1. INTRODUCTION
Welcome to www.nest-land.com (the “Website”), owned and operated by “NEST LAND EE”, with the distinctive title “NEST LAND” (hereinafter the “Company”, “we”, “our” or “us”). Our Company is committed to protecting the privacy of visitors and users of its Website. This Privacy Policy (hereinafter the “Policy”) explains how we collect, use, disclose, and safeguard your data when you visit our Website, use our services (the “Services”), and/or engage with our content; it also outlines the rights that you have in connection with your data.
We assure you that all information and data you provide to us or that we collect in the context of the Website, will be used in compliance with applicable legislation on the protection of personal data, including Regulation (EU) 2016/679 (referred to as the “GDPR”) and Greek Law 4624/2019 on “Data Protection Authority, measures for the implementation of Regulation (ΕU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and transposition of Directive (ΕU) 2016/680 of the European Parliament and of the Council of 27 April 2016 into national law and other provisions”.
2. DEFINITIONS
- “Personal Data”: any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- “Data Processing”: any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- “Data Controller”: a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- “Data Processor”: means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
3. DATA CONTROLLER
The data controller, regarding all personal data processing operations, carried out through our Website, is our Company “NEST LAND”, having its registered seat in Athens, Greece, at 11 Mitropoleos Square, P.C. 105 56, tel.: +30 211 116 5216.
4. INFORMATION WE COLLECT
When you use our Website, we may collect information that can identify you, either directly or indirectly in combination with additional information. Such information, referred to as “personal data”, may be collected by the Company both when you choose to voluntarily provide the same to us (e.g. when you subscribe to our newsletters) or simply by analyzing your behavior on our Website (e.g. through cookies and plugins).
Voluntarily Provided Information
We may collect personal information that you voluntarily provide to us, including but not limited to your:
- Name
- Email address
- Phone number (landline and/or mobile number)
- Mailing address
- Property details
For example, if you wish to subscribe to our mailing/newsletter list, you will be asked to provide your name and email address. Similarly, if you choose to communicate with us by making use of the “Contact Us” / “Interest” form, the same personal data (name and email) will be asked from you. Providing the data mentioned above is optional; if you choose, however, not to provide it, the Company may be unable to respond to your inquiry and/or offer the requested Services.
Automatically collected information
The Website’s operation involves the use of computer systems and software procedures that collect information about its users as part of their ordinary operation, as is the case with most websites on the internet. While our Company does not collect such data to directly associate them with a specific user, it is possible, given the nature of the information and its association with additional data maintained by third parties, to identify the user, either directly or indirectly.
This information may include:
- Parameters related to your operating system, include your Internet Protocol (IP) address,
- Browser and device type,
- Location (country),
- Domain names of your computer,
- Information about your activities on our Website, such as browsing history, pages visited, user preferences, and time and date of your visit, is collected through cookies, plugins, and other technologies that allow such tracking.
Such data will be used by the Company and its collaborators, among others, for statistical purposes that relate to the use of the Website, to ensure its proper operation to detect any faults and/or abuses. Such data may also be used to investigate liabilities in the event of cybercrimes committed against our Website. For more information, please visit our Cookies Policy.
5. HOW WE USE YOUR DATA – LEGAL BASIS OF DATA PROCESSING
Our Company processes the collected data for the following purposes:
- To respond to your inquiries and provide information or Services that you may request. For the above purpose (hereinafter “Provision of Services”) your consent for the processing of your data will not be required; this processing is deemed necessary for the provision of the Services you have requested and, therefore, for the performance of an agreement to which you are a party or for the implementation of measures requested by you before agreeing (GDPR article 6, para. 1 b). While you don’t need to provide your data to our Company for these purposes, failing to do so, may result in the Company being unable to respond to your inquiries and/or provide the Services that you requested.
