Privacy Policy

Data controller

24SELLIO s. r. o.
Trnková 474/41, 040 14 Košice – mestská časť Košická Nová Ves, Slovenská republika
Company ID (IČO): 57 540 594
Tax ID (DIČ): 2122803210
The company is not a VAT payer.
Registration: Obchodný register Mestského súdu Košice, oddiel: Sro, vložka č. 65495/V
Managing directors: Ľuboš Bernáth, Peter Bernáth, Christian Mauritz
E-mail: support@24sellio.eu

The controller of personal data is 24SELLIO s. r. o., registered at Trnková 474/41, 040 14 Košice – mestská časť Košická Nová Ves, Slovenská republika. For data protection matters you can contact us at the email address below.

What data we process

Account and profile — email, password (stored only in encrypted form), name, phone number, avatar, profile description, account type, language and region.

Business data — company name, registration number, tax ID and VAT ID, and billing address for business accounts.

Content — listings, photos, reviews and ratings. Messages between users are stored on our servers; we may access them for moderation, security and legal compliance.

Payment and accounting data — wallet credits (Coins), payments, invoices and billing details related to paid services. Payment card data is processed solely by the payment gateway provider; we do not store it.

Technical data — IP address, device and browser type, access time, operational logs and cookies.

Communications — notifications and push subscriptions, if you enable them on your device; e-mail communication with support.

Purposes and legal bases of processing

We process personal data for the following purposes and on these legal bases under Article 6 GDPR:

Providing the service — performance of a contract (Art. 6(1)(b)) — creating and managing your account, publishing listings, communication and transactions between users.

Security and operations — legitimate interest (Art. 6(1)(f)) — security, prevention of fraud and misuse, operational logs and improvement of the service.

Consent — consent (Art. 6(1)(a)) — functional, analytics and marketing technologies on your device, measuring the effectiveness of advertising and an optional newsletter. You may withdraw consent at any time.

Legal obligation — legal obligation (Art. 6(1)(c)) — accounting and tax duties and handling requests from public authorities, as well as obligations under the DSA.

Obligation to provide data

The provision of data marked as mandatory during registration and ordering is a contractual or, where applicable, statutory requirement necessary to conclude and perform the contract (in particular the e-mail address and, for business and paid services, billing and identification details). Without providing it, it is not possible to set up an account, publish a listing or provide paid services. Other data is provided voluntarily.

Source of data

We obtain personal data directly from you — when you register, create a listing, order a service and when you communicate with us or with other users.

Public nature of listings and profiles

Listings you publish are accessible to visitors who are not signed in and may be indexed by internet search engines and shown in their results or in social media previews. Your name or company name, avatar, profile description, region, received ratings and any contact details you include in the listing (phone, e-mail) are also public. Do not include in listings, photographs or descriptions any data you do not wish to make public, nor personal data of third parties without their consent. After a listing is removed, a copy may remain in search engine caches for some time, which is beyond our control.

Ratings and communication between users

Ratings you give or receive are published together with your name and avatar on your public profile. We store messages and attachments from conversations so that we can deliver and display them, while image attachments are deleted automatically 3 days after they are sent and only a note that the attachment is no longer available remains in the conversation; we access them only to the extent necessary for moderation, dispute resolution, fraud prevention and compliance with legal obligations. The legal basis is performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in the security of the service (Art. 6(1)(f) GDPR).

Portal-specific notes

On 24jobs, the job offer is published by the employer; data you send them as a candidate (for example a CV in a message) is processed by the employer as a separate controller, who is responsible for its lawful processing — we process it only to the extent necessary for the technical storage, security and delivery of the message. On 24reality we publish property data including location and energy class exactly as entered by the advertiser. On 24bazar, 24marketplace and 24atelier we publish the description, attributes and photographs of the advertised item. In all cases the extent of published data is determined by the advertiser through the content of their listing.

Automated suggestions and artificial intelligence

When creating a listing we may offer you a price estimate and a text suggestion. The price estimate is calculated solely from our own database of comparable listings, without involving any third party. The text suggestion may be processed by a language model provider (OpenAI or Groq); in that case only the listing parameters you entered (category, attributes, price, description) are sent — not your contact details. This is an optional aid you are free not to use, you always approve the resulting text, and it does not constitute automated decision-making under Art. 22 GDPR.

Cookies

We use cookies and data in browser storage only to the extent described in the separate policy. Without your consent we store solely what is strictly necessary for the secure operation of the portal or for providing a feature you explicitly request. Functional, analytics and marketing technologies are activated only once you have given your consent, which you may withdraw at any time. Details can be found in our Cookie Policy

Recipients and processors

We disclose data only to trusted processors who process it on our behalf under a contract pursuant to Art. 28 GDPR. Currently these are the server hosting provider in the European Union on whose servers the portal runs, and Twilio (phone number verification by SMS). Search and image storage run on our own server without any third party involved. Your public listings and profile are visible to other users. We may provide data to public authorities where required by law. If we engage another processor in the future, for example a payment gateway or an analytics tool, we will update this policy in advance; we will provide the current list on request.

Transfers to third countries

We process data primarily within the EU/EEA. Where a processor processes data outside the EU, this only happens with appropriate safeguards under the GDPR, in particular standard contractual clauses approved by the European Commission.

Retention period

We keep data only for as long as necessary: account and profile data for the duration of the account; listings for the publication period (30 to 60 days depending on the portal) and then for a 30-day grace period, after which they are permanently deleted together with photographs; ratings for the duration of the rated user's account; conversation messages for the duration of the participants' accounts, but image attachments to messages only for 3 days from sending, after which they are automatically deleted from the server and from the database; accounting and tax documents (invoices and payments) for 10 years under the Accounting Act; application operational and security logs for a maximum of 8 weeks and web server logs for 14 days. If you request account closure, the account is deactivated immediately and after a 14-day period — during which you may cancel the closure — your data is deleted or anonymised, except for data we must retain by law or for the establishment, exercise or defence of legal claims.

Data security

We apply appropriate technical and organizational measures: encrypted connections (HTTPS), password hashing, access controls and continuous monitoring. However, no transmission over the internet can be guaranteed to be completely secure.

Your rights

You have the right to access your data, to rectification, erasure, restriction of processing, data portability and the right to object to processing, including processing for direct marketing purposes. Where we process data on the basis of consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand. You can download a copy of your data at any time directly in your account settings (Data export) and close your account using the account closure button. You may also exercise your rights at privacy@24sellio.eu; we will respond within one month at the latest.

Right to lodge a complaint

If you believe we process your personal data unlawfully, you have the right to lodge a complaint with the supervisory authority — in Slovakia the Úrad na ochranu osobných údajov Slovenskej republiky, Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk.

Protection of minors

The Portal is intended for persons over 18 years of age; registration and publication of listings by persons under 18 are not permitted. We do not knowingly process children's personal data; if we find that we have obtained such data, we will delete it without undue delay.

Automated decision-making

We do not carry out automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR. We may rank the content and order of listings automatically in order to improve relevance and your experience of the service; this ranking has no legal or similarly significant effect on you.

Changes to this policy

We may update this policy from time to time. The current version is always available on this page; we will inform you of any material changes in an appropriate manner.

Contact

For questions about data protection, contact us at: privacy@24sellio.eu