Flatzy.eu Privacy Policy

Last updated: 8 June 2026

Flatzy.eu Privacy Policy

Effective from: 1 July 2026

Version: 1.0

This Privacy Policy (“Policy”) explains how European Element s.r.o. processes the personal data of users and visitors of the Flatzy.eu online portal, in particular in connection with user accounts, the publication and management of real estate listings, the use of CRM tools, saved searches, the sending of alerts, analytics, payments, support and the use of cookies.

Flatzy.eu is an online real estate portal operating within the European Union. Flatzy.eu provides a technical platform for publishing, searching, managing and promoting real estate listings. Flatzy.eu itself is not a real estate agency, auctioneer, financial adviser or legal adviser unless expressly stated otherwise.

In relation to the processing of personal data in Ireland, the General Data Protection Regulation applies together with the Irish Data Protection Act 2018 and other applicable Irish legislation.

The controller of personal data is:

European Element s.r.o.

registered office: náměstí Přátelství 1518/5, Hostivař, 102 00 Praha, Česká republika

IČO: 247 07 465

DIČ: CZ24707465

registered in the Commercial Register maintained by the Municipal Court in Prague, file No. C 167687

datová schránka: fthsxyq

e-mail: stavelement@gmail.com

Flatzy.eu service contact e-mail: info@flatzy.eu

website: https://flatzy.eu

For requests concerning the protection of personal data, you may contact the controller in particular by e-mail or via datová schránka. We recommend stating the following in the subject line of the message: “Personal Data Protection / GDPR”.

This Policy applies in particular to:

• visitors to the Flatzy.eu website,

• registered users,

• persons publishing real estate listings,

• persons interested in real estate,

• persons saving searches or subscribing to alerts,

• real estate agents, real estate agencies, developers and their staff,

• persons communicating through contact forms, CRM or support,

• persons whose data are contained in real estate listings, media, documents or communications.

In most cases, European Element s.r.o. acts as the controller of personal data because it determines the purposes and means of processing personal data in connection with the operation of the Flatzy.eu portal.

In certain situations, however, Flatzy.eu may also act as a processor of personal data, in particular where a professional user, such as a real estate agency, agent or developer, enters into the CRM its own contacts, clients, documents or notes that were not obtained directly through Flatzy.eu. In such a case, the controller of those data may be the relevant professional user, while Flatzy.eu provides the technical environment for their processing.

Where a professional user processes personal data of third parties through Flatzy.eu, that user is responsible for ensuring that a valid legal basis exists for such processing and that the persons concerned have been provided with the information required under the GDPR.

We process only personal data that are appropriate for the relevant purpose. Depending on how Flatzy.eu is used, this may include in particular the following categories of data.

4.1. Account and profile data

We process in particular:

• first name and surname or business name,

• e-mail address,

• telephone number, if provided,

• password in a technically secured form,

• language and user settings,

• account type, for example private user, agent, real estate agency, developer or administrator,

• information about membership in an agency or organisation,

• login history and basic security data.

4.2. Data in real estate listings

When a real estate listing is created or managed, we may process in particular:

• information about the property,

• address, municipality, district, region, country and, where applicable, exact or approximate location,

• price, currency, layout, area, technical parameters and description,

• photographs, videos, 360° photographs, floor plans and other media,

• contact details of the seller, landlord, agent or agency,

• internal identifiers of the listing,

• status of the listing, for example active, paused, sold, rented or archived,

• history of changes and publication.

Information about a property is not always personal data in itself. However, it may become personal data if it leads to the identification of a natural person, for example an owner, landlord, resident or interested person.

4.3. Contact forms, enquiries, leads and CRM

Where a user submits an enquiry, contacts an advertiser or uses CRM functions, we may process in particular:

• first name and surname,

• e-mail address,

• telephone number,

• content of the message,

• preferred property or search criteria,

• communication history,

• status of the enquiry,

• notes, tasks, appointments and internal CRM records,

• information about interactions with a listing, for example viewing a telephone number, submitting a form or requesting a viewing.

The contact details of an interested person may be transferred to the relevant advertiser, agent, real estate agency or developer so that they can respond to the enquiry.

4.4. Saved searches and alerts

Where a user saves a search or activates alerts, we process in particular:

• search parameters,

• location, radius, price, property type, layout and other filters,

• e-mail address or other contact details for delivering alerts,

• alert frequency settings,

• information about whether the user opened or reacted to an alert.

