This Privacy Policy explains how Vouniotis Real Estate (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you use our website at vouniotis.com, the property map at maps.vouniotis.com (together, the “Website”), or our estate-agency services. It also explains your rights and how to exercise them.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Cyprus Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and the Free Movement of such Data (Law 125(I)/2018).
The data controller is:
E. Michail (Vouniotis) Real Estate Agent Ltd, trading as Vouniotis Real Estate
Company registration no. HE414995
Shop 3, Jean Sibelius Street 11, 3017 Limassol, Cyprus
Email: info@vouniotis.com
Phone: +357 700 88 700
We are a licensed estate agent in Cyprus (Estate Agents Registration Council reg. no. 1092, licence no. 393/E). For any question about this policy or your personal data, write to info@vouniotis.com.
Formal property valuations are carried out by our sister company, CPA Cyprus Property Appraisals, which is a separate company and a separate data controller for the valuations it performs. If you ask us for a valuation, we pass your request to CPA (see “Who We Share Your Data With” below), and CPA’s own privacy notice then applies to the valuation.
Contact and enquiry forms: your name, email address, phone number, the property you are interested in and the content of your message.
“List Your Property” form: your name and contact details, details of the property (type, location, size, price, description), up to 8 photographs you upload and, if you choose to give it, the property address.
Valuation requests: your contact details, the property details and the purpose of the valuation.
Property alerts: your email address and the search criteria you choose (for example area, property type and price range).
User accounts on the property map: your name, email address, password (stored only in encrypted, hashed form), account level, saved searches and preferences, and a record of the parcels you look up. Certain information (such as ownership or fiscal data) is available only to authorised users, and we log each access to it.
Title-deed photo reading: if you use the option to photograph your title deed, the photo is used only to read the parcel identifiers so that we can show the parcel on the map. The photo itself is not stored, and owner names, ID numbers and shares are not read or kept. If you then choose “I want to sell it”, we keep your contact details and the parcel identifiers so that we can contact you.
Location: if you allow it in your browser, your device’s location is used to centre the map. We do not store it.
Access and security logs: when you visit the Website, our servers and security services record technical data such as your IP address, date and time, pages requested, browser and device type, and login attempts. We use these logs to keep the Website secure, prevent abuse and fix faults, and to produce basic usage statistics.
Clients: if you become our client (for example as a seller, buyer, landlord or tenant), we also keep the information needed for the transaction and the identification documents and information we are required to collect under anti-money-laundering (AML) law.
We use essential cookies, which the Website needs to work (for example to keep you logged in, remember your language and protect forms against misuse). We do not use advertising cookies.
Analytics cookies — only with your consent. If you click «Accept» on our cookie bar, we use Google Analytics 4 (provided by Google Ireland Limited) to understand how visitors use the Website — for example which pages are viewed, how visitors reach us, their approximate location (country or city) and their type of device and browser. Google Analytics then sets the cookies _ga and _ga_*, which last up to 2 years, and the data is kept in Google Analytics for 14 months. Google signals and advertising features are switched off, and we do not use this data to identify you. If you click «Only necessary» or make no choice, Google Analytics is not loaded at all. The legal basis is your consent (GDPR Art. 6(1)(a)); you can change or withdraw it at any time through Cookie settings at the bottom of every page. Google may process this data outside the European Economic Area under the EU–US Data Privacy Framework and standard contractual clauses.
Our forms are protected by Google reCAPTCHA, which checks that a form is being sent by a person and not by an automated program. To do this, Google collects information such as your IP address, browser and device data and how you interact with the page, and may set its own cookies. Google’s Privacy Policy and Terms of Service apply.
You can block or delete cookies in your browser settings, but some parts of the Website (such as logging in or sending a form) may then not work.
Answering enquiries, arranging viewings and preparing to act for you (contact forms, “List Your Property”, valuation requests): taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us (GDPR Art. 6(1)(b) and (f)).
