1. General

1.1. The respect of your privacy and the protection of your personal data is a priority for our company. To make sure that your data is treated according to the law and that you are properly informed about the purposes and ways in which we process your personal data, we have adopted this Privacy Policy. This policy is addressed to the users (“Users”, “you”, “your”) of our website sunionian.com (“Website”) and our specialized real estate, architectural, and project execution services across the Ionian Islands.

1.2. Below you will find detailed information on the terms under which your data collected through the Website is processed by the Company, including:

  • Information about us, the data controller, and relevant contact details;
  • The types of personal data we collect, store, disclose, and use;
  • The purpose and legal basis for the processing;
  • Security measures for the protection, storage, and retention of your data;
  • Recipients of your personal data;
  • Your legal rights under the General Data Protection Regulation (GDPR) and the ways to exercise them.

2. Data Controller & Contact Details

2.1. The Data Controller responsible for your personal data via this website is Sun Ionian, operating professionally in real estate investment, spatial analytics, and premium architectural engineering, with a primary regional presence in Argostoli, Kefalonia, Greece.

  • Website: sunionian.com
  • Dedicated Data Privacy Email: data@sunionian.com

2.2. Questions & Inquiries: You may communicate with us using the contact details above to submit any comments, inquiries, observations, or complaints regarding this Privacy Policy and the processing of your personal data.

2.3. Scope: This Privacy Policy includes our framework for Cookies and should be read holistically. By visiting the Website, navigating our portfolios, or utilizing our inquiry forms, you accept the practices described in this Privacy Policy. If you do not agree with these practices, please do not interact with the Website or submit data.

II. COLLECTION AND PROCESSING OF PERSONAL DATA

3. General Principles

3.1. We undertake the responsibility to process your personal data fairly, lawfully, and in a transparent manner. We only collect data that is adequate, relevant, and strictly limited to what is necessary for our high-end architectural and real estate operations.

3.2. We do not knowingly collect or process personal data of individuals under the age of 18. If you are under 18, please do not use the Website or submit contact forms.

4. What Data We Collect

Via your interactions with the Website, we collect different types of data:

  • Communication & Project Data: First/last name, email address (data@sunionian.com), telephone number, and any explicit details regarding property inquiries, site parameters, or architectural project scopes you submit through our contact portals.
  • Technical Data: IP address, browser type and version, operating system, and localized traffic data.
  • Cookie Data: Data related to how you navigate and interact with our high-fidelity imagery and project portfolios.

5. How and Why We Use Your Data (Legal Basis)

We process your data under the following legal frameworks dictated by European Law (GDPR) and Greek regulatory frameworks:

Purpose of Processing Data Types Involved Legal Basis
Inquiry Management & Project Consultation: Evaluating site acquisitions, property briefs, and custom engineering inquiries. Communication Data, Property Project Details Your Explicit Consent upon submitting an inquiry form, or steps taken at your request prior to entering into a professional service agreement.
Website Performance & Portfolios: Optimizing 3D rendering presentations, responsive UI, and spatial layout elements. Technical Data, Cookies Legitimate Interest in delivering a seamless, high-performance visual experience to prospective clients.
Compliance & Legal Obligations: Satisfying building, planning, or statutory transparency laws in Greece. Corporate/Communication Data Legal Obligation to comply with financial, tax, and statutory auditing procedures.

5.1. Consent Withdrawal: Where processing is based on your explicit consent, you retain the absolute right to withdraw it at any time by contacting us at data@sunionian.com.

6. Data Sharing and International Transfers

6.1. We treat your data with strict confidentiality. We do not sell or lease your personal information.

6.2. Your data is only shared with trusted technical subcontractors strictly necessary to operate our business ecosystem (such as our secure cloud hosting providers, architectural rendering/visualization partners, or web development team) under strict data-processing agreements.

6.3. Sovereign Borders: Sun Ionian processes and stores your personal data securely within the European Economic Area (EEA). We do not regularly transfer data outside the EEA.

III. PROTECTION, SECURITY, AND YOUR RIGHTS

7. Data Security

We implement robust, state-of-the-art technical and organizational security measures to protect your personal information from unauthorized access, loss, disclosure, modification, or destruction. Access to data submitted to us is restricted to specifically authorized personnel who require it to evaluate your real estate or architectural briefs.

8. Data Retention Timeframes

We store data only for the timeframe required to fulfill the original purpose of collection (e.g., managing your project inquiry or executing a contract), or as mandated by Greek statutory limitation periods (typically up to 20 years for structural liabilities and engineering service contracts). If an inquiry does not materialize into a formal collaboration, your data is routinely purged after 2 years.

9. Your Legal Rights under GDPR

As a data subject, you hold comprehensive rights regarding your personal information. You can exercise these at any time by emailing data@sunionian.com:

  • Right of Access: Request a copy of all personal data we hold about you.
  • Right to Rectification: Request corrections to any inaccurate or incomplete records.
  • Right to Erasure (“Right to be Forgotten”): Request the total deletion of your data, provided we are not legally bound to retain it for statutory or regulatory compliance.
  • Right to Restriction of Processing: Limit how we process your data under specific conditions.
  • Right to Data Portability: Request that we transfer your data directly to another controller in a structured, machine-readable format.
  • Right to Object: Object to processing based on our legitimate interests.

Regulatory Authority: If you believe your data protection rights have been infringed, you maintain the right to lodge an official complaint with the competent supervisory authority: the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

IV. UPDATES TO THIS POLICY

We reserve the right to update this Privacy Policy periodically to reflect shifts in our spatial services, operational workflows, or updated European privacy legislation. The updated version will be marked with a revised date at the top of the webpage.