4.5. Analytics of events and behaviour on the portal

For the operation and security of the portal, improvement of services, measurement of listing performance and provision of analytics to users, we may process information about events on the portal, for example:

• viewing a listing,

• viewing a listing card,

• opening a gallery,

• playing a video,

• opening a 360° tour,

• opening a map,

• clicking on a telephone number, e-mail, WhatsApp or sharing function,

• adding to or removing from favourites,

• submitting a contact form,

• requesting a viewing,

• interacting with a saved search.

These data may also be used in aggregated or pseudonymised form for statistics, listing performance analytics, CRM overviews and service improvement.

4.6. Payments, invoicing and Stripe

Where a user orders a paid service, for example listing promotion, a TOP position, a video listing, a paid saved search, CRM or another paid function, we process in particular:

• customer identification and contact details,

• invoicing data,

• information about the service ordered,

• price, currency, VAT and payment status,

• payment, subscription or transaction identifier,

• order, invoice and payment history.

Payments may be processed through the payment service provider Stripe. Flatzy.eu generally does not store full payment card details. Such data are processed directly by the payment gateway in accordance with its own security and legal rules.

4.7. Media and documents

Users may upload photographs, videos, 360° photographs, floor plans, documents and other files to Flatzy.eu. These files may contain personal data, for example:

• images of persons appearing in photographs or videos,

• an address or identifiable interior,

• personal data contained in documents,

• file metadata, unless removed,

• signatures, contact details or other data contained in uploaded documents.

The user must upload only files that the user is authorised to use. The user should not upload documents containing unnecessary personal data, personal identification numbers, identity document numbers, health data, data concerning children or other sensitive information unless this is necessary.

4.8. Cookies, IP addresses, logs and technical data

When visiting or using Flatzy.eu, we may process in particular:

• IP address,

• device and browser identifiers,

• device type, operating system and browser,

• language settings,

• URLs, access times and referrer information,

• security and server logs,

• cookies and similar technologies,

• information about errors, performance and service availability.

Some technical data are necessary for the functioning of the website, security and prevention of misuse. Other cookies and similar technologies are used only on the basis of consent where such consent is required by law.

4.9. Support and communications

Where you contact us, we process in particular:

• contact details,

• content of communications,

• attachments,

• history of handling the request,

• technical information necessary to resolve the issue,

• where applicable, records of complaints, claims or legal demands.

We process personal data only where there is a legal basis under the GDPR.

Purpose of processing — legal basis

creation and management of a user account — performance of a contract

publication, management and promotion of real estate listings — performance of a contract

provision of CRM, leads and communication tools — performance of a contract; legitimate interests

transfer of an enquiry to an advertiser, agent, agency or developer — performance of a contract; legitimate interests; where applicable, consent depending on the specific situation

saved searches and alerts about new listings — performance of a contract; consent or legitimate interests depending on the type of alert

e-mail and push alerts relating to the account, listings and service — performance of a contract; legitimate interests

commercial communications and marketing — consent; for existing customers also legitimate interests to the extent permitted by law

payments, invoicing, accounting and taxes — performance of a contract; compliance with a legal obligation

analytics of listing performance and use of the service — legitimate interests; consent for non-essential cookies

security, fraud prevention, protection of accounts and systems — legitimate interests; compliance with a legal obligation

handling support, complaints and communications — performance of a contract; legitimate interests; compliance with a legal obligation

establishment and defence of legal claims — legitimate interests

retention of documents required by law — compliance with a legal obligation

cookies and similar technologies — applicable technical exemption for storage or access that is strictly necessary; consent for analytical, marketing and other non-essential cookies

Where we base processing on legitimate interests, these include in particular:

• operation and protection of the real estate portal,

• prevention of misuse, spam, fraud and unauthorised access,

• protection of user accounts and data,

• keeping records of communications and resolving disputes,

• improving the functionality, quality and security of the service,

• measuring the performance of real estate listings,

• providing basic analytical overviews to advertisers,

• protection of legal claims of the controller, users and third parties,

• direct marketing to existing customers within the limits of applicable law.

Before processing on the basis of legitimate interests, we assess whether our interests are overridden by the rights and freedoms of the persons concerned.

