domspecialist.si
Effective from: June 2026
1. General
NestVision d.o.o. (hereinafter: the controller) respects your privacy and is committed to the protection of personal data in accordance with EU Regulation 2016/679 (GDPR) and the Personal Data Protection Act (ZVOP-2).
This privacy policy explains which personal data we collect, why we collect it, how we use it, with whom we share it, and what rights you have as an individual.
The domspecialist.si portal is intended for persons aged 18 years or older. We do not knowingly collect data of persons under 18 years of age. If a parent or legal guardian discovers that a minor has provided us with personal data, please contact us at [email protected]. Upon receiving notice, we will review the data and delete it within 15 days.
2. Controller details
NestVision d.o.o.
Kneza Koclja ulica 5, 1000 Ljubljana, Slovenia
Tax number: 66431557 | Registration number: 9911944000
Email: [email protected] | Tel: +386 51 430 998
3. Which personal data we collect
3.1 Unregistered visitors
When you visit the portal we automatically collect:
- • IP address (stored in full for the purpose of security and abuse prevention; the Google Analytics 4 tool shortens and anonymizes the IP address on its own side by default),
- • browser type and version,
- • pages viewed and time of visit,
- • device and operating system.
This data is collected exclusively for analytical purposes and to ensure the security of the portal.
3.2 Registered users (general users)
Upon registration and use of the portal we collect:
- • first and last name,
- • email address,
- • phone number,
- • password (stored in a hashed, cryptographically protected form),
- • saved listings and search queries,
- • transaction history on the portal,
- • communication via the internal messaging system.
3.3 Specialists and agents
A specialist is a legal entity or a sole proprietor. An agent is a natural or legal person with a license for real estate brokerage. In addition to the data listed above for registered users we collect:
- • company name and address,
- • tax and registration number,
- • service categories and geographic area of operation,
- • references, certificates and licenses,
- • photographs and video presentations,
- • customer reviews and opinions,
- • data about the chosen package and payments,
- • collected loyalty points and redemption history.
3.4 Agencies
In addition to the data for specialists and agents we collect:
- • data about the team and contact persons,
- • advertising materials and real estate listings,
- • analytical data about views and inquiries.
3.5 Published real estate listings
When publishing a real estate listing we collect:
- • description and photographs of the property,
- • location (municipality, place, street as chosen),
- • price and technical data of the property,
- • contact details of the advertiser (visible only to registered users).
3.6 Payment data
Payment transactions are processed by the provider Stripe, Inc. NestVision d.o.o. does not store payment card data. We record only confirmed transactions, the type of package and the date of payment.
3.7 Newsletter
When you subscribe to the newsletter we collect your email address as well as the date and time of subscription as proof of consent. Unsubscribing from the newsletter is possible at any time via the link in every email message.
4. Purpose of processing and legal basis
| Purpose of processing | Legal basis (GDPR) | Data category |
|---|---|---|
| Registration and account management | Art. 6(1)(b) - performance of contract | Basic data, contact |
| Publishing real estate listings | Art. 6(1)(b) - performance of contract | Property data, contact |
| Forwarding inquiries to specialists | Art. 6(1)(b) - performance of contract | Contact data, work description |
| Displaying profiles of specialists, agents and agencies | Art. 6(1)(b) - performance of contract | Business profile |
| Billing of subscriptions and payments | Art. 6(1)(b) - performance of contract | Payment data |
| Sending the newsletter (with consent) | Art. 6(1)(a) - consent | Email address |
| Analytics and improvement of the portal | Art. 6(1)(f) - legitimate interest | Anonymous usage data |
| Abuse prevention and security | Art. 6(1)(f) - legitimate interest | IP, activity on the portal |
| AI functionalities (descriptions, assistant, analysis) | Art. 6(1)(b) - performance of contract | Minimized data |
| AI editor and photo analysis | Art. 6(1)(b) - performance of contract | Anonymized photographs |
| Loyalty points system | Art. 6(1)(b) - performance of contract | Activities on the portal, points balance |
| Fulfilment of legal obligations | Art. 6(1)(c) - legal obligation | Accounting data |
5. Processing of data with artificial intelligence
For certain functionalities the domspecialist.si portal uses the services of the external artificial intelligence provider OpenAI, Inc. (USA). Data is minimized to the greatest possible extent before being sent to OpenAI, and direct identifiers (such as name, email address or phone number) are not intentionally transmitted. Photographs submitted for the purpose of AI analysis or editing are tied exclusively to the content of the property and are not linked to the identity of the user.
