Privacy Policy | Ektima — Cyprus Real Estate

1. Who We Are

Ektima is a Cyprus real estate platform operated by Dimitris Konstantinou, with registered offices at Killinis 18, 1st Floor, Mesa Geitonia, Limassol 4007, Cyprus. We can be reached at hello@ektima.com or +357 99 113 360.

This Privacy Policy explains how we collect, use, and protect your personal data when you use ektima.com. We are committed to full compliance with the General Data Protection Regulation (GDPR) and applicable Cyprus data protection law.

2. Data We Collect

We collect the following categories of personal data:

Account data: full name, email address, phone number, and role (buyer, owner, agent).
Property data: listing details, photos, addresses, and pricing information you submit.
Communication data: messages sent through inquiry forms, the contact page, and email correspondence.
Usage data: pages visited, listings viewed, and search filters applied. Collected in aggregate and not linked to individuals unless you are logged in.
Technical data: IP address, browser type, and device information collected automatically when you visit the site.

3. How We Use Your Data

To create and manage your account.
To publish and manage property listings on your behalf.
To send transactional emails: email verification, password reset, listing approval notifications, and inquiry confirmations.
To send rental contract expiry warnings to agents who have enabled this feature.
To respond to contact form submissions.
To improve the platform through anonymised usage analytics.

We do not sell your data to third parties. We do not use your data for advertising profiling.

4. Where Your Data Is Stored

All personal data is stored in the European Union. Specifically:

Supabase (database): hosted on AWS Frankfurt (eu-central-1), Germany. Supabase is GDPR-compliant and provides a Data Processing Agreement.
Cloudinary (image storage): property photos are stored on Cloudinary servers. Cloudinary is GDPR-compliant.
SendGrid (email delivery): transactional emails are sent via SendGrid, a Twilio company. SendGrid processes the recipient email address and email content for delivery purposes only.
Vercel (hosting): the platform is hosted on Vercel. Edge functions may process request metadata in regions closest to the user.

5. Data Retention

Account data is retained for as long as your account is active.
Listing data is retained for 24 months after a listing is deactivated.
Contact form submissions are retained for 12 months.
Session tokens expire after 30 days of inactivity.

6. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate data.
Right to erasure: request deletion of your account and associated data.
Right to portability: request your data in a machine-readable format.
Right to object: object to processing of your data for any purpose.
Right to restrict processing: request that we limit how we use your data.

To exercise any of these rights, email us at hello@ektima.com. We will respond within 30 days.

7. Cookies

Ektima uses a single authentication cookie named access_token to keep you logged in. This cookie is strictly necessary for the platform to function and does not track you for advertising purposes. We do not use third-party tracking cookies or analytics cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email when material changes are made. Continued use of the platform after notification constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or to exercise your rights, contact us at:

Ektima
Killinis 18, 1st Floor, Mesa Geitonia
Limassol 4007, Cyprus
hello@ektima.com
+357 99 113 360