Legal
Privacy Policy
1. Overview
Sunnyland S.A. (“Sunnyland”, “we”, “us”) is committed to protecting your privacy. This policy explains what personal data we collect when you use our website or contact us, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR), Law 4624/2019 and applicable Greek law.
«SUNNYLAND SOCIETE ANONYME EXPLOITATION OF REAL ESTATE PROPERTY» with trading name «SUNNYLAND S.A.», having its registered seat in the Municipality of Elliniko – Argyroupolis, Marathonomachon str. 2 (16452), with GEMI number 009041201000 and TIN 999096210, competent Tax Authority KEFODE Attica is the data controller responsible for the personal data described in this Privacy Policy.
2. Information we collect
We collect information you provide directly — such as your name, email, phone number and the details you include in enquiry or newsletter forms — as well as limited technical data (such as IP address and browser type) collected automatically when you visit the site.
3. Minors
It is the Company’s intention not to collect personal data from minors who may access its website. However, since ensuring or verifying this is not feasible, any minors providing personal data through the website must obtain consent from those exercising parental responsibility. If we discover we have collected personal information from minors under the age of 16 without verifiable parental consent in accordance with Article 8 of the EU GDPR 679/2016, we will delete the information from our database as soon as possible.
4. How we use your information
We use your information to respond to enquiries, send you the materials you request, manage agent and client portal access, improve our website, investigate fraud or violations and establish, defend, or exercise legal claims and — where you have consented — send occasional updates about new projects and availability. We may also use your personal data to comply with legal obligations, such as publishing acts and data related to the company, including shareholders’ personal identification information.
5. Legal basis for processing
We process personal data on the basis of your consent, the performance of a contract, our legitimate interests in operating and improving our business, and compliance with legal obligations.
6. Data Retention
The Company stores your personal data only as long as necessary for the purpose of its collection as described in this Privacy Policy, based on its nature, any contractual relationship, and legal obligations. Data is deleted (or anonymized) when the processing purpose no longer exists, according to current legislation.
7. Data Security
We commit to making reasonable efforts to ensure your information is secure. We implement reasonable technical and organizational measures to protect your data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, please remember the internet is an open system, and we cannot guarantee that unauthorized third parties will never overcome these measures or misuse your personal data.
8. Sharing & disclosure
We do not sell your personal data. We may share it with trusted service providers (such as hosting and email providers) and professional advisors and where required by law. Any partners act under appropriate data-protection agreements.
9. Marketing Communications
We only send newsletters and marketing communications about new projects and availability where you have given your prior, explicit consent (opt-in), in accordance with Article 11 of Law 3471/2006. Every marketing communication includes a clear and simple mechanism to unsubscribe or withdraw your consent at any time, free of charge.
10. Automated Decision-Making
We do not use your personal data for any form of automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
11. Your rights under GDPR
You have the right to access the personal data we keep about you, to request correction of inaccurate or incomplete data, to request erasure of your data, to request restriction of, or object to, and to request data portability. To exercise any of these rights, contact us using the details below. We will respond within one month of receiving your request, as required by Article 12(3) GDPR except in cases of force majeure.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1-3, 115 23 Athens, Greece, tel. +30 210 6475600, website www.dpa.gr, or with the supervisory authority of your habitual residence or place of alleged infringement.
12. Contact us
For any privacy questions or requests, contact us at info@sunnyland.gr or by post at Marathonomachon str. 2, Argyroupolis, 16452, Athens, Greece.
13. Changes to the Policy
We reserve the right to amend this Policy in compliance with applicable privacy and data protection laws. Visitors to our website should periodically review this Privacy Policy and Cookie Policy for updates.
This version is dated 17 September 2026.