Skip to content
Athestate

Privacy Policy

Last updated: July 2026

This Privacy Policy describes how personal information is collected, used, and protected through the website ath.estate (the “Website”).

The Website is published and operated by RadiantGloom OÜ, a private limited company registered in Estonia (Tornimäe 5, Tallinn, Estonia), which acts as the website editor and data controller for the processing of personal data collected through this Website.

The advisory services presented on the Website are provided by Athestate I.K.E., a private company registered in Agiou Konstantinou 6, 104 31 Athens, Greece. Athestate I.K.E. acts as data processor on behalf of, and under the instructions of, the controller for the purpose of handling consulting requests.

For any question regarding this policy, contact us at contact@athestate.com.

1. Roles

Data controller (responsible for determining the purposes and means of the processing):

RadiantGloom OÜ
Tornimäe 5, Tallinn, Estonia
Contact: contact@athestate.com

Data processor (handles inquiries on behalf of the controller):

Athestate I.K.E.
Agiou Konstantinou 6, 104 31 Athens, Greece
Greek business registry (GEMI / ΑΦΜ): to be completed

2. Information We Collect

We collect only the information you provide directly to us, namely when you:

  • Fill in the lead-capture or contact form on the Website (name, email address, phone number, free-text message);
  • Subscribe to our newsletter or request a consultation;
  • Communicate with us by email, phone, or video conference.

We also automatically receive technical information when you browse the Website, including IP address, browser type, operating system, referring URL, and pages visited. This information is used in aggregated form only for security (rate-limiting of form submissions) and basic traffic analysis. We do not use third-party analytics services.

3. Cookies

The Website uses a minimal set of cookies. For full details on the cookies we use, please read our Cookie Policy.

4. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide the consulting services you have requested;
  • Prepare proposals related to Greek real estate investment and Golden Visa eligibility, handled by Athestate I.K.E.;
  • Send you relevant updates about Greek real estate and Golden Visa opportunities, only if you have given us your explicit consent;
  • Comply with our legal and accounting obligations;
  • Ensure the security of the Website and prevent fraudulent or abusive submissions.

5. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

  • Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR) — when you request a consultation or advisory services;
  • Explicit consent (Article 6(1)(a) GDPR) — for sending you marketing communications about Golden Visa and Greek real estate opportunities;
  • Legitimate interest (Article 6(1)(f) GDPR) — for ensuring the security of the Website and preventing abuse (rate-limiting by IP address);
  • Legal obligation (Article 6(1)(c) GDPR) — for keeping records required by Greek and EU law.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Lead and contact form submissions: up to 24 months from the last contact;
  • Client files (when a consulting engagement is signed with Athestate I.K.E.): up to 10 years in accordance with Greek accounting and tax law;
  • IP-based rate-limiting transients: 1 hour (then automatically discarded).

7. Your Rights Under the GDPR

As a data subject, you have the following rights:

  • Right of access (Article 15 GDPR) — to obtain confirmation as to whether we process your data and to receive a copy;
  • Right to rectification (Article 16 GDPR) — to correct inaccurate or incomplete data;
  • Right to erasure (“right to be forgotten”, Article 17 GDPR);
  • Right to restriction of processing (Article 18 GDPR);
  • Right to data portability (Article 20 GDPR);
  • Right to object (Article 21 GDPR) — including objection to direct marketing;
  • Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • Right to lodge a complaint with a supervisory authority (Article 77 GDPR) — in Estonia, the Estonian Data Protection Inspectorate (aki.ee); in Greece, the Hellenic Data Protection Authority (dpa.gr).

To exercise any of these rights, write to contact@athestate.com. We will respond within 30 days.

8. Sharing of Your Data

We do not sell, rent, or trade your personal information. We may share your data with:

  • Athestate I.K.E., our advisory partner in Greece, acting as data processor under a data-processing agreement, strictly on a need-to-know basis to handle your consulting request;
  • Professional advisors (lawyers, accountants, notaries) when required to deliver the services you have requested;
  • Service providers acting as data processors on our behalf (web hosting, email), bound by data-processing agreements;
  • Public authorities when required by law.

9. Hosting and International Transfers

The Website and the database of leads are hosted on servers located in Germany, within the European Union. By default, your personal data is therefore processed within the EU/EEA. Where a transfer outside the EU/EEA is necessary (for example, when we use a service provider established outside the EU), we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR (e.g., Standard Contractual Clauses).

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include TLS encryption in transit, controlled access on a need-to-know basis, rate-limiting of form submissions, and regular backups. The lead-capture form is protected by a honeypot field and an IP-based rate-limit of 5 submissions per hour.

11. Children

The Website and the services presented on it are not directed to children under the age of 16, and we do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always available at this page, with the “Last updated” date at the top. For material changes, we will notify you by email where appropriate.

13. Contact

For any question regarding this Privacy Policy or our processing of your personal data, please contact the data controller at contact@athestate.com.

Last updated: July 2026. Data controller: RadiantGloom OÜ, Tornimäe 5, Tallinn, Estonia. Advisory services provided by Athestate I.K.E., Agiou Konstantinou 6, 104 31 Athens, Greece.