOCIÉTÉ ANONYME with which you transact or are about to transact, following its access to the ICAP CRIF Database data. More information about the ICAP CRIF Database, regarding the data retention period, as well as to be informed and exercise your rights either by contacting OTE REAL ESTATE SOCIÉTÉ ANONYME (info@ote-estate.gr) or ICAP CRIF (privacy@icapcrif.com), in accordance with the applicable provisions of Greek legislation and the General Data Protection Regulation EU 2016/679, can be found in the ICAP CRIF Privacy Policy, which is posted on the website https://icapcrif.com/privacy-policy/ .

9. What trackers (cookies and similar technologies) are used on the website?

We use cookies and similar technologies on our website to store, retrieve, and process information on your device. In this way, we improve your experience, analyze website traffic, and show you content and advertisements that interest you. For this purpose, user profiles are created per website and device. Our partners also use these technologies.

The processing of tracker data is carried out:

For the "Necessary and Functionality" category with Legal Basis: Contract Performance
For the remaining tracker categories with Legal Basis: Consent

More information about tracker categories can be found in the footer of the Website in the "Cookie Settings" link, while the detailed list of trackers as well as the partners-recipients thereof is found in the "List of partners-recipients and trackers used on the Website" section of this document.

List of partners-recipients and trackers used on the Website

Partner – Data Recipient	Service	Purpose of Processing	Responsibilities	Processed Data	Retention Period	Processing in Third Countries	Transfers under Safeguards / Exceptions
Purpose of processing: Necessary and functional
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland	Google Tag Manager	Adding and managing tracking scripts on the website. It checks the user's choices in the tracking categories and activates these trackers based on their consent.	OTE ESTATE SOCIÉTÉ ANONYME is responsible for data protection. Google Ireland Ltd. acts on behalf of OTE ESTATE SOCIÉTÉ ANONYME.	User options regarding tracker consent.	Session
OTE ESTATE SOCIÉTÉ ANONYME, 99 Kifisias Avenue, 15124 Maroussi	Tracker consent management.	The Cookie_Consent_Set is used to store your choices regarding tracker consent	OTE ESTATE SOCIÉTÉ ANONYME	User options regarding tracker consent.	3 months
Purpose of processing: Performance (for the purposes of OTE ESTATE SOCIÉTÉ ANONYME)
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland	Google Analytics	Google Analytics collects data from websites to create reports that provide business insights, such as how many users visited a page or purchased a product. Google Analytics uses a JavaScript tracking code added to the pages of the digital service to collect pseudonymous information about how users interact with a page.	OTE ESTATE SOCIÉTÉ ANONYME is responsible for data protection. Google Ireland Ltd. acts on behalf of OTE ESTATE SOCIÉTÉ ANONYME.	Statistics on the number of users, session statistics, approximate geographical location, browser and device information, interactions (events) with the website such as pages visited, ﬁles downloaded, Age, Gender, Interests.	The data retention period at the user level is 14 months. The data retention period for event data is 26 months. The data retention period for age, gender, and interests data is 2 months.	Your online usage data is processed in Argentina, Israel, Japan, Canada, New Zealand, Switzerland, the United States of America, and the United Kingdom. The European Commission has issued an adequacy decision for these countries (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). Based on your consent, your online usage data will also be processed in the following non-secure third countries: Australia, Brazil, Chile, India, Kenya, Colombia, Malaysia, Mexico, Peru, Philippines, Singapore, South Africa, Taiwan, Turkey, and the United Arab Emirates. There is no adequacy decision from the European Commission (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) for these countries. OTE ESTATE SOCIÉTÉ ANONYME cannot, therefore, ensure that the European level of data protection is maintained for these data processing activities. It cannot be ruled out that local authorities may have access to your online usage data, or that the exercise of your rights as a data subject may be restricted or excluded.	EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent in accordance with Article 49 of the GDPR.
Purpose of processing: Advertising through partners
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland	Google Ads, Campaign Manager, Display& Video 360, Search Ads 360 plus Consent Mode and Floodlight features	Google Ads: This online service tracks and documents website visits and measures the success of ads to optimize advertising spend. It uses cookies, pixels, and a local storage entry.	OTE ESTATE SOCIÉTÉ ANONYME and Google Ireland Ltd. act as independent controllers. You can ﬁnd more information about data processing by Google in the privacy policy of Google Ireland Ltd.	Cookie ID, IP Address and device identiﬁers, Location, Client IDs, Information about the operating system, Referrer URL, Browser information.	13 months	Your online usage data is processed in Argentina, Israel, Japan, Canada, New Zealand, Switzerland, the United States of America, and the United Kingdom. The European Commission has issued an adequacy decision for these countries (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). Based on your consent, your online usage data will also be processed in the following non-safe third countries: Australia, Brazil, Chile, India, Kenya, Colombia, Malaysia, Mexico, Peru, the Philippines, Singapore, South Africa, Taiwan, Turkey, and the United Arab Emirates. There is no adequacy decision from the European Commission (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) for these countries. Therefore, OTE ESTATE SOCIÉTÉ ANONYME cannot guarantee that European-level data protection is adhered to for these data processing activities. It cannot be ruled out that local authorities may have access to your online usage data, or that the exercise of your rights as a data subject may be limited or excluded.	EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent in accordance with Article 49 of the GDPR.
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland	For the publication of our campaigns, we use Meta Business tools. The Meta Pixel is used to measure the success and analyze advertising campaigns on Facebook, as well as for retargeting them on Meta's platforms.	Campaign Manager: This online service is used to measure the success and optimize advertising campaigns. It uses cookies to collect information for Google Marketing Platform services (CampaignManager360, DisplayVideo360, SearchAds360). Google Consent Mode is a feature used in combination with Display & Video 360, Google Ads, and GMP Floodlight services, allowing us to transmit information about your consent to the above services. This information is used for forecasts to improve the statistical evaluation of our ad success.	OTE ESTATE SOCIÉTÉ ANONYME and Meta Platforms Ireland Limited are jointly responsible for this. You can ﬁnd more information about data processing in Meta's privacy policy.	IP address, browser information, page views, user, device information, geographic location, referrer URL, date and time of visit, ads displayed, items clicked, products and services purchased or searched, usage data, device ID, browser ID (fbq), event ID, pixel ID, cookie ID, Facebook ID.	12 months	Your data will be processed in the following third country: United States of America. The European Commission has issued an adequacy decision for this country.	EU adequacy decision or - Standard Contractual Clauses (SCC) with TIA or - Consent in accordance with Article 49 of the GDPR.