Privacy Policy – Buy & Sell Property Online
Last updated: 20.07.2026
-
Who we are and who controls your personal data
This Privacy Policy explains how we collect and use personal data when you use the Buy & Sell Property Online platform (the “Platform”) and its related services (together, the “Services”).
The Platform operator and controller of your personal data is:
- Liko s.r.o.
- Registered office: Agátová 3655/9C, 841 01 Bratislava – mestská časť Dúbravka, Slovak Republic
- Company ID: 55285210
- Tax ID: 2121939930
- VAT ID: SK2121939930
- Registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, File No. 167742/B
- Bank: Slovenská sporiteľňa, a.s.
- IBAN: SK52 0900 0000 0052 0052 5736
- BIC/SWIFT: GIBASKBX
- Website: https://liko.sk
- Email: liko@liko.sk
If you have any questions about this Privacy Policy or how we process personal data, please contact us at liko@liko.sk.
Liko s.r.o. determines why and how personal data is processed and is therefore its controller. We process personal data in accordance with the General Data Protection Regulation (GDPR), Slovak Act No. 18/2018 Coll. on Personal Data Protection and other applicable laws.
-
What this Privacy Policy covers
This Privacy Policy explains:
- what personal data we collect;
- why we use it and the legal bases on which we rely;
- who we share it with;
- how long we keep it;
- your rights under data protection law;
- how to contact us or a supervisory authority.
This Privacy Policy applies to:
- visitors to the Platform;
- registered users;
- users who post or browse property listings;
- users who contact other users through messages or contact forms;
- anyone who contacts us by email or through another channel.
-
Personal data we collect
We may collect the following categories of personal data:
-
Information you provide to us
When you use the Services, you may provide us with:
- Account information: your email address, username, preferred language and other profile details. To register in the usual way, you must provide an email address and password. We automatically create a username from the part of your email address before the @ symbol; you can change it afterwards.
- Login credentials: we do not store your password in readable form. It is stored only as a one-way cryptographic hash created using Django's standard password-management system. We cannot recover your original password from the stored hash.
- Optional profile and contact information: your telephone number and whether you use the account as a legal entity. You do not have to provide a telephone number unless you want to publish it or use it as a contact method.
- Listing information: details of the property, accommodation or property-related service you advertise, including its description, photographs, sale or rental price, address, location or coordinates, property features, availability and any other details you add.
- Communication data: the content of a message and the sender's email address taken from their account or entered in the relevant form, as well as information included in communications with our support team.
- Moderation data: the outcome of an automated or manual check, whether an artificial-intelligence check was performed, a brief note stating the main reason for a decision, and information needed to apply temporary or permanent protective restrictions. For users who are not signed in, this may include an IP address.
- Billing information, if you use paid Services: your name or business name, billing address, Company ID No., Tax ID No., VAT ID No. and other information needed to issue and record an invoice. Payment is made by bank transfer against an invoice; we do not process card payments or use an external payment service provider.
- Other information you voluntarily provide, for example in feedback, a support request or a survey.
-
Information collected automatically
When you visit the Platform, we may automatically collect:
- Technical data: your IP address, browser type and version, device information, operating system, language settings and similar information.
- Usage data: pages visited, date and time of access, referring URL, clicks, searches made on the Platform and other information about how the Platform is used.
- Information from cookies and similar technologies; see Section 5 for details.
-
Information from third parties
We may also receive personal data from:
- Google, if you choose to sign in with Google: your unique Google account identifier, email address, email verification status and basic profile information made available to us within the scope shown to you during sign-in;
- publicly available sources, where necessary to check information in a listing, for example to help prevent fraud.
Required and optional information
To create an account through standard registration, you must provide an email address and password. Without them, we cannot create your account. Alternatively, you may choose to sign in with Google, in which case Google provides the information needed to create or connect your account.
Your telephone number and the designation of an account as belonging to a legal entity are optional. Fields marked as required when creating a listing are necessary to publish it. If you order a paid Service, we need your billing information to issue an invoice and comply with our legal obligations; without it, we cannot provide the paid Service.
