Privacy

1. Who is responsible

The controller of the data described on this page is Under the Greek Sun Μονοπρόσωπη Ι.Κ.Ε., a single-member private company registered in Greece. VAT number EL803384385 (Sparta tax office) · GEMI registration 195783239000 (Chamber of Laconia) · registered office: 149 Triakosion and K. Palaiologou, 23100 Sparta, Greece.

The company was incorporated on 1 September 2026. Until that date the site was operated by Carly Gianakas in her own name. Responsibility for everything described on this page now rests with the company.

For anything on this page, write to info@undergreeksun.com.

2. When you send an enquiry

The enquiry form is the only form on this site for buyers. It opens from the Enquire button on any page.

You give us:

• your name — required
• your email address — required
• your telephone number — optional
• the country you are based in
• your message
• the reference of the property, if you opened the form from one

Your browser tells us at the same time:

• which advertisement, campaign, search or website sent you here, if any
• the page you first landed on
• which language version you were reading
• the browser and operating system your browser reports

We use this to answer you, to keep a record of the enquiry, and to understand which advertising works. If your enquiry concerns a particular property, we also record an introduction to that property, so that we and the agency responsible can establish who introduced the buyer.

3. When you submit a property

If you offer a property as an owner or an agent, we collect the details of the property, the photographs you upload, your name, email address and telephone number, whether you are an owner, an agent or a representative, your GEMI registration number if you are an agent, and when you would prefer to be called. Before sending, you are asked to confirm two things: that you agree to us processing these details, and that you are entitled to offer the property.

4. When you apply to work with us

The Become a partner page is for estate agents and agencies. If you apply, we collect your name, email address and telephone number, the city you work from, the regions you cover, the languages you speak, whether you are an agent, an agency or an owner, how many years you have been doing this, and the CV file you upload.

The CV is kept in a private area of our database. It is not reachable from the web and it is not shared with the estate agencies on the site. Only our own staff can open it, and only through a link that stops working after five minutes.

5. When you make an account

An account is optional. Everything on this site can be read, searched and enquired about without one. An account exists so that your Folio follows you from your phone to your laptop, and so that you can find the enquiries you have already sent.

We ask for:

• your name — required
• your email address — required, and it is how you sign in
• a password — required
• your country — required
• your city — optional
• your telephone number — optional
• your date of birth — optional

About the password. We never see it and we cannot recover it. It is turned into a one-way hash by Supabase before it is stored; nobody at Under the Greek Sun, and nobody with access to our database, can read it back. That is also why a forgotten password is replaced rather than looked up.

About the date of birth. We ask so that we know we are dealing with an adult, since buying property requires it, and so that we understand who our buyers are. Nothing on the site depends on it — leave it blank if you would rather not say.

About the telephone number. It is there so an agent can call you about a property you asked about, rather than only email. Leave it blank and we will only write.

You may also tick a box asking us to email you when a property arrives that matches what you are looking for. That box is unticked by default, it is the only thing on this site that could be called a mailing list, and you can untick it at any time.

You can ask us to delete your account and everything attached to it. Write to info@undergreeksun.com.

6. What we do not do

• We set no cookies.
• We run no analytics — no Google Analytics, no advertising pixel, no session recording, no heatmaps.
• We do not sell, rent or trade your details to anyone.
• We do not put you on a mailing list. If we email you, it is a reply.

7. What is kept in your browser

Three small values are stored on your own device, in your browser's local storage. They stay on your device, we cannot read them remotely, and clearing your browsing data removes them.

• Your currency choice — so the site does not forget it.
• Your Folio — the properties you saved.
• How you first arrived — the campaign or website that brought you. It reaches us only if you send an enquiry.
• Your sign-in, if you have an account — a token that keeps you signed in, and the address you signed in with. Signing out deletes both. This value is what proves to our database that you are you, so treat it as you would a password on a shared computer.

8. Our legal basis

• Answering your enquiry — steps taken at your request before entering into a contract, and our legitimate interest in replying to people who write to us. GDPR Article 6(1)(b) and 6(1)(f).
• A property you submitted — your consent, given by the boxes you tick, and steps before a contract. Article 6(1)(a) and 6(1)(b).
• Records of an introduction — our legitimate interest in establishing who introduced a buyer, and our obligations to keep commercial and tax records. Article 6(1)(f) and 6(1)(c).
• Knowing which advertisement worked — our legitimate interest in not wasting money on advertising that brings no one. Article 6(1)(f). You may object to this at any time.
• Your account — performance of the agreement you enter into when you create one, so that we can sign you in and keep your Folio. Article 6(1)(b).
• A partner application — steps taken at your request before a working relationship, and your consent to us holding the CV you sent. Article 6(1)(b) and 6(1)(a).
• Telling you about a matching property — your consent, given by ticking that box, and withdrawn by unticking it. Article 6(1)(a).

9. Who else handles it

We use a small number of service providers. They act on our instructions and may not use your details for their own purposes.

• Supabase — the database that holds enquiries, property records, accounts and the CV files sent with partner applications. It also runs the sign-in itself and sends the confirmation and password-reset emails. European region.
• Cloudflare Images — stores and serves property photographs.
• Hostinger — hosts the website.
• Microsoft 365 — our info@ mailbox, where your enquiry arrives as an email.
• Google — a Gmail address currently receives a copy of each enquiry notification, so that nothing is missed.
• Google Fonts — the typefaces on this site load from Google's servers, which means Google receives your IP address when a page opens.

10. Where it is stored, and transfers

The database is in the European Economic Area. Email and fonts involve providers based in the United States, which can mean your details are processed outside the EEA; those providers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and on standard contractual clauses.

11. How long we keep it

• Enquiries and the contact record made from them — 24 months after our last contact with you.
• Records tied to an introduction or a commission — 5 years, as commercial and tax records require.
• Properties submitted but not published — 12 months after you withdraw them.
• Your account — for as long as you keep it. Delete it and the account, your Folio and your saved searches go with it. What we keep afterwards is only what an enquiry you already sent obliges us to keep, under the periods above.
• Partner applications and the CV attached — 12 months after we decide, unless we work together, in which case the working relationship governs it. Ask us and we delete it sooner.
• Emails in our mailbox — as long as the correspondence is live, then archived with the rest of our mail.

You can ask us to delete your details sooner. See below.

12. Your rights

If the GDPR applies to you, you may ask us to: give you a copy of what we hold about you; correct it; delete it; restrict what we do with it; send it to you or to someone else in a portable form; or stop processing it where we rely on legitimate interest. Where we rely on your consent, you may withdraw it at any time — that does not affect what we did before you withdrew it.

Write to info@undergreeksun.com. We answer within one month.

If you think we have handled your details badly, you may complain to the Greek Data Protection Authority (dpa.gr), or to the supervisory authority of the EU country you live in.

13. If you are in the United States or Canada

We do not sell or share personal information as those words are defined in California law, and we do not use it for cross-context behavioural advertising. Residents of California and of other states with similar laws may ask what we hold, ask for it to be deleted, and ask us to correct it — the same email address applies, and we will not treat you differently for asking. If you are in Canada, the same applies under PIPEDA.

14. Children

This site is for people buying and selling property. It is not aimed at children, and we do not knowingly collect details from anyone under 18.

15. Changes to this page

If we change what we collect — for example if we add advertising measurement that uses cookies — we will change this page first and update the date at the top. Anything that requires your consent will ask for it before it runs.

16. Contact

Under the Greek Sun Μονοπρόσωπη Ι.Κ.Ε. · info@undergreeksun.com · 149 Triakosion and K. Palaiologou, 23100 Sparta, Greece