Flatzy.eu may use cookies, local storage, pixel tags and similar technologies.

In Ireland, the storage of information in a subscriber’s or user’s terminal equipment, or access to information already stored there, is also governed by the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011, S.I. No. 336/2011. In particular, Regulation 5(3)–(5) provides for consent requirements and exceptions for transmission-related or strictly necessary storage and access.

We divide cookies in particular into the following categories:

7.1. Essential cookies

These cookies are necessary for the functioning of the website, login, security, storage of language settings, session management, prevention of misuse and basic technical operation of the service. Without these cookies, the service cannot be properly provided.

Consent is not required only to the extent that the conditions of the applicable exemption are met, including where technical storage or access is for the sole purpose of carrying out the transmission of a communication over an electronic communications network or is strictly necessary to provide an information society service explicitly requested by the subscriber or user.

7.2. Analytical cookies

Analytical cookies help measure traffic, use of functions, listing performance and the technical behaviour of the service. We use them only where consent has been given if such consent is required by law.

7.3. Marketing cookies

Marketing cookies may be used to measure campaigns, personalise advertising or evaluate the effectiveness of promotion. We use them only on the basis of consent.

7.4. Consent management

The user may give, refuse or later change consent to non-essential cookies through the cookie banner or cookie settings on the website. Withdrawal of consent must be as easy as giving it.

Refusal of non-essential cookies does not affect basic use of the service but may affect certain analytical, personalisation or marketing functions.

Flatzy.eu may send several types of messages:

8.1. Service and transactional messages

These include, for example, registration confirmation, password changes, account-related alerts, order confirmation, invoicing, payment status, security alerts, messages relating to a listing or support responses.

These messages are necessary for the provision of the service and are not ordinary marketing communications.

8.2. Saved search alerts

Where a user activates a saved search or alert, we may send messages about new or matching listings in accordance with the user’s settings. The user may switch off these alerts at any time in the account or through a link in the message, where available.

8.3. Commercial communications

We send marketing communications only where we have a valid legal basis, in particular consent or an existing customer relationship to the extent permitted by applicable law. Each commercial communication includes a simple means of unsubscribing.

The user acknowledges that data published in a real estate listing may be publicly accessible to visitors of Flatzy.eu. This may concern in particular the property description, photographs, price, location, advertiser contact details and other information stated in the listing.

The user should not include in the public part of a listing personal data that are not necessary for publication of the listing.

Flatzy.eu may also display listings in different language versions of the portal, in search results, on maps, in overviews, recommendations, saved searches and when a listing is shared.

We may transfer or make personal data available only to the extent necessary to the following categories of recipients:

• providers of hosting, database, cloud and infrastructure services,

• providers of storage, CDN and media management services,

• providers of e-mail, push and communication services,

• payment service providers, in particular Stripe,

• providers of analytical and security tools,

• accounting, tax and legal advisers,

• public authorities where required by law,

• real estate agents, agencies, developers or advertisers where the user sends them an enquiry or message,

• professional users who manage listings, leads or CRM records in their account,

• persons with whom the user independently shares a listing or document.

We conclude personal data processing agreements with processors where required by the GDPR.

We process personal data primarily within the European Union or the European Economic Area. However, some of our service providers may also process data outside the European Economic Area.

Where personal data are transferred to a third country, we ensure that such transfer takes place in accordance with the GDPR, in particular on the basis of:

• an adequacy decision of the European Commission,

• Standard Contractual Clauses,

• the Data Privacy Framework, where applicable,

• or another legal mechanism under the GDPR.

We retain personal data only for as long as necessary for the relevant purpose unless applicable law requires a longer retention period.

As an indication, the following periods apply in particular:

Category of data — retention period

account data — for the duration of the account and for a reasonable period after its closure

active real estate listings — for the period of publication and management of the listing

archived listings — for as long as necessary for account history, defence of legal claims and compliance with legal obligations

CRM / leads and communications — for the duration of the business relationship or legitimate interest; generally no longer than the period during which potential legal claims may be pursued

saved searches — until deleted by the user or the account is closed

alerts and notifications — for the period during which the relevant function is active

payment and invoicing data — for the period required by accounting and tax legislation

technical logs — for as long as necessary for security, operation and incident resolution

cookies — according to the type of cookie and consent settings

support and complaints — for the period required to handle the request and subsequently for as long as necessary to protect legal claims

consents — for the duration of the consent and subsequently for as long as necessary to demonstrate that it was given or withdrawn

Where we no longer need personal data, we delete or anonymise them. Some data may remain in backups for a limited period until the backups are overwritten in accordance with technical rules.

