Privacy Policy

Last updated: June 2026

CreteApts.gr is a platform dedicated to long-term apartment listings in Crete. We take your privacy seriously and are committed to handling your personal data with transparency, care, and full respect for your rights under the General Data Protection Regulation (GDPR) and applicable Greek law.

This Privacy Policy explains what data we collect, why we collect it, how long we keep it, and what you can do if you want to access, correct, or delete it. Please read it carefully. If anything is unclear, you can reach us using the contact details at the bottom of this page.

1. Who We Are

CreteApts.gr is operated as a property listing platform based in Heraklion, Crete, Greece. We connect people looking for long-term rentals (typically 60 days or more) with property owners on the island. We do not act as an agent, landlord, or party to any rental agreement — we are a listing and introductions platform only.

For the purposes of GDPR, CreteApts.gr is the data controller for information you submit through this website.

2. What Data We Collect

We collect only what we need to operate the platform and respond to your enquiries.

When you submit a contact form:

Your name
Your email address
Your phone number (optional)
Your message and any details about the property you are enquiring about

When you browse the site:

Basic technical data such as your browser type, approximate location (country/region), pages visited, and time on site — collected via anonymised analytics
We do not use tracking cookies that follow you across other websites
We do not collect or store your IP address beyond what is standard in server logs, which are rotated regularly

What we do not collect:

Payment information of any kind — there are no fees to use CreteApts.gr
Passport or identity documents
Sensitive personal data (health, political views, religion, etc.)

3. Why We Collect It (Legal Basis)

We process your data on the following legal bases:

Legitimate interest — to respond to enquiries you have initiated and to connect you with property owners on the platform
Consent — for any optional communications you sign up for
Legal obligation — if we are required to retain or disclose data by Greek or EU law

We do not sell, rent, or trade your personal data with third parties for marketing purposes. Full stop.

4. How We Use Your Data

When you submit a contact form, your message is forwarded to the property owner or manager relevant to your enquiry. We also retain a copy so we can follow up if needed and to prevent spam or abuse of the platform.

We use anonymised, aggregated analytics data to understand how the site is being used — which pages are popular, where visitors come from, and how we can improve the experience. This data cannot be used to identify you.

We do not use your data for automated decision-making or profiling.

5. How Long We Keep Your Data

Contact enquiries are retained for up to 12 months, after which they are permanently deleted. If you request deletion earlier, we will act on it within 30 days.

Anonymised analytics data has no fixed retention period, as it cannot be tied to any individual.

6. Who Has Access to Your Data

Your enquiry data is shared with the property owner or manager you contacted. Beyond that, only the CreteApts.gr administrative team can access contact records.

We use a small number of trusted third-party services to operate the platform — including hosting and email delivery. These providers process data only on our behalf and are contractually required to keep it secure and confidential. We do not allow them to use your data for their own purposes.

We are based in the EU and do not transfer personal data outside the European Economic Area unless required by law.

7. Cookies

CreteApts.gr uses a minimal number of cookies. Strictly necessary cookies keep the site functioning (for example, session management). We do not use advertising cookies or third-party tracking pixels.

You can control cookie settings through your browser. Disabling cookies may affect some features of the site, but will not prevent you from browsing listings or reading content.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access — you can request a copy of the personal data we hold about you
Right to rectification — you can ask us to correct inaccurate data
Right to erasure — you can ask us to delete your data, subject to any legal obligations we may have to retain it
Right to restriction — you can ask us to limit how we process your data while a complaint is being investigated
Right to data portability — you can request your data in a structured, machine-readable format
Right to object — you can object to processing based on legitimate interests
Right to withdraw consent — if processing is based on consent, you can withdraw it at any time

To exercise any of these rights, contact us using the form on our Contact page. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr.

9. Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. The site is served over HTTPS. Access to the database is restricted to authorised personnel only.

No system is completely immune to risk. If you have concerns about a specific piece of information you submitted, contact us and we will address it promptly.

10. Children

CreteApts.gr is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted personal information through this site, please contact us and we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review it periodically. Continued use of the site after changes are posted means you accept the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please use the Contact page on this website. We aim to respond to all privacy-related enquiries within 5 working days.