-
-
Why we use your personal data and our legal bases
We process personal data for the purposes and on the legal bases described below. Every processing activity must have a legal basis under the GDPR, such as performance of a contract, compliance with a legal obligation, a legitimate interest or consent.
-
Providing and operating the Services
Legal basis: performance of a contract under Article 6(1)(b) GDPR
We use your personal data to:
- create and manage your user account;
- publish, edit and manage property listings;
- display listings and profile information to other users in line with your settings;
- enable communication between buyers, sellers, property owners, landlords, tenants and agents through forms and messages;
- issue and record invoices for paid Services and send related documents and notices.
-
Maintaining the Platform, improving the Services and preventing misuse
Legal basis: our legitimate interests under Article 6(1)(f) GDPR
We use your personal data to:
- keep the Platform secure and available through reCAPTCHA, request rate limiting, automated content checks using locally operated artificial intelligence, technical filters and manual review where necessary;
- protect the Services and their users from fraud, spam, misuse and security incidents;
- enforce our Terms of Use and protect our legal claims.
Our legitimate interests are to operate a secure and reliable property advertising platform, improve the Services and protect our business from misuse.
-
Service communications
Legal basis: performance of a contract under Article 6(1)(b) GDPR
We use your contact details only for messages needed to provide the Services, including:
- email verification, password reset and account administration;
- notices about the creation, deactivation or deletion of a listing;
- forwarding a message from another user;
- sending an invoice or information about a paid Service you ordered;
- security and other essential operational notices.
-
Handling enquiries, requests and complaints
Legal basis: our legitimate interest under Article 6(1)(f) GDPR in handling communications, resolving problems and protecting our rights. Communications necessary to enter into or perform a contract are processed as service communications under the preceding paragraph.
We use this information only to deal with the particular enquiry, request, report or complaint and any related correspondence.
-
Google Analytics
Legal basis: your consent under Article 6(1)(a) GDPR. We load Google Analytics only after you accept analytics cookies in the cookie banner. You may withdraw your consent at any time using the Cookie Settings link in the Platform footer. Withdrawal does not affect the lawfulness of processing carried out before it.
-
Marketing
We do not send marketing emails, newsletters or commercial offers. We use your email address only to provide the Services and for the communications described above.
-
Compliance with legal obligations
Legal basis: compliance with a legal obligation under Article 6(1)(c) GDPR
We may process your personal data to:
- comply with tax, accounting and other legal obligations;
- respond to lawful requests from public authorities.
-
-
Cookies and similar technologies
We use cookies and similar technologies to:
- provide core Platform functions, including login, language and currency preferences, and security;
- remember your settings;
- protect the registration form from automated misuse through Google reCAPTCHA.
You can manage or disable cookies in your browser settings. Some cookies are essential for the Platform to work and cannot be switched off in our systems.
For more information, please read our separate Cookie Policy, which forms part of this Privacy Policy.
-
Who we share your personal data with
We do not sell your personal data. We share it only to the extent necessary for the purposes described in this Privacy Policy:
-
Other users
- When you publish a listing, information you choose to make available may be visible publicly or to registered users. This may include property details and features, the listing description, photographs, sale or rental price, approximate location and the contact details you select.
- If a message submitted through a contact form passes automated checks, we may deliver it to its intended recipient by email. The email includes the message text and the sender's email address taken from their account or entered in the form so that the recipient can reply.
We do not store message content in the Platform database. Before processing, a message may remain temporarily in a technical task queue for the time needed to process it and perform any technical retry. Emails are sent through our own mail server without an external email service provider. Once delivered, the recipient's email provider may process and retain the message under its own terms.
-
Authorised moderation personnel
If an automated check identifies a possible violation or manual review is otherwise required, we may make the listing or message text and necessary related information available to an authorised person. For a blocked message, this may include the sender's email address or account, IP address, intended recipient, related listing or profile, a link to the relevant page and the reason identified by the automated system. Access is limited to persons who need the information to assess a possible violation, handle a review request or protect the Platform and its users.