We implement technical and organisational measures to protect personal data, in particular against unauthorised access, loss, misuse, alteration or destruction.

These measures may include in particular:

• management of access rights,

• user authentication,

• separation of administrative privileges,

• encrypted communications,

• security logging,

• backups,

• restrictions on access to production data,

• monitoring of errors and security events,

• contractual safeguards with processors,

• internal rules for handling personal data.

However, no system is absolutely secure. The user is responsible for protecting login credentials and must not disclose them to third parties.

Flatzy.eu may use algorithms for ranking listings, recommending content, evaluating listing performance, detecting suspicious activity or displaying relevant search results.

Such processing generally does not produce legal effects concerning the user or similarly significantly affect the user within the meaning of Article 22 of the GDPR.

If Flatzy.eu were in the future to introduce automated decision-making producing legal or similarly significant effects, it would provide users with specific information and ensure the rights required by the GDPR.

Under the GDPR, you have in particular the following rights:

15.1. Right of access

You have the right to obtain confirmation as to whether we process your personal data and, where we do, the right to access those data and other information concerning their processing.

15.2. Right to rectification

You have the right to request the correction of inaccurate personal data or the completion of incomplete personal data.

15.3. Right to erasure

You have the right to request the erasure of personal data where the conditions of the GDPR are met, for example where the data are no longer necessary or where you withdraw consent and there is no other legal basis for the processing.

15.4. Right to restriction of processing

You have the right to request restriction of processing in the cases provided for by the GDPR.

15.5. Right to data portability

Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive personal data in a structured, commonly used and machine-readable format.

15.6. Right to object

You have the right to object to processing based on legitimate interests, including to object to direct marketing. Where you object to direct marketing, we will cease processing your data for that purpose.

15.7. Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

15.8. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority.

In Ireland, the supervisory authority is:

Data Protection Commission

6 Pembroke Row

Dublin 2

D02 X963

Ireland

telephone: +353 (0)1 765 0100 / 1800 437 737

e-mail: info@dataprotection.ie

website: https://www.dataprotection.ie

The address and telephone details above are published on the official DPC contact page, and the DPC’s official complaint guidance identifies info@dataprotection.ie as an alternative e-mail channel for raising a concern or complaint.

You may exercise your rights by contacting the controller by e-mail, via datová schránka or in writing at the controller’s address.

To enable us to handle the request securely, we may ask for proportionate verification of identity. Without identity verification, we may be unable to process the request, in particular where there is a risk that data could be disclosed to an unauthorised person.

We will generally respond to a request within one month of receiving it. This period may be extended in justified cases in accordance with the GDPR.

Where a user enters into Flatzy.eu the personal data of another person, for example a property owner, family member, client, tenant, buyer, interested person or real estate agency staff member, the user is responsible for ensuring that a valid legal basis exists for such entry and processing.

The user must not enter into Flatzy.eu personal data of third parties to an extent that is not necessary for the purpose of using the service.

Flatzy.eu is not intended for children. The service may be used only by persons who are authorised to enter into contracts and use the service in accordance with the Flatzy.eu Terms and Conditions.

If we become aware that we are processing a child’s personal data without the necessary legal basis, we will take proportionate steps to remove them.

We may update this Policy, in particular where there are changes to the service, legislation, technologies used or methods of processing personal data.

The current version will always be available on Flatzy.eu. Where a change is material, we may also inform users by e-mail, through an account notification or by another appropriate means.

Flatzy.eu processes personal data in particular so that it can:

• operate the real estate portal,

• enable registration and account management,

• publish and manage real estate listings,

• deliver enquiries, leads and messages,

• provide CRM and analytical functions,

• save searches and send alerts,

• process payments and invoicing,

• protect the service against misuse,

• comply with legal obligations,

• handle support, complaints and legal claims.

The user has rights under the GDPR, in particular the right of access, rectification, erasure, restriction, data portability, objection, withdrawal of consent and the right to lodge a complaint with the Data Protection Commission.

Effective from: 1 July 2026