Privacy Policy

Last updated: 06/05/2026

Privacy Policy

We are very pleased that you took the time to read this Privacy Policy, giving us the opportunity to explain the purposes and methods by which we process your personal data.

In order to keep this document as clear and user-friendly as possible, we have made every effort to avoid unnecessarily complex legal terminology and to communicate in plain and understandable language.

However, this is not always easy, and therefore if you have any questions regarding our policy, please do not hesitate to contact us at info@myape.gr.

1. Who We Are (Data Controller)

myape.gr is a website created with the purpose of establishing a valid and reliable cooperation network between natural and legal persons (buyers and sellers), with the ultimate objective of facilitating valid agreements for the transfer of Renewable Energy Source (RES) projects, including photovoltaic parks, wind energy projects and RES licences.

The website has been created, is maintained and is owned by MyAPE P.C. (hereinafter referred to as “we”, “us”, “our” or the “Company”).

We consider the handling of your personal data a matter of utmost importance and, for this reason, make every possible effort to ensure full compliance with all applicable processing rules under Greek and European law.

We collect certain information regarding visitors and registered users of the website which may directly or indirectly lead to identification.

Under the applicable legal framework, this information constitutes personal data.

You, as visitors or registered users, are considered data subjects, and we, as the Company, act as the data controller of your personal data.

The purpose of this policy is to explain, in as simple, understandable and concise a manner as possible:

  • Which personal data we process, for what purpose and on what legal basis;

  • How long we retain your data;

  • Who the recipients of your data are;

  • What rights you have and how you may exercise them;

  • Which legitimate interests we pursue;

  • What applies regarding your consent where required;

  • What applies to personal data collected through cookies.

Basic Principles Governing Processing

myape.gr is committed to processing your personal data lawfully, fairly and transparently, always in accordance with applicable legislation, primarily the General Data Protection Regulation (GDPR) and Greek Law 3471/2006.

In practice this means:

  • We collect and process your data only for specific, explicit and lawful purposes;

  • We collect and process only data necessary for those purposes;

  • We make every reasonable effort to ensure accuracy and, where applicable, provide options for correction or deletion;

  • We retain your data only for as long as necessary;

  • We take all reasonable steps to protect your data against unauthorised or unlawful processing and against accidental loss, destruction or damage;

  • We apply appropriate technical and organisational security measures, internal security procedures and confidentiality obligations for authorised personnel and use technologies designed to protect your data, including certified hosting providers.

Such technical and organisational measures are reviewed regularly and updated where necessary in accordance with current best practices.

2. What Data We Process and For What Purpose

As a general rule, we collect and process data of visitors/users only when they voluntarily provide such data.

A simple visit to the website does not necessarily mean that we process personal data.

However, this cannot apply absolutely in two cases:

  • data collected through cookies (see Cookie Policy); and

  • certain technical data collected automatically during your visit.

2.1 Data Collected Automatically

Due to the nature and operation of the internet, immediately upon visiting the website our server records your IP address.

An IP address constitutes personal data even where we cannot independently identify you solely on that basis.

We collect and retain IP address together with date and time of access in dedicated log files for the following reasons:

First, we have a legitimate interest in ensuring the security of networks, information and services against accidental events or unlawful or malicious actions threatening availability, authenticity, integrity and confidentiality, and also for the establishment, exercise or defence of legal claims.

For website security purposes, and following balancing against user rights, myape.gr uses Google Invisible reCAPTCHA, subject to Google’s Privacy Policy and Terms of Service.

Secondly, we may also have a legal obligation to retain such information, including where competent police or judicial authorities lawfully request it under strict conditions.

2.2 Data You Provide to Us

For registration on myape.gr as seller, buyer or broker, we collect and process:

  • Full name or company name

  • Contact telephone number

  • Residential/business address

  • Email address

  • Tax identification number (VAT/TIN)

Additionally, where subscription/payment is required, we process the same information for completion of the transaction.

Purpose and Legal Basis

These details are necessary to provide our services, including:

  • displaying listings;

  • providing updates;

  • facilitating communication between users.