-
Google reCAPTCHA and Sign in with Google
We use Google reCAPTCHA during registration to distinguish a person from an automated program and protect the Platform from spam and misuse. For this purpose, Google may process information including your IP address, device and browser data, interactions with the page, and cookies or similar identifiers.
If you choose to sign in with Google, Google verifies your identity and gives us the information needed to create or connect your account. This may include your unique Google account identifier, email address, email verification status and basic profile information within the scope you approve during sign-in. You can instead register using your email address without signing in with Google.
Our legal basis for using reCAPTCHA is our legitimate interest under Article 6(1)(f) GDPR in securing the Platform and preventing automated misuse. We process information received through Sign in with Google to take steps at your request before entering into a contract and to perform our contract with you under Article 6(1)(b) GDPR.
For details of how Google processes personal data, please read the Google Privacy Policy.
Our technical infrastructure
We host the Platform, send email and perform automated content checks using artificial intelligence on our own server infrastructure. We do not use an external hosting, artificial-intelligence or SMTP service provider for these activities.
-
Public authorities and regulators
We may disclose personal data where required by law or where we reasonably believe that disclosure is necessary to:
- comply with a legal obligation;
- protect our rights, property or safety, or those of our users or other persons;
- detect or prevent fraud, or address security or technical issues.
-
Business transactions
If we are involved in a merger, acquisition, asset sale or similar transaction, personal data may be transferred as part of that transaction in accordance with applicable data protection law.
-
-
International transfers of personal data
We operate the Platform and our email server on our own infrastructure. However, in connection with Google reCAPTCHA and Sign in with Google, we share personal data with Google group companies, in particular Google Ireland Limited and, depending on how the relevant service is provided, Google LLC.
Google may process personal data outside the European Economic Area (EEA), including in the United States and other countries where Google or its subprocessors operate. This may include your IP address, device and browser data, cookies or similar identifiers, and information connected with your use of reCAPTCHA or Sign in with Google.
Transfers of personal data to the United States may be covered by the European Commission's adequacy decision for the EU–US Data Privacy Framework where the relevant recipient is certified and the transfer falls within the scope of that certification. Google LLC states that it is certified under the EU–US Data Privacy Framework.
Where an adequacy decision does not cover a particular transfer, Google uses the relevant standard contractual clauses approved by the European Commission or another lawful transfer mechanism under Chapter V GDPR.
For information about international transfer mechanisms and safeguards, please see Google's information on data transfer frameworks and the Google Cloud Data Processing Addendum. You may also contact us using the email address in this Privacy Policy for further information about the safeguards that apply to a specific transfer.
-
How long we keep your personal data
We retain personal data for the following periods:
- We keep user account information, including information needed to apply protective restrictions, for as long as the account remains active. You may request account closure and deletion of your personal data by emailing the contact address in this Privacy Policy. We delete information that must be retained to comply with a legal obligation or protect legal claims once the relevant statutory or limitation period has expired.
- We keep an active listing and its related moderation data for as long as it is published. If its title or description changes, we delete the previous moderation note and start a new check. If you delete the listing, the listing, its photographs and related moderation data are removed from active systems immediately. We automatically deactivate a listing that has not been updated for 90 days. If you do not renew it, we delete the listing, its photographs and moderation data after a further 30 days.
- We do not store the content of messages sent between users through the Platform in its database. Before processing, a message may be stored temporarily in a technical task queue. A message that passes moderation may be emailed to its intended recipient; we do not control how long that recipient or their email provider keeps it. A message identified as a possible violation may instead be sent to our service mailbox for manual review.
- We keep routine enquiries, comments and requests sent to liko@liko.sk, as well as messages forwarded to our service mailbox for manual review, for no longer than 12 months after they have been resolved. If a communication concerns a complaint, dispute, breach of law or legal claim, we may keep it until the matter is finally resolved and for the applicable limitation period afterwards.
- We keep accounting and billing information for the periods required by Slovak accounting, tax and other applicable laws.
