This is an English translation for convenience. In case of any discrepancy, the Greek version prevails.
At MaClean we respect your privacy. Here we explain in plain language what personal data we collect when you visit the website or contact us, why we use it, who we share it with, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Greek Law 4624/2019 and Greek Law 3471/2006 (electronic communications).
1. Who we are
The data controller is Eranda Nazeraj, trading as "MaClean", with registered address at Pratouna 2-10, Ellinoroson, 115 25 Athens.
Contact details for any matter concerning your personal data: email info@maclean.gr, phone +30 699 290 2853.
2. What data we collect, why, and on what legal basis
a) Contact, cleaning quote and revenue estimate forms
- Data: full name, email, phone, area/address, features of the space or property (e.g. type, bedrooms), your message and any other information you choose to give us.
- Purpose: to respond to your enquiry, send you a quote or estimate, and proceed to a working relationship if you wish.
- Legal basis: steps taken at your request before entering into a contract (article 6(1)(b) GDPR) and our legitimate interest in answering enquiries (article 6(1)(f) GDPR).
- Required fields: those marked with an asterisk (*). Without them we cannot reply. The rest are optional.
- How we handle your message: your message is sent to our email and, so that it is not lost in case of a technical problem, it is also stored in a protected folder on our hosting provider's server (in Greece), which only we can access with a password. It is deleted automatically after the period set out in section 5.
b) Contact by phone, email or WhatsApp
If you contact us in these ways, we process the details you give us (e.g. phone number, message content) in order to reply to you (article 6(1)(b) and (f) GDPR). The website's WhatsApp button simply opens a chat in the app; once you send a message, WhatsApp's processing of your data is also governed by the platform's own terms and privacy policy.
c) Provision of services and contracts
If we work together, we process the data needed to perform the contract (contact and billing details, address and access details for the property, instructions about the property) — article 6(1)(b) GDPR — as well as the data we must keep under tax and accounting law (article 6(1)(c) GDPR). To defend legal claims we may need to keep relevant data (article 6(1)(f) GDPR).
As part of our property management services we may also process data of guests staying at the properties (e.g. name, booking details, messages). Depending on the form of the partnership, this is done on behalf of the owner and according to their instructions, as set out in the terms of cooperation.
d) Technical data and website security
The server may log technical data (e.g. IP address, browser type, time of access) for security and proper operation — legitimate interest (article 6(1)(f) GDPR).
To protect the forms from spam and abuse, we limit the number of submissions from the same connection. For this reason we keep, for up to 48 hours, a non-reversible code (hash) of the IP address together with the time of submission — not the IP address itself — legitimate interest (article 6(1)(f) GDPR).
e) Cookies and analytics
With your consent we use Google Analytics 4 for statistical analysis of traffic (pages you view, traffic source, device type, approximate location), in order to improve the website and our services. The legal basis is your consent (article 6(1)(a) GDPR and article 4(5) of Greek Law 3471/2006), which you can withdraw at any time via the "Cookie Settings" link. Without your consent, Google Analytics is not loaded. See also section 8.
We do not send marketing messages without your explicit consent and we do not sell your data.
3. Who we share it with
Your data is not made available to third parties for their own purposes. It may be received, to the extent necessary and under a contract that provides for its protection, by:
- the provider that hosts and maintains the website and email,
- Google (Google Ireland Limited), as the provider of Google Analytics, only if you accept analytics cookies,
- the company's accountant/tax adviser, for our tax obligations,
- partners involved in delivering the service (e.g. technicians), with only the necessary details,
- public authorities, where required by law.
4. Transfers outside the European Economic Area
Apart from Google Analytics (only if you accept analytics cookies), we do not intentionally transfer data to countries outside the EEA. Google Analytics may result in data being transferred by Google to the US or other third countries. Such transfers take place with the safeguards provided by the GDPR (e.g. an adequacy decision under the EU–US Data Privacy Framework or standard contractual clauses).
5. How long we keep it
- Enquiries and communications that did not lead to a working relationship: up to 24 months from the last contact.
- Clients: for as long as the partnership lasts and afterwards for the period required by tax and accounting law, as well as for as long as needed to defend legal claims.
- Technical logs: for a limited period, as long as needed for the security of the website.
- Analytics data (Google Analytics): up to 14 months.
- Saved cookie choices: 6 months.
Once the periods above have ended, the data is deleted or anonymised.
6. Your rights
You have the right to:
- access to your data and a copy of it,
- rectification of inaccurate data,
- erasure ("right to be forgotten"), where the legal conditions are met,
- restriction of processing,
- object to processing based on legitimate interest,
- portability of the data you have given us, where applicable,
- withdraw your consent, where processing is based on it, without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email info@maclean.gr. We will reply within one month; if the request is complex, this may be extended by two further months, and we will let you know. We may ask for information to confirm that you are the person concerned.
7. Security
We apply reasonable technical and organisational measures to protect your data, such as an encrypted connection (HTTPS), access limited to authorised persons only and up-to-date systems. No system is completely secure, so in the event of a breach that affects you we will act as the law requires.
8. Cookies
The website uses cookies and similar technologies, in accordance with Greek Law 3471/2006 and the GDPR:
- Strictly necessary cookies (e.g. security, form functionality, saving your cookie choice): these work without consent, because without them the website does not function properly.
- Analytics, preference or marketing cookies: are only placed if you accept them through the cookie banner. You can change or withdraw your choice at any time.
If the website embeds third-party content (e.g. maps, videos, reviews), the content provider may receive your IP address.
Google Analytics analytics cookies (_ga, _ga_*, duration 13 months) are only placed if you accept them. You can change your choice at any time via the "Cookie Settings" link at the bottom of every page. Detailed information is available in the Cookie Policy.
9. Minors
Our services are intended for adults. We do not knowingly collect data from minors through the website.
10. Automated decision-making
We do not make decisions that produce legal effects for you through automated processing or profiling. The website's revenue calculator gives a general, indicative estimate based on the options you choose and does not affect your rights.
11. Changes to this policy
We may update this policy, e.g. when the law or our services change. The current version is always on this page, with the date of the last update.
