Legal
Privacy & Data Protection Policy
Last updated: July 2026
1. Introduction
GreekHomeLoans ("we", "us", "our") operates a digital mortgage comparison platform. We are committed to protecting your personal data and complying with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, and all applicable data protection legislation.
This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and your rights as a data subject. By using our website and submitting your information, you confirm that you have read and understood this policy.
2. Data Controller
The data controller responsible for your personal data is:
GreekHomeLoans
VAT: 181710130
GEMI: 188988403000
Address: Ellinikou 3, Galatsi Athens 111 47
Name: PLATSIS, DIMITRIOS-ANTHONI
Email: info@greekhomeloans.com
Website: www.greekhomeloans.com
3. Personal Data We Collect
3.1 Information you provide directly
- Full name
- Email address
- Phone number
- Financial information (e.g. income, liabilities, desired loan amount, property value)
- Employment status and type
- Nationality and residency status
- Any other information you voluntarily submit
3.2 Technical and usage data
- IP address
- Browser type and version
- Pages visited and time spent on the website
- Referring URLs
- Device type and operating system
3.3 Information you provide to our AI assistant (Athina)
When you use Athina, our AI assistant, we process the messages you type so it can answer your questions and so we can monitor and improve the quality, safety and accuracy of the service. Athina is an automated assistant, not a person, and it does not provide regulated financial, legal or tax advice. Please do not enter sensitive personal or financial details into the chat — to get tailored figures, use the fact find, which has its own separate consent step.
Your messages are processed on our behalf by a specialist AI language-model provider (a sub-processor listed in Section 5.3) to generate Athina's replies. Athina is informational only and does not make any automated decision about you or your application.
We do not collect special categories of personal data (e.g. health, biometric, or criminal record data) unless explicitly required and separately consented to.
4. How We Use Your Personal Data
| Purpose | Legal Basis |
|---|---|
| Indicative mortgage comparisons | Pre-contractual service (Art. 6(1)(b) GDPR) |
| Share with affiliated broker(s) to contact you | Explicit consent (Art. 6(1)(a) GDPR) |
| Process payments for concierge services | Performance of a contract (Art. 6(1)(b) GDPR) |
| Schedule and manage consultation bookings | Pre-contractual service / consent (Art. 6(1)(b)/(a) GDPR) |
| Optional marketing updates | Explicit consent (Art. 6(1)(a) GDPR) |
| Legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
| Anonymised analytics to improve the website | Legitimate interests (Art. 6(1)(f) GDPR) |
| AI assistant (Athina) — answering your questions and reviewing chats to improve quality | Legitimate interests (Art. 6(1)(f) GDPR) |
5. Sharing Your Personal Data
5.1 Affiliated mortgage broker(s)
Where you have given explicit consent, we will share your personal data — including financial information — with one or more licensed mortgage broker(s) operating in Greece. They will contact you directly. The broker(s) act as independent data controllers in respect of the data they receive. We recommend you review their privacy policy upon contact.
5.2 Partner platforms
Some enquiries reach us through partner platforms (for example, the property marketplace Ruaa) where you used a mortgage calculator and explicitly agreed to share your details with us. In those cases we receive your contact details and the property/financing information you provided, and we act as an independent data controller for the data we receive. The partner is responsible for obtaining your consent at the point of collection.
5.3 Service providers (sub-processors)
We use the following third-party service providers (sub-processors) to operate our platform. Each is bound by a data processing agreement and processes your data only on our instructions. We do not sell your personal data to any third party for marketing purposes.
| Provider | Purpose | Region |
|---|---|---|
| Railway | Website hosting & database | EU (EEA) |
| Resend (Amazon SES) | Transactional email delivery | EU (EEA) |
| Microsoft 365 | Business email mailbox | EU / global |
| Stripe | Payment processing (concierge services) | EU / USA (SCCs) |
| monday.com | CRM / lead management | EU / outside EEA (SCCs) |
| Cal.com | Consultation scheduling | EU / USA (SCCs) |
| Mistral AI (France) | Generates the Athina chat assistant's replies from your messages | European Union |
Where a provider processes data outside the EEA, we rely on European Commission Standard Contractual Clauses (SCCs) or an equivalent transfer mechanism. This list may be updated as our providers change; the current version is reflected by the date at the top of this policy.
5.3 Legal requirements
We may disclose personal data if required by law or in response to valid requests from competent public authorities.
6. International Data Transfers
Your personal data is processed primarily within the European Economic Area (EEA). Where service providers are located outside the EEA, we ensure appropriate safeguards are in place, such as European Commission Standard Contractual Clauses (SCCs), in accordance with Chapter V of the GDPR.
7. Data Retention
We retain your data only while your engagement with GreekHomeLoans is active, and for as long as necessary to provide our services and to meet our legal, tax, and regulatory obligations.
Your data and file are deleted once your engagement has finished — or earlier on your written request — unless something must be kept longer for a legal, tax, or regulatory reason. Once no longer required, your data is securely and permanently destroyed, and we confirm this to you in writing.
Any logs of your conversations with our AI assistant (Athina) are kept for no longer than 90 days, solely to monitor and improve the quality, safety and accuracy of the assistant, and are then permanently deleted.
8. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to improve functionality and analyse usage. You can control or disable cookies through your browser settings.
9. Your Rights Under GDPR
- Right of access — request a copy of the personal data we hold about you (Art. 15).
- Right to rectification — request correction of inaccurate data (Art. 16).
- Right to erasure — request deletion in certain circumstances (Art. 17).
- Right to restriction of processing — request we limit how we use your data (Art. 18).
- Right to data portability — request your data in a machine-readable format (Art. 20).
- Right to object — object to processing based on legitimate interests or direct marketing (Art. 21).
- Right to withdraw consent — at any time, without affecting prior lawful processing.
- Right not to be subject to automated decision-making — we do not make legally binding decisions based solely on automated processing.
To exercise any of these rights, contact us at info@greekhomeloans.com. We will respond within 30 days at no charge.
You also have the right to lodge a complaint with:
Hellenic Data Protection Authority (HDPA)
1-3 Kifissias Ave., 115 23 Athens, Greece
Website: www.dpa.gr | Tel: +30 210 6475600
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews. If you suspect a data breach, contact us immediately at info@greekhomeloans.com.
11. Children's Data
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our platform, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top reflects the most recent revision. Where changes are material, we will notify you via the website or by email where possible.
13. Contact Us
GreekHomeLoans
VAT: 181710130
GEMI: 188988403000
Address: Ellinikou 3, Galatsi Athens 111 47
Name: PLATSIS, DIMITRIOS-ANTHONI
Email: info@greekhomeloans.com
Website: www.greekhomeloans.com
© 2026 GreekHomeLoans. All rights reserved.