Skip to content

Legal

Privacy policy

Version: September 2026

The essentials

This website works without cookies, without analytics or tracking services and without embedded third-party content. Fonts, images, videos and the map are stored on our own web space. A simple visit only generates the technical access data that every web server needs.

We only receive further personal data if you contact us yourself: through the enquiry form, by email, phone or WhatsApp. That is why we do not need a cookie banner.

Controller

Space Enterprise I.K.EKalyves Tresilio, Position Vounaria 124022 Kardamili, Greece

Represented by the managing director (Διαχειριστής)
Peter Dundovic

We are not required to appoint a data protection officer. Please send any questions about data protection to the contact details above. Full company details are in the legal notice.

Hosting and server log files

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Hostinger processes the data on our behalf. The data processing agreement under Art. 28 GDPR is part of Hostinger's terms of service. The servers are located in Germany.

Each time a page is requested, the server automatically stores access data in log files:

  • IP address of the requesting device
  • date and time of access
  • requested address and previously visited page (referrer)
  • status code and amount of data transferred
  • browser and operating system

We need this data to deliver the site, find errors and fend off attacks. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in secure and stable operation. We do not analyse the log files for marketing and do not combine them with other data. They are deleted automatically once the host's retention period expires.

Hostinger uses further service providers for parts of its operations, for example network protection and email delivery. Where these are located outside the European Economic Area, Hostinger safeguards the transfer with EU standard contractual clauses. The current list is in Hostinger's data processing agreement.

The connection to this website is encrypted with TLS. You can recognise this by “https” and the padlock symbol in your browser's address bar.

No cookies, no analytics, no third-party content

We set no cookies. No analytics, advertising or social media services are running. On the information pages we also store nothing in your browser. The client area is the exception, see below.

The fonts Bodoni Moda and Manrope are hosted locally on our server. Your browser does not connect to Google or any other provider to load them.

The map is a static image stored on our server. The map data comes from OpenStreetMap contributors. Only if you click the map does your browser open openstreetmap.org, where the OpenStreetMap Foundation privacy policy applies.

The “copy number” function runs entirely in your browser. Nothing is transmitted to us or to third parties.

Enquiry form

If you use the enquiry form, we process the details you enter there:

  • type of enquiry and the areas selected
  • details about the property or project, for example type, location, size and services required
  • your message
  • name and email address, and depending on the enquiry, company and phone number
  • preferred contact channel and preferred language
  • sent automatically: language version and address of the page, time of submission

The form sends the details in encrypted form to a script on our web space at Hostinger. The script does not store the enquiry; it forwards it as an email to post@space-enterprise.eu. The mailbox is also hosted by Hostinger. Only Peter Dundovic reads and handles your enquiry.

To prevent spam, the form contains a field that is invisible to people. The script also limits submissions to five within ten minutes. For this it stores a check value (hash) derived from your IP address together with the times of submission. This entry is deleted after ten minutes. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in preventing misuse.

The legal basis for handling your enquiry is Art. 6(1)(b) GDPR where it concerns a quote or an order. In all other cases, such as cooperation or press enquiries, it is Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries. The tick box in the form confirms that you have read this information. It is not consent, and we do not rely on consent for this processing.

Providing the details is voluntary. Without a name and a way to reach you, however, we cannot reply.

We delete your enquiry once it has been dealt with. If it leads to an order, we keep the correspondence for as long as Greek commercial and tax law requires.

If the transmission fails, the form offers to send the prepared enquiry with your own email program or via WhatsApp. In that case the following sections apply.

Please do not send us access codes, alarm PINs or key hiding places through the form, by email or via WhatsApp. We discuss such details with you in person.

Contact by email and phone

If you email or call us, we process your contact details and the content of your message to deal with your request. Legal basis, storage period and recipients are the same as for the enquiry form.

Emails are encrypted in transit where your provider supports it. There is no end-to-end encryption.

Contact via WhatsApp

The website contains a WhatsApp button and WhatsApp links. These are plain links, not embedded plugins. No data is transmitted to WhatsApp when our pages load.

Only when you click such a link does your browser open wa.me or the WhatsApp app. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp receives, among other things, your IP address and device and browser data. If you message us, your phone number, profile name, connection data and message content are added. Message content is end-to-end encrypted.

WhatsApp is itself responsible for this data, see the WhatsApp privacy policy. Data may be transferred to the Meta group in the USA. The companies involved are certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR).

We currently use WhatsApp through the standard app on Peter Dundovic's smartphone solely to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR for enquiries about quotes or orders, otherwise Art. 6(1)(f) GDPR, our interest in communicating quickly through the channel you chose. We delete chat histories once your request has been dealt with and no retention duties apply.

If you prefer not to use WhatsApp, you can reach us just as well by phone, email or the enquiry form.

“Client area” page

The client area at /portal/ currently runs in demo mode with fictitious sample data. There are no real client accounts yet. Anything you enter or change there, for example a test message or a damage report, is not transmitted to us.

For the demo to work, your browser keeps the sample data with your changes and the chosen language in local storage, and the chosen role in session storage until the tab is closed. The email address from the sign-in field is only passed on to the client area within your browser. This storage is technically necessary for the function you are using. You can remove everything at any time by clearing this site's data in your browser.

Before real client accounts go live and process any data, we will update this policy.

Recipients and transfers to third countries

Apart from us, personal data from the website is received only by:

  • Hostinger as processor for hosting, form delivery and the email mailbox, including its sub-processors
  • WhatsApp, but only if you choose this channel yourself

We do not sell data and do not pass it on for advertising. Data reaches countries outside the European Economic Area only through the providers named above and on the bases described there. There is no automated decision-making or profiling under Art. 22 GDPR.

Your rights

Regarding your personal data, you have the following rights against us:

  • access to the stored data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing (Art. 21 GDPR)

Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds, or the processing serves the establishment, exercise or defence of legal claims.

An informal message to post@space-enterprise.eu is enough for any of these requests.

Complaint to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hellenic Data Protection Authority:

Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)Kifisias 1-3, 115 23 Athens, GreecePhone: +30 210 6475600Email: complaints@dpa.grwww.dpa.gr

You may also contact the supervisory authority in the country where you live or work.

Changes to this policy

We update this policy whenever the website or our data processing changes, for example when the client area goes live. The version published here applies.