- For marketing, promotional, and advertising purposes related to the Company’s Services, as well as to carry out direct marketing campaigns, send you electronic newsletters and other information about our Services. The processing of your data for such purposes (hereinafter “Marketing” is based on your consent (GDPR Article 6, para 1 a). Providing your consent to the Company for the use of your data for the above purposes is optional; you will not suffer any consequences if you choose not to provide it, apart from not receiving marketing communications from our Company. Any consent provided may be withdrawn at a later stage; note that the withdrawal of consent does not affect the lawfulness of processing carried out based on such consent before its withdrawal.
- For future marketing, promotional, and advertising purposes, by sending you direct electronic marketing communications regarding Services provided by the Company that are identical or similar to those that you have requested in the past by our Company (hereinafter “Soft Spam”).
The processing for the above purposes is based on our Company’s legitimate interest (GDPR Article 6, para. 1 f) in sending you electronic marketing communications regarding its Services that are identical or similar to those you have previously requested. You may block such communications without any consequence, by objecting through the “Unsubscribe” link provided at the bottom of all such future communications. - To analyze and improve our Website and Services, examine its traffic, and collect information regarding user preferences, through the use of performance and functional cookies.
The processing of your personal data for the above purpose (hereinafter “Analysis”) is based on your consent (GDPR article 6, para. 1 a), which is obtained through the cookie banner and/or specific field that you must actively complete. Providing your consent to the Company for the use of your personal data for the above purposes is optional and you will not suffer any consequences if you choose not to provide it. Any consent provided may be withdrawn at a later stage by changing your browser settings, following our Cookies Policy. - To comply with our legal obligations. When you provide any personal data to the Company, it must be processed in accordance with applicable law, which may include retaining and reporting your personal data to official authorities, in compliance with tax, customs, or other legal obligations.
Your consent is not required for such purpose (hereinafter “Compliance”), as such processing is necessary for compliance with a legal obligation to which the Company is subject (GDPR, article 6, para. 1 c). - To protect and defend the security of the Company’s systems and property, including the prevention and detection of any misuse of our Website or any fraudulent activities taking place through our Website, as well as to defend the Company’s legitimate interests before the competent Courts and Authorities. The processing of your data for this purpose (hereinafter “Security/Legitimate Interests”) is necessary for the Company to pursue its legitimate interests (GDPR Article 6, para. 1 f).
6. DATA RECIPIENTS
We do not sell or trade your personal data to third parties, whether natural or legal persons. We may disclose personal data only to the extent necessary as follows:
- To our duly appointed service providers (such as internet, IT service providers and providers of related infrastructure, customer service providers, attorneys-at-law, and accountants);
- Selected individuals authorized by our Company to process data that are strictly necessary for the carrying out of activities related to the provision of the services through the Website (such as technical maintenance of network equipment and electronic communications networks); such individuals are bound by an obligation of confidentiality or are subject to an appropriate legal obligation of confidentiality (e.g. employees of our Company);
- Public authorities, bodies, or offices, including tax authorities, to the extent necessary in compliance with applicable law;
- In the event of a corporate change in our Company, reorganization, merger, sale, etc., your personal data may be disclosed. In this case, we will make every effort to adequately inform you and provide you with the possibility to exercise your rights.
7. TRANSFER OF PERSONAL DATA OUTSIDE THE E.U.
We wish to reassure you that in the limited and necessary circumstances that your personal data will be transferred outside the EU/EEA, the Company will put in place adequate measures and provide appropriate safeguards to ensure the privacy and security of your personal data. For additional information regarding such safeguards, please feel free to email us at info@nest-land.com.
8. MINORS
In compliance with laws that protect minors’ online privacy, the Company does not intentionally collect personal data of individuals under the age of 18. If the Company becomes aware that it has unintentionally collected personal data of minors, such information will be promptly deleted.
