1. Data controller
The controller for personal data processed on DomNeed is the operator of the DomNeed platform. You can reach us at privacy@domneed.com for any data-protection matter.
2. What we collect
Account data: name, email, preferred language, hashed password, role (guest or host).
Host data: property details, photos, contact methods (phone, email, website).
Usage data: pages viewed, search filters, coarse device type, IP-derived hash (never stored raw), and a per-session anonymous identifier used to count unique visitors and prevent duplicate lead counting.
Communication data: emails you send us and support messages.
3. Why we process it
To operate the platform (account creation, listing display, search).
To count unique visitors per property, enforce the free allowance, and bill hosts for their subscription (legitimate interest and contract performance).
To send transactional emails (password reset, lead notifications, receipts) based on contract performance.
To comply with legal obligations (tax, accounting, lawful requests).
4. Legal basis
Performance of a contract (Art. 6(1)(b) GDPR) for account and subscription features.
Legitimate interest (Art. 6(1)(f) GDPR) for anti-abuse, deduplication, and security telemetry.
Consent (Art. 6(1)(a) GDPR) for optional cookies and any marketing communications you opt into.
Legal obligation (Art. 6(1)(c) GDPR) for accounting and tax records.
5. Sharing
We share personal data only with vetted processors under a Data Processing Agreement: our cloud infrastructure provider, our email delivery provider, and (once enabled) our payment processor.
We do not sell personal data and do not share it with advertisers.
6. Retention
Account data: kept while the account is active and for 24 months after deletion request, unless a longer retention is required by law.
Lead events: kept up to 24 months for host analytics and dispute handling.
Financial records: 10 years, per Slovenian accounting law.
7. Your rights
Under the GDPR you have the right to access, rectify, delete, restrict or object to the processing of your personal data, and to data portability. You may exercise these rights by writing to privacy@domneed.com.
You may lodge a complaint with the Slovenian Information Commissioner (ip-rs.si) or the Croatian AZOP (azop.hr).
8. International transfers
Our processors operate primarily within the European Economic Area. Where transfers outside the EEA occur, they rely on the European Commission’s Standard Contractual Clauses.
9. Security
We use encrypted transport (HTTPS), encrypted storage, role-based access controls, and least-privilege service credentials. Contact details are only revealed to signed-in guests after an explicit action.