- Google retains user-level and event-level Google Analytics data for two months under our Google Analytics account settings. This setting does not affect aggregate anonymised statistics.
- We keep an IP address used to limit excessive search requests in cache for no longer than four seconds.
- We keep an IP address used to limit the number of messages and listing reports in cache for no longer than 24 hours.
- We keep the IP address from which a blocked message was sent by a user who was not signed in for the period needed to apply short-term protective measures. After the relevant measure ends, we delete the record during the next check or automated cleanup, which runs once a day. The message text is not stored in this record.
- The Platform does not maintain a separate database of suspected fraud. We do not retain persistent local operational or login log files.
- Information deleted from active systems may remain in encrypted, rotating backups for up to 12 weeks. Backups are used only to restore the system following a technical or security incident, and we do not ordinarily restore individual records from them.
After these periods expire, we delete or anonymise the information.
-
Your rights
Subject to the conditions set out in data protection law, you have the following rights:
- Right of access: you may ask whether we process your personal data and request a copy of it.
- Right to rectification: you may ask us to correct inaccurate or complete incomplete personal data.
- Right to erasure (“right to be forgotten”): you may ask us to delete your personal data where the legal conditions are met.
- Right to restriction of processing: in certain circumstances, you may ask us to restrict how we process your personal data.
- Right to data portability: where the legal conditions are met, you may receive your personal data in a structured, commonly used and machine-readable format and transmit it to another controller.
- Right to object:
- you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests;
- Right to withdraw consent: you may withdraw your consent to Google Analytics at any time using the Cookie Settings link in the Platform footer. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You may exercise your rights by emailing liko@liko.sk. We may reasonably verify your identity before dealing with a request. We will respond without undue delay and no later than one month after receiving it. Where permitted by the GDPR, we may extend this period by up to two further months; if we do, we will tell you about the extension and the reasons for it within one month of receiving your request.
If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic, or with another competent supervisory authority.
-
Automated content checks and decision-making
We may automatically assess a listing's title and description and the text of a message using locally operated artificial intelligence and technical filters on our own server infrastructure. These systems assess possible breaches of applicable law, our Terms of Use or the Platform rules. They do not reject content solely because of the language in which it is written.
A listing may be approved, marked for manual review or rejected and have its visibility restricted. A message identified as a possible violation may not be delivered to its intended recipient. Repeated or serious violations may lead to temporary or permanent restriction of communication features. Content and related information may be referred to an authorised person for manual review, who may confirm, change or reverse the automated decision.
We use automated checks to protect the Platform, its users and enforce its rules, not to profile users. If you believe that an automated decision was incorrect, you may contact us using the email address in this Privacy Policy to request human review and express your point of view.
-
Age requirements
The Services are intended for people aged 18 or over, or who otherwise have full legal capacity under the law of their country. We do not knowingly collect personal data from anyone who does not meet this requirement. If you believe that such a person has created an account or given us personal data, please contact us so that we can investigate and delete the information where appropriate.
-
Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
No method of transmitting information over the internet or storing it electronically is completely secure, so we cannot guarantee absolute security.
-
Links to third-party services
The Platform may contain links to third-party websites, plug-ins or services. Those third parties operate under their own privacy policies, and we are not responsible for their practices. We recommend reading the relevant policy before providing personal data to a third party.
-
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will publish the revised version on this page and change the “Last updated” date. If a material change could affect your rights or how we process your personal data, we will notify you in advance by email or through the Platform, as appropriate.
-
Contact us
If you have questions, comments or requests about this Privacy Policy or the way we process your personal data, please contact us using the following details:
- Liko s.r.o.
- Registered office: Agátová 3655/9C, 841 01 Bratislava – mestská časť Dúbravka, Slovak Republic
- Company ID: 55285210
- Tax ID: 2121939930
- VAT ID: SK2121939930
- Registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, File No. 167742/B
- Bank: Slovenská sporiteľňa, a.s.
- IBAN: SK52 0900 0000 0052 0052 5736
- BIC/SWIFT: GIBASKBX
- Website: https://liko.sk
- Email: liko@liko.sk