ADOLIA®
Real estate marketplace for the modern world
privacy policy
Introductory provisions
If you are a user of the ADOLIA platform or a visitor to this website, you provide us with data that may be personal data that we process. KARPATSKA.SK a.s., with its registered office at Karpatská 6, 811 05 Bratislava, ID: 46051317, as the operator of the ADOLIA platform regarding the processing and protection of personal data, provides this written information on the processing and protection of personal data in accordance with generally binding legal regulations, particularly the Regulation of the European Parliament and Council (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "data protection regulation" or "GDPR") and Act No. 18/2018 Coll. on the protection of personal data and on amendments to certain laws. Personal data are all data about an individual, particularly name, surname, residence or other address, email address, telephone contact, personal identification number. We have taken all technical and organizational security measures to protect the data from unauthorized access.
In accordance with GDPR, we process your personal data based on the legitimate interest of the operator, necessary for the performance of the contract or necessary for the fulfillment of legal obligations arising particularly from tax laws, accounting regulations, and other specific legal regulations. Furthermore, we process your personal data based on your voluntary, purposeful, demonstrable, and informed consent, which you can withdraw at any time. If you withdraw your consent for the purpose of processing, your personal data will be removed from processing unless their processing is necessary for other legal reasons (necessary for the performance of the contract or for the fulfillment of legal obligations). Access to your personal data is granted to persons authorized by us who are bound by confidentiality. Most processing operations are handled by us and do not require third parties. For some specific processing operations that we cannot ensure ourselves, we use the services and applications of processors who specialize in such processing and are in compliance with GDPR.
We process personal data in the following cases and for the following reasons (for these purposes):
Data when concluding a contract for the use of the ADOLIA platform
This personal data is necessary for contractual fulfillment, for the proper and demonstrable provision of services and related actions, particularly orders, invoicing of services, and related business activities, we process necessary identification data of individuals, realization of legitimate interests in business relationships and entrepreneurship, communication in business relationships, fulfillment of other legal obligations in the scope of: name, surname, job position, contact details (phone, email). The legal basis is the necessary fulfillment of the contract and fulfillment of legal obligations. Mandatory data are those without which we cannot provide the service, such as name and surname, address, email address, telephone number, including these data in relation to representatives of contractual partners and their employees.
The legal basis is the necessary fulfillment of the contract and fulfillment of legal obligations.
We will delete this personal data after ten years from the fulfillment of the contract.
The recipients of the data are public administration authorities (tax offices) and in some cases also third parties, such as service providers or persons who publish advertisements through the ADOLIA platform for the following reason:
In cases where service providers offer their services on the ADOLIA platform, they do so in their own name. In order to ensure the processing and handling of orders and handling complaints, it is therefore necessary to involve these service providers in the processes. In addition to the data necessary for the actual provision of the service in connection with the processing of the order, service providers also have access to the system through which communication between you and the service provider regarding the relevant order and the complaint system takes place.
Accounting management
If we are in a contractual relationship with you, we need your personal data and billing data to fulfill our legal obligations for issuing and recording tax and accounting documents. For this purpose, we process personal data: name, surname, permanent residence address (if you are a natural person – entrepreneur, also your business name, place of business, ID, VAT ID, tax ID), bank account number.
The legal basis is the fulfillment of legal obligations.
The recipients of the data are tax offices, other public authorities according to relevant legal regulations, and the processors of this personal data are persons who process accounting based on our authorization.
We will delete the data after 10 years from the issuance of the tax document.
Illegal use of the online marketplace
In the event of misuse of the ADOLIA platform for activities that may be subject to criminal proceedings or other prosecutable proceedings by a public authority, the obtained personal data will be provided to the authorities (especially law enforcement agencies and tax offices), for the purposes of legal representation to the authorized person and, if necessary, to affected third parties. Data may also be provided if necessary based on legal or official orders or court decisions or to detect possible misuse of the customer account. The processing of data is absolutely necessary to ensure the security of IT systems and processes and to fulfill legal and official requirements. In addition, the processing indirectly serves the interests of the data subjects regarding the integrity of their personal data.
The legal basis for data processing is Article 6(1)(f) GDPR.
Recipients are authorities (especially law enforcement agencies and tax offices), authorized representatives for the purposes of our legal representation, and, if necessary, affected third parties.
Data will be deleted as soon as they are no longer necessary for the purpose for which they were collected.