Legal basis: performance of contract under the Terms of Use.

Where payment/subscription is involved, processing is also necessary for:

  • contractual performance;

  • compliance with tax and accounting obligations;

  • protection of our rights and lawful financial claims;

  • establishment, exercise or defence of legal claims.

Important notice: if you pay online by card, payment takes place within Stripe’s secure payment environment.

Card details are entered and processed directly through Stripe and are not transmitted to or stored on our website.

Accuracy and authenticity of submitted information remain the sole responsibility of users.

Where false or inaccurate information is identified, we reserve the right to suspend or delete the relevant account without prejudice to any further lawful rights.

2.3 Contact Form

Visitors may contact us through the website contact form.

Required information:

  • Full name

  • Email

  • Telephone number

Purpose and Legal Basis

Processing is based on your consent, given by affirmative action before sending your message.

You may withdraw consent at any time.

Sending an email or completing the contact form does not make you a registered user and does not by itself result in inclusion in our database for marketing purposes.

Important: messages sent through the contact form are not protected by legal privilege or any similar confidentiality.

Please do not include sensitive information regarding yourself or third parties.

As also stated in our Terms of Use, myape.gr does not provide investment, legal, brokerage or tax advice.

2.4 Processing of Internal Messaging

When using the internal messaging system of myape.gr to communicate with other users (buyers or sellers), myape.gr collects and processes:

  • message content;

  • offer details;

  • attached documents/files.

Purpose and Legal Basis

Processing is necessary:

  • for performance of our contract (provision of intermediation/connectivity services); and

  • for our legitimate interests.

Our legitimate interests include:

  • user safety;

  • fraud prevention;

  • enforcement of Terms of Use;

  • enforcement of commercial agreements;

  • prevention of circumvention of the platform.

myape.gr uses automated filtering tools for detection of:

  • malware;

  • phishing links;

  • conduct violating Terms of Use.

Human review by authorised administrators occurs only:

  • where there are reasonable indications of violation;

  • following complaint/report by another user; or

  • for technical troubleshooting.

Communication data are retained for twelve (12) months following archival or deletion of the relevant listing.

Thereafter they are permanently deleted or anonymised.

3. Processing Based on Legitimate Interest

In addition to the services we provide depending on your user profile, where we process your personal data for the performance of our contractual obligations, we may also process certain data on the basis of our legitimate interest for the direct promotion of new services or products offered either by us or by third parties (marketing).

In such cases, we may process contact details including:

  • full name;

  • email address;

  • telephone number;

  • postal/business address.

This may also include, where relevant:

  • technical characteristics of a project;

  • licences and permits;

  • financial data;

  • commercial and business information;

  • information relating to the project owner or operating entity;

  • studies;

  • uploaded documents and files;

  • contact details;

  • and any other information or material made available to the user through the myAPE platform or through the relevant Data Room,

provided that such information is intended exclusively for the personal or professional evaluation of the relevant potential transaction through myAPE.

You may choose, when creating your profile, not to receive such communications.

You may also manage communication preferences through your profile at any time.

In every marketing communication sent by myape.gr you retain the right to object to further processing of your personal data for that purpose.

4. Information Regarding Newsletter Management

myape.gr may send newsletters and updates to registered users at regular intervals.

The website allows users:

  • to subscribe exclusively to the newsletter mailing list; and/or

  • during profile creation as buyer or seller, to choose whether they wish to receive newsletters at the email address provided.

The legal basis for processing your email address for newsletters is your consent.

You may withdraw consent at any time.

Every newsletter includes an unsubscribe link at the bottom of the email.

Newsletter subscriptions may also be managed directly through your user profile at any time.

myape.gr reserves the right to remove any recipient from newsletter mailing lists without explanation.

The administrators of the website make every reasonable effort to ensure smooth operation of newsletter services, although technical or organisational issues may occasionally arise.

For delivery of newsletters, the website uses Mailchimp.

Through Mailchimp and related technologies we may collect statistical information such as:

  • newsletter opens;

  • clicks on links;

for the purpose of improving related services.

