This notice explains how Kassandra Enterprises handles personal data in connection with this website and our dealings with you.
Who we are
The data controller is Kassandra Enterprises I.K.E. (Kassandra Enterprises), 15 Electras Str., 14562 Athens, Greece. You can reach us at info@kassandra-enterprises.com.
What we collect
This website does not use analytics, advertising or tracking cookies, and it has no contact form. When you visit, your IP address, the date and time, the page requested and your browser type are processed to deliver the page and keep the site secure. Our web server keeps these in technical logs, and our network provider (see below) processes them too.
If you email or call us, we receive the details you choose to share, such as your name, contact details and the subject of your enquiry. If you become a tenant or a client, we process the information needed for the lease or engagement and for our legal, tax and accounting obligations.
Why we use it
- To answer your enquiry and take steps you ask for before a contract (Article 6(1)(b) GDPR).
- To perform leases and service contracts (Article 6(1)(b) GDPR).
- To meet legal obligations, such as tax and accounting rules (Article 6(1)(c) GDPR).
- To keep the website secure, which is our legitimate interest (Article 6(1)(f) GDPR).
How long we keep it
Enquiries that do not lead to a contract are deleted within 12 months. Contract, tax and accounting records are kept for the periods Greek law requires. Server logs are kept for no longer than 30 days.
Who we share it with
We do not sell personal data. We share it only where necessary: with our accountant, legal advisers and bank, with public authorities where the law requires it, and with the providers that run our email and website on our behalf.
Traffic to this website passes through Cloudflare, Inc., which provides our domain name service, content delivery and protection against attacks. Cloudflare acts as our processor and sees visitors' IP addresses and request details. Cloudflare is based in the United States; transfers are covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. See Cloudflare's privacy policy.
Cookies
Visitors are not tracked. If Cloudflare's bot protection is active, it sets a strictly necessary security cookie (__cf_bm) to tell people from automated traffic. It is not linked to any account on this site and expires after 30 minutes of inactivity. The site itself sets a session cookie only when an editor logs in.
Your rights
You can ask for access to your data, its correction or erasure, restriction of or objection to its processing, and data portability. Write to privacy@kassandra-enterprises.com. You also have the right to complain to the Hellenic Data Protection Authority at dpa.gr.
Last updated: 22/10/2026.