9. DATA SECURITY
We implement a variety of technical and organizational security measures to maintain the safety of your personal information and minimize the danger of destruction, loss (including accidental loss), unauthorized access, use, or incompatible use with the initial purpose of collection. However, it is important to note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
10. DATA RETENTION PERIOD
We retain your personal data strictly for as long as necessary, to fulfill the purposes for which your data were collected. The criteria used by our Company to determine its data retention periods include: (a) for as long as we have an ongoing relationship with you, (b) if the processing is based on your consent, from the moment you provide such consent until the moment you withdraw it unless further retention is necessary for the protection of the rights of our Company; it is clarified that the withdrawal of consent does not affect the lawfulness of the processing carried out based on such consent before its withdrawal, (c) for as long as necessary in light of a legal obligation to which the Company is subject, (d) for as long as necessary in light of the legal position of our Company, such as to defend our rights before the Courts or to comply with regulatory controls. Specifically:
- Personal data processed for the Provision of Services (as per article 5.I. above) will be kept for a period strictly necessary for the fulfillment of such purpose. Information may be retained for a longer period to address any claims regarding the Services or to protect the Company’s interests in connection with a potential liability regarding the Provision of Services.
- Personal data processed for Marketing as well as Analysis purposes (as per Articles 5.I. and 5.IV. above), will be kept by the Company from the moment that you provide your consent until the moment you withdraw it. In case of withdrawal of consent, your data will no longer be used for these purposes, however, they may be retained by the Company, as we may be required to protect the Company’s interests in connection with a potential liability relating to such processing.
- Personal data processed for Soft Spam (as per article 5.III. above) will be kept by the Company from the moment you provide your data to us until the moment you object to such processing.
- Personal data processed for Compliance purposes (as per article 5.V. above), will be kept by the Company for the period required, following specific legal obligations for which such data were processed.
- Personal data processed for Security/Legitimate Interests purposes (as per article 5.VI. above), will be kept by the Company for a period strictly necessary for the fulfillment of the purposes for which such data were initially collected.
Following the lapse of the above-mentioned periods, all data will be deleted or anonymized, except for data that, based on applicable law, must be retained for a longer period of time.
11. YOUR RIGHTS
As a data subject, you have certain rights regarding your personal data, namely:
- Right to Access: You have the right to request access to your personal data that we hold. Upon such request, we will provide you with a copy of the personal data we process about you and information on how it is being processed;
- Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request rectification. We will promptly correct any inaccurate or incomplete information;
- Right to Erasure: You have the right to request the erasure of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if you withdraw your consent and there is no other legal basis for processing;
- Right to Restriction of Processing: You have the right to request the restriction of processing of your data under certain circumstances, such as when you feel that your data is inaccurate or that the processing is unnecessary or unlawful;
- Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal;
- Right to Data Portability: You have the right to request, under certain conditions, the portability of your personal data, namely, to obtain a copy of your personal data in a structured, commonly used, and machine-readable format, as well as to request the transmission of your personal data to another data controller;
- Right to Object: You have the right to object to the processing of your personal data.
Please note that there may be limitations or exceptions to these rights, depending on the specific circumstances of the processing activities. Additionally, we may require further information from you to verify your identity before fulfilling your request.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the relevant supervisory authority. Regarding the competency of the Hellenic Data Protection Authority and for information on how to file a complaint, you may visit the Authority’s website www.dpa.gr.
12. AMENDMENTS TO THE PRESENT PRIVACY POLICY
We reserve the right to update this Policy from time to time. Any changes will be prominently displayed on our Website, along with the date of the last update. These changes will be effective immediately upon posting on our Website, as indicated by the “Last Updated” date. In some cases, we may also provide additional notice of changes. We encourage you to review this Policy periodically, to acquaint yourself with the latest updated version.
13. CONTACT US
For any requests or inquiries that you may have regarding this Policy and/or if you want to exercise your rights as a data subject, please contact us by:
- Post: NEST LAND, 11 Mitropoleos Square, P.C. 105 56, Athens, Greece
- Email: info@nest-land.com
You can also contact us by filling out the Form in the ‘Contact Us’ section of our Website. We will make every effort to respond to your inquiry promptly.