The Company further reserves the right, at its sole discretion and at any time, to:

  • modify;

  • upgrade;

  • restrict;

  • temporarily suspend; or

  • permanently discontinue

any part or all of the services, functions or content of the myAPE platform, without prior individual notice to users and without requiring separate consent.

Users acknowledge and accept that access, availability and platform features may change at any time depending on operational, technical or business requirements.

For any matter relating to newsletters or relevant services, please contact:

info@myape.gr

5. Use of Data for Advertising and Marketing on Third-Party Platforms

The Company may, on the basis of its legitimate interest in promoting and developing its services and/or based on user consent where required by applicable law, use information collected through the myAPE platform for:

  • advertising;

  • promotion;

  • remarketing;

  • measurement of campaign effectiveness;

through third-party platforms, including indicatively:

  • Google Ads;

  • Google Analytics;

  • Meta (Facebook and Instagram);

  • and other advertising or analytics providers.

Such use may include:

  • creation or use of audience groups;

  • remarketing;

  • conversion tracking;

  • display of personalised or non-personalised advertising content relating to the platform’s services.

In every case such processing is carried out in accordance with applicable data protection legislation and subject to the user’s cookie preferences or consent choices.

6. Personalisation of User Experience and Relevant Platform Content

The Company may process usage and behavioural data, including:

  • user interests;

  • search preferences;

  • interaction with listings;

  • Data Room unlock activity;

  • saved searches;

  • related activity data,

for purposes including:

  • better platform functionality;

  • personalisation of content shown to the user;

  • sending relevant updates or notifications;

  • improving the overall myAPE user experience.

7. Analysis of Platform Usage and Commercial Data

The Company may use platform usage data, listing interaction data, transaction information and related commercial information in aggregated and/or anonymised form for purposes including:

  • analysis of the Renewable Energy Projects market;

  • improvement of platform services;

  • development of new platform functions;

  • preparation of statistical reports;

  • preparation of commercial reports.

Such analysis is carried out in a manner consistent with applicable personal data protection legislation.

8. Where and For How Long We Store Your Data

As a general principle, we retain your personal data only for as long as necessary for the relevant processing purpose.

Specific retention periods apply depending on the category of data.

For example:

  • if you register on myape.gr, we retain your data for as long as you remain a registered user;

  • if you contact us through the contact form, your message and contact details will be deleted within three (3) months from the date of the last message received from you.

Retention periods are determined based on:

  • compliance with personal data protection legislation;

  • industry best practices;

  • proper business operation;

  • legal obligations imposed by competent authorities.

For example, where you subscribe to paid services, relevant tax and accounting records may be retained for at least five (5) years, as required by applicable legislation.

Please note that even where you request deletion of your personal data, we may retain certain information where necessary:

  • to comply with legal obligations; or

  • for the establishment, exercise or defence of legal claims.

9. Your Rights Regarding Your Personal Data and How to Exercise Them

Under the General Data Protection Regulation (GDPR), you have a number of rights regarding processing of your personal data.

In particular you have the right to:

  • Right of access: request confirmation of whether we process your data and receive related information including purposes and recipients;

  • Right to rectification: request correction and/or completion of inaccurate or incomplete data;

  • Right to erasure: request deletion of your data under applicable legal conditions;

  • Right to restriction of processing: request restriction of processing in certain cases;

  • Right to object: object at any time to processing based on our legitimate interests, including direct marketing;

  • Right to data portability: request data you provided to us in a structured, commonly used and machine-readable format, where technically feasible.

In the event of a personal data breach likely to result in high risk to your rights and freedoms, and where no GDPR exception applies, we are obliged to notify you without undue delay.

Compliance with data protection law and handling your requests remains a priority.

For this reason, before acting on certain requests we may ask for additional information necessary to verify your identity.

As a rule, we are required to respond without undue delay and no later than one (1) month.

Where necessary, due to complexity or volume of requests, this deadline may be extended by up to two (2) additional months.