Processing of data of persons providing services through the ADOLIA platform
On the ADOLIA platform, we offer service providers and persons who publish offers for the sale and rental of real estate or interest in buying and renting real estate the opportunity to register by providing personal data. The data is transferred to us and stored. By processing the data, these persons gain the opportunity to present their services on the platform, offer real estate, use marketing services, and participate in payment processing. User registration on the platform and the related obligation to provide personal data is necessary for providing certain content and services on the ADOLIA platform. Data processing also serves to fulfill the contract with the user or to carry out pre-contractual measures. Data processing may also be absolutely necessary to ensure the security of our IT systems and processes and to fulfill legal requirements.
In these purposes lies our legitimate interest in data processing according to Article 6(1)(f) GDPR. The legal basis for data processing is also Article 6(1)(a) GDPR if the user has given consent for it. If registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, an additional legal basis for data processing is Article 6(1)(b) GDPR.
Data will be deleted as soon as they are no longer necessary for the purpose for which they were collected.
Data from published advertisements (photos, videos, advertised price, description), which are not personal data, will be processed by KARPATSKA.SK even after the advertiser's registration is terminated.
Login to user accounts
Logging into customer accounts on the ADOLIA platform occurs through logging into the user account. During the login process, the following data is processed:
email address, name, profile pictures, salutation, possibly phone number, consent information, password, possibly date of birth.
The legal basis for processing your data is Article 6(1)(f) GDPR. The legitimate interest of the platform operator arises from the interest in providing users with customer account features.
Retention period: we store personal data for the duration of the user account, i.e., until the user account is canceled.
We offer you the option to register and subsequently log in through one of your social media accounts (e.g., Facebook, Google, or LinkedIn) (so-called "Social Login"). In this case, no additional registration on our website is required. Your user account on the social network (LinkedIn, Google, Facebook) is also linked to them so that you can authenticate through it to access your account.
Categories of data we obtain from your social media account: Through the link, we automatically obtain from your social media account provider (LinkedIn, Meta Platforms, Inc., or Google Inc.) information up to the following extent depending on the privacy settings you have set for your social media account:
Last name, first name, salutation (from which gender can be inferred), profile picture, phone number, email address, date of birth.
We store this data in your customer accounts created in this way and use it exclusively for the purposes you set within our services.
Categories of data that we automatically provide to your social media account provider: The operator of the social media account through which you authenticate always automatically obtains from us based on the link and each login the following data: information that you logged into our service for the first time through your social media account and thus have a customer account, information about when you logged into the service through the Social Login feature (time and date).
This data transfer occurs automatically and is necessary for using the Social Login feature of social media providers. No additional information is transferred. The operator of the social media account does not obtain ANY user data or ANY information about how long you are logged into the services and what activities you perform in them or what other data you have stored in your customer account. There is no data synchronization.
The legal basis for processing your data in connection with the use of the optional Social Login feature is your consent as stated below in accordance with Article 6(1)(a) GDPR. In the case of using the Social Login feature, you consent to the collection, processing, and use of your personal data as stated further in the following points:
I agree that the provider of my social media service (Meta Platforms, Inc. or Google, LinkedIn) mediates the following data during the login process through the Social Login feature:
Last name, first name, salutation (from which gender can be inferred), profile picture, phone number, email address, date of birth. ADOLIA may store this data in my personal account and use it exclusively for the purposes of login and personal addressing in my account.
Additionally, I agree that when voluntarily using the Social Login feature, the following data will be automatically transferred from the servers of the company to the provider of the social media account I use when logging in through the Social Login feature:
Information that you logged into your social media account for the first time and thus have a customer account, information about when you logged in through the Social Login feature (time and date).
I am aware that the provider of my social media account may be located in a country outside the European Union (EU) (e.g., the USA), where the legal level of data protection is lower than in the EU, and therefore investigative authorities or companies in that country may gain access to this data from the provider of my social media account. In the context of voluntarily using the Social Login feature and being aware of the lower level of data protection and the associated risks, I also expressly consent in accordance with Article 49(1)(a) GDPR to the transfer of the aforementioned data to the country where the operator of my social media account is located.
You can withdraw this consent at any time with effect for the future. In that case, however, you cannot continue to use the Social Login feature, but you must register for the customer account in the traditional way. All data about you that has been stored based on this consent will also be deleted.
The legal responsibility for processing data provided to the operator of your social media account lies with your provider. Therefore, their privacy policies apply accordingly. You can find this information about data protection related to logging into services, Meta Platforms, Inc. and/or Google, LinkedIn, and the privacy settings of your social media account in the privacy policies and terms of use of the companies
Facebook (https://sk-sk.facebook.com/terms),
Google+ (https://policies.google.com/privacy?hl=sk),
LinkedIn: (https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy).
