Privacy Policy

Last updated: March 2025
1. General Information
Protecting your personal data is very important to us. We treat your personal data confidentially and in accordance with applicable data protection regulations, especially the EU General Data Protection Regulation (GDPR) and Greek data protection law.
This privacy policy informs you about the type, scope, and purpose of the collection and use of personal data on our website https://www.ooto.gr
2. Data Controller
Monolith Real Estate Greece S.A.
Platia Vallianou, Megaro Ampatielou
28100 Argostoli, Greece
Email: info@ooto.gr
Phone: +30 698 0668397
3. Collection and Processing of Personal Data
a) Visiting the Website
When you visit our website, the following data is automatically collected:
-
IP address (anonymized)
-
Date and time of access
-
Browser type and version
-
Operating system
-
Referrer URL
-
Hostname of the accessing device
The processing of this data is necessary to ensure a stable connection and system security (Art. 6 (1) lit. f GDPR).
b) Contact Form and Bookings
If you contact us via our contact form or make a booking inquiry, we collect:
-
Name
-
Email address
-
Telephone number (optional)
-
Your message/booking details
The processing of this data is necessary to handle your inquiry (Art. 6 (1) lit. b GDPR).
Important: No payment data is collected via our website. Payment processing is handled externally if applicable.
c) Newsletter
When subscribing to our newsletter, we use your email address and, optionally, your name to send regular updates.
Subscription requires double opt-in confirmation.
Legal basis: Art. 6 (1) lit. a GDPR (consent).
You can revoke your consent at any time by emailing info@ooto.gr.
4. Security: Google reCAPTCHA
To protect our forms (e.g., contact form) from misuse and spam, we use Google reCAPTCHA (Version 3).
This service transmits IP addresses and potentially other data required by Google.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in security).
More information: https://policies.google.com/privacy.
5. Cookies and Similar Technologies
Our website uses cookies. Cookies are small text files stored on your device.
Types of cookies used:
-
Technically necessary cookies: For operation and security of the website (Art. 6 (1) lit. f GDPR)
-
Analytics/Marketing cookies: Only with your consent (Art. 6 (1) lit. a GDPR)
You can adjust your cookie settings at any time via the cookie banner.
6. Use of Third-Party Services
a) Google Analytics
We use Google Analytics to analyze user behavior. IP addresses are anonymized.
Legal basis: Art. 6 (1) lit. a GDPR (consent).
More information: https://policies.google.com/privacy.
b) Google Tag Manager
We use Google Tag Manager to manage analysis and marketing tools. This service does not store personal data itself.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in efficient management).
c) Google Ads
We use Google Ads for online advertising. Cookies may be set and data transmitted to Google.
Legal basis: Art. 6 (1) lit. a GDPR (consent).
d) Google Maps
We use Google Maps to display maps. When used, data (e.g., IP address) is transmitted to Google.
Legal basis: Art. 6 (1) lit. a GDPR (consent).
e) Wix
Our website is hosted by Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel. Wix stores and processes data on servers worldwide.
More information: https://de.wix.com/about/privacy.
f) Social Media (Facebook, Instagram)
Our website contains links to our profiles on Facebook and Instagram. Clicking these links will take you to the respective platforms. The privacy policies of these providers apply:
7. Data Retention and Deletion
We only retain personal data as long as necessary for the purposes described or as required by law.
Once the purpose is fulfilled or statutory retention periods expire, data will be deleted.
8. Your Rights as a Data Subject
You have the right to:
-
Access (Art. 15 GDPR)
-
Rectification (Art. 16 GDPR)
-
Erasure (Art. 17 GDPR)
-
Restriction of processing (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
-
Object to processing (Art. 21 GDPR)
-
Withdraw consent (Art. 7 (3) GDPR)
To exercise your rights, please contact us at: info@ooto.gr.
9. Data Transfers to Third Countries
Some third-party providers (e.g., Google, Wix) are located outside the EU. Data is only transferred if appropriate safeguards under Art. 44 et seq. GDPR are in place (e.g., standard contractual clauses).
10. Changes to This Privacy Policy
We may update this privacy policy as needed. The current version is always available on our website.
​