If a request is manifestly unfounded or excessive, especially because of repetition, the Company may:

  • charge a reasonable administrative fee; or

  • refuse to act on the request.

If you believe we are not complying with applicable personal data protection law, you have the right to file a complaint with the competent supervisory authority.

In Greece, the competent authority is the Hellenic Data Protection Authority.

For any issue regarding your personal data please contact:

info@myape.gr

10. Social Media

myape.gr maintains official accounts on the following social media platforms:

Facebook:
https://www.facebook.com/people/Myapegr/61590533874898/

LinkedIn:
https://www.linkedin.com/company/myapegr/

Through these platforms we may collect and process limited information such as:

  • username;

  • profile photo;

  • messages sent to us.

Purpose of processing includes:

  • updates regarding our content;

  • communication with users;

  • responding to messages.

Legal basis: your consent.

Consent is provided by liking or following our pages and may be withdrawn equally easily through unlike or unfollow actions.

The Company acts as joint controller together with the relevant social media platform.

We apply appropriate technical and organisational measures to protect data processed through social media.

These include restricting access to account administration and regular review of security procedures.

Important notice:

We are not responsible for the way or means by which each social media platform independently processes your data.

Please review their privacy policies directly:

Facebook / Meta:
https://www.facebook.com/privacy/policy/
https://transparency.meta.com/

LinkedIn:
https://www.linkedin.com/legal/privacy-policy

Comments on Social Media

myape.gr encourages respectful dialogue through comments.

We are not under a general obligation to monitor all submitted content.

However, administrators reserve the right to remove content that violates the Terms of Use, including content that is:

  • abusive;

  • obscene;

  • pornographic;

  • threatening;

  • advertising-related;

  • infringing intellectual property;

  • false regarding identity.

We also reserve the right to block users responsible for such content.

If content on our social pages affects you or violates our Terms, please contact us immediately.

11. Hyperlinks to Third-Party Websites

myape.gr may contain hyperlinks to third-party websites.

Such links are provided solely for user convenience.

They do not constitute endorsement or approval of third-party content.

Each linked website is governed by its own terms and privacy policy.

myape.gr bears no responsibility whatsoever for:

  • third-party website content; or

  • third-party data protection practices.

Access through hyperlinks takes place entirely at the user’s own responsibility.

We encourage users to read the privacy policies of all websites they visit.

12. Cookies

Like most websites, myape.gr uses cookies and similar technologies.

We use them carefully and proportionately:

  • to improve browsing;

  • to facilitate efficient use of the website;

  • to collect certain anonymised visit information.

Cookies are small text files stored on your device.

They are unique to each browser and contain anonymised information relating to websites visited and devices used.

For more details please refer to our Cookie Policy:

https://myape.gr/politiki-cookies

13. Minors

Our content and services are intended exclusively for persons over eighteen (18) years of age.

We do not knowingly collect personal information relating to minors.

If you are under 18, you are not permitted to submit information to us.

Because age verification cannot always be technically guaranteed, if we become aware that personal data of a minor has been submitted and verify such fact, we will promptly delete the relevant information.

This is without prejudice to retention where necessary:

  • for legal claims; or

  • where lawful guardian consent applies.

14. Changes to this Policy

Effective data protection requires continuous review of our internal policies and procedures.

At the same time, improving our services may require us to update our practices.

Accordingly, this Privacy Policy may be amended at any time without prior notice.

In accordance with transparency principles, we will seek to inform users of material changes.

Users should nevertheless review this Policy periodically.

Continued use of our services constitutes acceptance of the current version.

15. Questions

If you have any questions regarding this Privacy Policy or our processing of personal data, please contact:

info@myape.gr
+30 211 110 5233

Communication hours:
09:00 – 15:00, Monday to Saturday

Applicable Legal Framework on Personal Data Protection

Greece

  • Law 4624/2019

  • Law 3471/2006

Regulatory acts of the Hellenic Data Protection Authority

European Union

  • General Data Protection Regulation (GDPR)

  • Directive 2002/58/EC

  • Directive 2009/136/EC