Effective from 01/10/2018

I. Introduction

REFRAN Single Member S.A. Real Estate Franchising (hereinafter referred to as “the Company”), as a controller, informs you about the way of collecting and processing information regarding you.

Personal data (hereinafter referred to as “the Data”) means any information relating to an identified or identifiable natural person.

The protection of your Data is very important for the Company and takes all measures needed when collects Data. This Data Protection Policy – Information to Data Subjects points the kind of information that the Company may collect and informs you about the way, the time period and the purpose of using this information. It applies to the respective Franchisees.

II. Data Subjects, Data that the Company collects and processes, Data sources

The Company collects the information - Data you give us either by filling forms or by filling website forms in https://www.remax.gr/becomeassociate and https://www.remax.gr/site/contact (name, city, telephone number, email address, profession, previous administrative experience, criminal convictions). Furthermore, the Company collects the Data you make us known when you come in contact with us through our pages in FACEBOOK, INSTAGRAM, TWITTER and LINKEDIN (user name, profile image and any other information you have made public), whichever Data you have made known to our partners – Franchise sellers and any other Data you provide us during our first meeting (the above Data plus gender and date of birth). The Company may collect your Data by using public sources, that you have allowed to be entered (e.g. otewhitepages).

III. Purpose of your Data processing – Legal basis of processing

The legal basis of your Data processing is, first of all, your consent (art. 6 par. 1 a EU General Data Protection Regulation, “GDPR”).

The Company processes your Data only for specific purposes for which you have given your consent and you have made it known to us.

Any refusal to consent to the transmission of your Data to us results in our no -fault failure to respond to your requests/ interests.

In case the Company collects your Data that you have already made known through public pages, then the legal basis of that collection and processing is our legitimate interest (art. 6 par. 1 f GDPR), since the Company collects and uses it in order to come in contact with you to examine your interest and the potential to enter in our real estate franchised network as a Franchisee, aiming at the expansion of its network.

IV. Data Sharing and Transmission

Your Data is not shared and transmitted to third parties.

V. Time Retention of your Data

In case the legal basis of the processing of your Data is based on your consent, the Company processes your Data until the withdrawal of your consent.

Besides:

Your Data is retained as long as we are in contact to examine the potential of signing a franchise agreement. In case we sign the contract, your Data is deleted.

If we do not sign a contract, the Company retains your Data for a time period of five (5) years since our last contact that made after our first approach, in order to evaluate if a new proposal for cooperation will be made during this time period. If there is not any contact during this period of five years, then your Data is deleted. If there is a contact but an agreement is not concluded, your Data is retained for another period of five years since our last contact. If there is not any contact in this period of time or an agreement is not concluded, your Data is deleted.

VI. Your rights

Under applicable data protection laws, you have the right to:

(a) check whether and which of your Data we retain and to access or request copies of your personal data;

(b) request a correction, completion or deletion of your Data that is inaccurate or obtained by means that do not comply with the applicable regulations;

(c) request to limit the collection, processing or use of your Data;

(d) in exceptional cases, forbidding for legitimate purposes the processing of your Data,

(e) request the transfer of your Data,

(f) know the identity of third parties to whom your Data is transferred

(g) withdraw your consent.

You can exercise these rights by sending an e-mail to info@remax.gr or fax at 2310 340012 or by writing the forms that are available in our Company. In such a case, we respond to your request within one month, unless the request is very complex or there are plenty of similar requests.

(h) file a complaint to the Personal Data Protection Authority for your Data processing. For the Authority's responsibility and the way of lodging a complaint, you can visit the Authority’s website (www.dpa.gr - My rights - Lodge a complaint) where you can find further information. The Authority’s contact details are:

Address: 1-3 Kifisias str, 115 23, Athens

Tel: (0030) 210 6475600

Fax: (0030) 210 6475628

Ε-mail: contact@dpa.gr

VII. Amendments in Data Protection Policy – Prorogation of jurisdiction

The Company can amend/enrich this Data Protection Policy. The Company kindly asks you to check the date of applying at the beginning of this Policy in order to review its last amendment. Every amendment will be effective as soon as the present text is updated for any change or modification.

If the Company makes significant amendments in this Policy that expand your Data processing, it will inform you and give you the option for the future processing of your Dara.

This Statement of Privacy is governed by Greek law. Competent courts for any dispute or conflict arising from or by reason of this Statement are the Courts of Thessaloniki.