Recipients: entities to whom the operator provides personal data based on the law, companies providing IT services and/or support in managing cookies. Companies providing online advertising sales, companies providing tools for analytical purposes and creating statistics, statistical companies, provider of cookie banner solutions.
Payment cards
The operator of the ADOLIA platform does not have data about the payment cards you use to pay through this platform unless it is stored. Payment card data is only held by a secure payment gateway and the relevant banking institutions.
If you have your payment card stored for speeding up future orders, we only have basic data such as a few first and last digits of the payment card. This data can be deleted in the user profile.
The legal basis for processing your data is Article 6(1)(f) GDPR. The legitimate interest of the platform operator arises from the interest in providing users with the option to pay by card.
Retention period: we store personal data for the duration of the user account, i.e., until the user account is canceled.
Cookies (ADOLIA platform website)
In order to enhance the functionality of the website, as well as to provide an overview of its operation and to protect the site, personal data about visitors to the website is collected, stored in so-called "Cookies" – small files that allow us to store specific information about PC visitors to the website. Cookies help to determine the frequency of visits, the number of visitors, and to adjust services to make them comfortable and efficient, among other things, to identify users and store preferred user settings. For these purposes, we process data in the scope of the IP address.
Cookies are small text files that can be sent to your web browser when visiting websites and stored on your device (computer or other internet-accessible device, such as a smartphone or tablet). Cookies are stored in the files folder of your web browser. Cookies usually contain the name of the website from which they originate and the date of their creation. Upon your next visit to the site, the web browser reloads the cookies and sends this information back to the website that originally created the cookies. The cookies we use do not harm your computer.
During subsequent visits to the website, cookies are recognized, allowing you to retain your specific settings or offer you content that corresponds to your user preferences.
Information generated by cookies includes the anonymized IP address of the website visitor and is transmitted to the servers of the service operators defined below. These servers are located in the EU or the USA and guarantee full compliance with legal requirements. Service operators may provide information to third parties only if permitted by applicable legal regulations.
Users can prevent cookies from being downloaded to their device or delete any already downloaded cookies at any time. Since the procedure may vary depending on the browser used, the type of device, etc., we recommend using the procedures recommended directly by the manufacturer of the product that the user uses.
Overview of the types of cookies used on the website:
Cookies necessary for the operation of the website
These are settings that are necessary for the proper functionality of the website itself. These settings are not specific information about the user. This also applies to some cookies that collect information about the user preferences of the website visitor but do not allow for individual identification, and therefore do not fall under the protection provided by personal data.
Company Name Type of Cookie Purpose Retention Period Cloudflare, Inc. Functional (Cloudflare Cookie) Protection against DDoS attacks and acceleration of page loading 1 year Stripe, Inc. Functional (payment cookies) Processing payments and securing transactions During the session Intercom Inc. Functional Live chat and customer support During the session or 9 months Legal basis for processing personal data: Article 6(1)(c) GDPR – Act No. 452/2021 Coll. on electronic communications in its valid wording and Article 6(1)(b) GDPR – fulfillment of the contract
Recipients: entities to whom the operator provides personal data based on the law, expert consultants and advisors who are bound by legal and/or contractual confidentiality obligations, companies providing IT services, individual functionalities of the website and/or providing support in managing cookies, provider of cookie banner solutions.
Marketing cookies
We use them, among other things, for profiling, by recording user activities on our website, visited pages, and links clicked for more precise targeting of advertising content available on our website. We use this information to display ads that are more relevant to users and their interests.
They are also used to limit the number of ad displays and to measure the effectiveness of advertising campaigns. For example, in special campaigns, measurement codes are placed on websites to identify the success of the advertising PR article and its effectiveness in the case of a visitor transitioning to the client's website. Their main function is, for example, selecting basic ads, selecting personalized ads, creating a profile of personalized content, selecting personalized content, technical delivery of ads or content, comparing and combining offline data sources, linking different devices, receiving and using automatically sent device characteristics for identification, using precise geographic location data (if you consent), etc.
If you grant us consent for the processing of marketing cookies, we can link these cookies with information about your activities on our website – e.g., with the use of the user account, subscribing to a certain type of information you are interested in. The purpose of this linking is our effort to offer you personalized services, personalized content, and personalized ads. You can withdraw your consent at any time.
Purpose of processing personal data: selecting basic ads, selecting personalized ads, creating a profile of personalized content, selecting personalized content, technical delivery of ads or content, comparing and combining offline data sources for the purpose of delivering marketing messages.