Providing our agency services (sales, rentals and related services under a written agency agreement): performance of a contract with you (Art. 6(1)(b)).
Running your account on the property map: performance of our agreement with you under the Terms of Use (Art. 6(1)(b)).
Keeping the Website secure, preventing spam and abuse, logging access to restricted data and producing basic usage statistics: our legitimate interests (Art. 6(1)(f)).
Property alerts and marketing emails: your consent (Art. 6(1)(a)). You can unsubscribe at any time through the link in each email or by writing to us.
Meeting our legal obligations, including anti-money-laundering checks and record-keeping, tax and accounting rules, and requests from competent authorities: legal obligation (Art. 6(1)(c)).
Where we rely on legitimate interests, you have the right to object (see “Your Rights” below). Where we rely on consent, you can withdraw it at any time; this does not affect processing that took place before you withdrew it.
We do not sell your personal data, and we do not share it with third parties for their own marketing. We share it only as follows:
Our service providers, who process data on our behalf and under our instructions: our IT and hosting providers, our email service providers, Cloudflare (website security, content delivery and protection against attacks), Google reCAPTCHA (form protection), and the map and tile providers whose base maps and imagery are shown on our maps (such as Google and Esri/ArcGIS Online), which receive your IP address and the map area requested when your browser loads map tiles. Some pages also load fonts and program libraries from content delivery networks, which likewise receive your IP address.
CPA Cyprus Property Appraisals, our sister company, only when you ask for a valuation.
Lawyers, banks and other parties to a transaction (for example the other party’s agent or the Department of Lands and Surveys), only on your instruction or where needed to carry out a transaction you have asked us to handle.
Public authorities, such as tax authorities, the police, courts, the Estate Agents Registration Council or AML supervisory authorities, where the law requires us to.
Some of our service providers, in particular Cloudflare and Google, may process personal data outside the European Economic Area (EEA), including in the United States. Where this happens, the transfer is protected by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework, where the provider is certified) or by the European Commission’s standard contractual clauses. You can ask us for more information about these safeguards.
Enquiries (contact forms, “List Your Property” and valuation requests that do not lead to a business relationship): 2 years after our last contact with you.
Client records: 6 years after the end of our business relationship, for tax, accounting and legal-claims purposes.
AML records (identification documents and transaction records): 5 years after the end of the business relationship, or longer if the law or a competent authority requires it.
Access and security logs: up to 12 months.
Property alerts: until you unsubscribe.
User accounts: for as long as your account is open. If you close your account, or we close it after a long period of inactivity, we delete your account data, except any records we must keep for the periods above.
Under the GDPR you have the right to:
Access: ask for a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: ask us to delete your data, unless we must keep it by law.
Restriction: ask us to limit how we use your data in certain circumstances.
Data portability: receive the data you gave us in a structured, commonly used, machine-readable format.
Objection: object to processing based on our legitimate interests, and to direct marketing at any time.
Withdraw consent: where we rely on your consent, withdraw it at any time.
To exercise any of these rights, email info@vouniotis.com. We may ask you to confirm your identity. We will reply within one month; if your request is complex, we may extend this by up to two further months and will tell you why.
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include encrypted connections (TLS), access controls, hashed passwords, logging of access to restricted data, and regular security reviews. No system is completely secure, so please keep your password confidential.
Our services are not directed at people under 18, and we do not knowingly collect their personal data.
If you have a concern about how we handle your data, please contact us first at info@vouniotis.com. You also have the right to lodge a complaint with the supervisory authority in Cyprus:
Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
Tel: +357 22 818 456
Website: www.dataprotection.gov.cy
As an estate agent, we are supervised by the Estate Agents Registration Council (Συμβούλιο Εγγραφής Κτηματομεσιτών).
We may update this Privacy Policy to reflect changes in our services or in the law. The latest version will always be posted on this page with its date. If we make significant changes, we will tell account holders by email or through a notice on the Website.
Last updated: 24 October 2026
