Property Store d.o.o.
Privacy Policy
Last updated: August 2026. This notice explains what personal data we collect, why, and what your rights are.
1. Data controller
The controller of personal data is Property Store d.o.o., Zagreb, Croatia, OIB (Croatian tax ID): 18180491953. As the controller, we determine the purposes and means of processing your personal data.
2. Categories of data and purposes of processing
Identity and contact data (name, email, phone, company) — for creating and managing your account, communication, and customer support.
Mobile number and tax number (mandatory at registration) — to confirm the advertiser's identity, to issue invoices, and to prevent misuse of free promotional advertising (the right is granted once per advertiser).
Login data (credentials, OAuth identity) — for secure access to your account.
Listing and response content — for publishing demand and matching through the platform.
Usage data and telemetry (pages, actions, device, IP address) — for security, fraud prevention, and service improvement.
Messages and support — for resolving inquiries and complaints.
Payment data is collected and processed by Paddle as Merchant of Record; we do not store card data.
3. Legal basis
We process data on the basis of: contract performance (account, listings, packages), legitimate interests (security, abuse prevention, service improvement), consent (marketing messages, where applicable), and legal obligations (accounting, tax regulations).
4. Data sharing
Service providers and sub-processors: hosting, database infrastructure, analytics, and support tools — solely to the extent necessary to provide the service.
Merchant of Record: Paddle — for sales, order management, payments, tax compliance, and invoicing.
Professional advisers (legal, accounting) and public authorities where required by law.
5. International transfers
Certain service providers process data outside Croatia/the EEA. In such cases we apply appropriate safeguards, including standard contractual clauses or adequacy decisions.
6. Data retention
We retain data only for as long as necessary for the purposes described in this notice or as required by law (e.g. accounting deadlines). Afterwards, the data is deleted or anonymised.
7. Your rights
You have the right to: access your data, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent at any time. We respond to requests within 1 month.
You have the right to lodge a complaint with the supervisory authority — the Croatian Personal Data Protection Agency (AZOP).
8. Security
We apply appropriate technical and organisational measures, including encryption in transit, access control, and restricting data access to authorised personnel.
9. Cookies
We use necessary cookies for the platform's operation and login. Analytics and marketing cookies, if used, are set only with your consent, which you can manage or withdraw in your browser settings.