Recipients: entities to whom the operator provides personal data based on the law, expert consultants and advisors who are bound by legal and/or contractual confidentiality obligations, from companies such as Google, Inc., Gemius SA, Hotjar Ltd. we use tools for analytical purposes that store anonymous cookies. Companies providing IT services and/or support in managing cookies. Companies providing online advertising sales, companies providing tools for analytical purposes and creating statistics, statistical companies, provider of cookie banner solutions.
Company Name Type of Cookie Purpose Retention Period Meta Platforms, Inc. Advertising (Facebook Pixel) Ad targeting and remarketing 90 days Microsoft Corporation Marketing Tracking user interactions with forms and emails 6 months LinkedIn Corporation Advertising Professional ad targeting and tracking user interactions 6 months Analytical and statistical cookies
allow us to recognize you when you return to our website and enable us to offer you enhanced and more personalized features, such as remembering your preferences. These cookies collect information and cannot track user movements on other websites. They are mainly used for analytical purposes (e.g., statistics within Google Analytics), or to facilitate the flow of information from our website to users (information about possible applications for download, etc.).
In our analytical activities, we mainly record the number of your visits to our website, the number of opened subpages, the time spent on our website, the order of visited pages, and search terms that brought you to us. The purpose of our analytical activities is to adapt to the needs of our users and optimize our offerings.
Legal basis for processing personal data: Article 6(1)(a) GDPR – consent of the data subject.
Company Name Type of Cookie Purpose Retention Period Google LLC Analytical (Google Analytics) Traffic tracking, analysis of user behavior on the site 14 months Hotjar Ltd. Analytical Analysis of user behavior (click maps, session recordings) 365 days Sentry.io Technical Monitoring errors and performance of the platform During the session
Security and protection of personal data
We protect personal data to the maximum extent possible using modern technologies that correspond to the level of technical development. We maintain all possible technical and organizational measures that prevent the misuse, damage, or destruction of your personal data.
We process data exclusively in the European Union or in countries that provide an adequate level of protection based on a decision of the European Commission.
4 Rights related to the protection of personal data
Rights to information about processing and access to personal data and the right to withdraw consent and correct data
You are entitled to request information about your personal data that we process, their source, recipients, categories, purpose of processing, retention period, the right to rectify, delete and restrict processing, the right to object to processing, and the right to lodge a complaint with a supervisory authority, about the transfer to third countries, and the appropriate safeguards for this transfer. In the case of repeated requests, we are entitled to charge you for the costs associated with providing this information. If you have given consent for the processing of personal data, you can withdraw it at any time, even without stating a reason, by sending a withdrawal to the email: gdpr@adolia.ie or by mail to the address of the Provider's place of business, or in the manner specified in the personalized email. You can notify us of changes to your personal data or request their correction at any time at the email: gdpr@adolia.ie or by mail to the address of the Provider's place of business, and we will promptly ensure the correction of your data.
Right to deletion of data and restriction of processing, right to data portability
Based on your request for deletion of your personal data processed by us, these will be deleted immediately unless it contradicts contractual and legal obligations. You can address the request to the address of the Provider's place of business. This also applies to cases of requests for restriction of processing personal data. You will receive written information about the deletion of personal data based on your request. Based on your request, we will transfer your personal data that we process, issue it to you or to a person you designate who is to process it in a structured, commonly used, and machine-readable format, as far as it is technically feasible.
Right to lodge a complaint and exercise rights and questions
You can send a complaint regarding the processing of personal data, exercise rights arising from the protection of your personal data, and other suggestions and complaints by email to: gdpr@adolia.ie or by mail to the address of the Provider's place of business. This address is the contact for the designated person responsible for data protection. You can also submit a complaint and a proposal to initiate proceedings under § 100 of the Personal Data Protection Act to the Office for Personal Data Protection of the Slovak Republic, 820 07 Bratislava, Hraničná 4826/12. A sample proposal is published on the website of the Office for Personal Data Protection.
Confidentiality and third parties
We do not sell, trade, or otherwise provide your personal data to third parties. The exception is recipients, i.e., processors, about whom we have provided you with information. Our employees and processors who will process your personal data (based on processing agreements) are bound by confidentiality and are obliged to maintain confidentiality about personal data and the security measures, the disclosure of which would jeopardize the security of your personal data. The transfer of your personal data to state organizations occurs only based on the law or valid official or judicial decisions in accordance with the legal regulations of the Slovak Republic.