Privacy
Information under Articles 13 and 14 of the General Data Protection Regulation (GDPR).
This English translation is provided for convenience. The Greek version prevails.
Who is responsible
Data controller: Τσαμπατζίδης Γεώργιος (VAT No. 170132644, Tax office KEFODE THESSALONIKIS, METRON 31, 55132 KALAMARIA). Contact for anything concerning personal data: info@xtizetai.gr, or the “I request removal or correction” form on every project page.
This page has two parts: (a) the project details we show, taken from public acts, and (b) the details of those who use the service (visitors, accounts, subscriptions).
What we show and where it comes from
The source is the building permits, pre-approvals and demolition permits that the Technical Chamber of Greece posts on Diavgeia, the Greek government transparency portal. From each act we keep only:
- technical details of the building (levels, areas, height, parking spaces, uses),
- the location and address of the plot, with the restrictions described below,
- the names of legal entities (companies, bodies) named as project owners or as authorised by them,
- the details of the act (kind, dates, ADA, link to Diavgeia).
What we never keep and never show
- Names of natural persons: owners, engineers, representatives, notaries. The document reader skips them and does not store them.
- The documents themselves: they are read automatically and deleted immediately.
- The plot's Land Registry number (KAEK).
- The free-text description of the permit, because it may contain names. In its place we show a summary built from the technical details.
When the owners include private individuals
The address of a plot can lead to a natural person. That is why, when the project owners include a private individual, we show the street without a number, and the point on the map is approximate (about 100 metres) and not on the plot.
For what purpose and on what legal basis
The purpose is for construction professionals (crews, suppliers, technicians) and anyone interested to find, in a form that can be searched and read, which buildings have received a permit or works approval in their area, information that is already published on Diavgeia for reasons of transparency. The service is commercial (Pro subscription). The legal basis is legitimate interest (Article 6(1)(f) GDPR) in keeping the public and professionals informed about building activity. So that private individuals are not burdened, we apply the restrictions described on this page. Because the data is not collected from the persons themselves and informing every owner individually would require disproportionate effort (Article 14(5)(b)), the information is provided through this page.
For how long
- A project appears on the map for up to 24 months from the permit, extended by 12 months for each newer update or revision of it, never beyond the expiry of the permit. Demolitions appear for 6 months.
- The project page stays available for 365 days after it leaves the map and is not shown after that.
- Removal requests and your email are deleted 12 months after they are handled.
Your rights
You have the right of access, rectification, erasure, restriction and objection (Articles 15–21 GDPR). The simplest way is the “I request removal or correction” form on the project page: if you request removal because the page concerns you, the page is hidden immediately until we review the request, and we reply within one month. If you believe your rights are being infringed, you can lodge a complaint with the Hellenic Data Protection Authority.
The rule applies in the paid version too
The professional version (Pro) shows more details from the public acts (for example company names, the address where permitted), but the restrictions above for natural persons apply identically to everyone: payment does not unlock names, the exact location where a private individual is involved, or any other detail that we withhold.
These rules concern the data that comes from public acts. The business profile that a subscriber creates for their own business is different: there only what the subscriber chooses is published (for example a business name, phone number, photos of work), when and for as long as they choose. Billing details and any verification documents are never published.
Accounts and subscriptions
| What we keep | Why | Legal basis | For how long |
|---|---|---|---|
| Email, password (encrypted, nobody can see it), line of work if you provide it | Account, login, communication about the service | Contract (Article 6(1)(b)) | As long as the account exists |
| Saved projects, notes, statuses, searches | Your own work within the service. Only you see them; we do not use them for any other purpose | Contract | As long as the account exists; after Pro access ends they remain available for reading and export for 90 days |
| Subscription dates, plan, payment status, customer/subscription identifiers of the payment provider | Providing the subscription | Contract | As long as the account exists |
| Business profile: company or business name, description, specialities, areas, availability, photos and whichever contact details you choose to show | The public page of your business, only if you publish it. Photos are re-encoded so that metadata such as the location where they were taken is removed | Contract | As long as the account exists; after Pro ends it stays private, out of public view, until you delete it |
| Request to link with a company from the permits and its supporting documentation | Checking that the relationship exists before any link is made | Contract / legitimate interest in not wrongly linking businesses | As long as the profile exists |
| Payment receipts | Tax obligation | Legal obligation (point (c)) | As long as tax legislation requires |
| Alert emails about new projects, what was sent to you and whether you marked “Useful / Not relevant to me” | Only what you enabled in your alert profiles, on the days and times you chose; so that we do not send you the same project again; they stop or pause with one click | Contract | As long as the account exists |
| What to call you (optional), what you sell or install, what kind of business you are, areas and kinds of projects (“For you”) | To show you the projects that concern you and to address you in emails | Contract | As long as the account exists |
| When you logged in (date, time, device type: mobile/computer) and which sections of the app you opened per day, with the last filter | Support when you ask for help, account security, improving the service. Without an IP address | Legitimate interest (point (f)) | Logins 12 months, activity 6 months |
- We never keep card details. They are processed by the payment provider Stripe, as an independent controller for payments.
- We do not send promotional emails without your consent and we do not give your details to third parties for their own marketing.
- You can download your data and delete your account at any time, from your account page.
Who helps us (processors)
- Hostinger: hosting of the server and the database.
- Resend (Resend, Inc., USA): sending confirmation, password, subscription and alert emails.
- Google (Google Ireland Ltd, Google LLC, USA): Google Analytics and Tag Manager, only with your consent, for traffic statistics. Transfer to the USA is based on the EU–US Data Privacy Framework.
- Stripe: subscription payments (when they are enabled).
- OpenFreeMap: map images (it sees your IP address, like any server you visit).
If a provider processes data outside the EEA, this is done with the safeguards of the GDPR (for example standard contractual clauses).
Site visitors
- We use necessary cookies (form security and login) and, only with your consent, Google Analytics and Google Tag Manager for traffic statistics (legal basis: consent, Article 6(1)(a) GDPR). You can withdraw it at any time from “Cookie settings”. We do not use advertising cookies. Details in the cookie policy.
- We measure ourselves, without cookies and without an IP address: how many times each page was viewed per day, from which website visitors came (only its name) and what was typed in the home page area search. These are only counts; they are not linked to any visitor. We keep them for 13 months.
- For security reasons the server keeps access logs (IP address, page, time) that are deleted automatically after 14 days.
- The font and the map library load from our own server. Only the map images (tiles) come from the OpenFreeMap service, which sees your IP address, as with any connection.
- Hosting: Hostinger.
Expression of interest in the professional version
If you fill in the “Get notified about the professional version” form, we keep only what you wrote: your email and, if you gave them, the line of business of your company and the areas you serve. We use them only to send you an email when registrations for xtizetai Pro open. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by asking for deletion. The data is deleted at the latest 12 months after submission and is not given to third parties.
User rights
As a user you have the right of access, rectification, erasure, restriction, portability and objection. If you have an account, you exercise most of them yourself from the account page (export, deletion). For anything else write to info@xtizetai.gr; we reply within one month. You can also contact the Data Protection Authority.
Changes
If anything material changes, this page will be updated. Last updated: 11 October 2026.