AI functionalities on the portal include:
- • Property description generator: processes the type, size, location and condition of the property,
- • Specialist description generator: processes the type of services, experience and certificates,
- • E-assistant: a conversational assistant for navigating the portal and advice on renovation,
- • Renovation plan generator: processes the categories of work, age of the building and surface area,
- • Property market value estimate: analyzes property data and market data,
- • AI editor and photo analysis: processes property photographs to analyze condition and improve quality,
- • Interior visualizer (in preparation): generation of photorealistic images of spaces.
No AI functionality makes automated decisions with legal effects. All results are exclusively of an informative nature. OpenAI does not use the data transmitted via the API to train models. Data is stored at OpenAI for a maximum of 30 days for the purposes of abuse prevention.
The transfer of data to the USA is safeguarded by the EU-US Data Privacy Framework mechanism and standard contractual clauses (SCC).
6. With whom we share your data
6.1 Within the portal
Contact details of natural persons are not publicly published. Registered users may contact specialists, agents and agencies via the Portal's messaging system. Contact details are forwarded only in cases where the user explicitly requests contact via the functionalities intended for that purpose on the Portal.
Profiles of agents and agencies are visible to all visitors of the portal without contact details. Contact details are visible only to registered users. The 'verified agent' mark means that the Controller has verified the entry in the Register of Real Estate Agents of the Republic of Slovenia as well as the entry of the business entity in the Slovenian Business Register (AJPES) and the validity of the tax number.
Profiles of specialists are visible only to registered users of the portal. On the public list of specialists, only those who have purchased a paid package are displayed.
6.2 External data processors
| Provider | Country | Purpose | Protective measure |
|---|---|---|---|
| Hetzner Online GmbH | EEA (Germany/Finland) | Hosting of the portal | Processing within the EEA |
| Stripe, Inc. | USA | Payment processing | EU-US Data Privacy Framework |
| OpenAI, Inc. | USA | AI functionalities | EU-US Data Privacy Framework + SCC |
| Google LLC | USA | Analytics (GA4) | EU-US Data Privacy Framework |
6.3 Disclosure to authorities
We may disclose personal data to the competent authorities (police, court, tax administration) exclusively on the basis of a lawful request or a court order.
7. Data retention period
| Type of data | Retention period |
|---|---|
| Registered account data | Until account deletion (immediate anonymization upon deletion) |
| Real estate listings | Until account deletion or withdrawal of the listing |
| Specialist/agent/agency profile | Until account deletion |
| Communication via the portal | Until deletion of the user's account |
| Payment data and invoices | 10 years (legal obligation) |
| Loyalty points and history | Until account deletion |
| Analytical data (anonymous) | 26 months |
| Server logs | 90 days |
| Data transmitted to OpenAI | A maximum of 30 days at OpenAI |
| Consent for the newsletter | Until withdrawal of consent |
8. Your rights
In accordance with the GDPR you have the following rights regarding your personal data:
- • Right of access: at any time you may request confirmation of whether we process your data, and a copy of it.
- • Right to rectification: you may request the correction of inaccurate or the completion of incomplete data.
- • Right to erasure: in certain cases you may request the deletion of data (right to be forgotten).
- • Right to restriction of processing: in certain cases you may request the restriction of the processing of your data.
- • Right to portability: data you have provided to us may be received in a structured, machine-readable form.
- • Right to object: at any time you may object to processing based on legitimate interest.
- • Right to withdraw consent: consent for the processing of data (e.g. the newsletter) may be withdrawn at any time without consequences for past processing.
- • Right to complain: you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).
Send a request to exercise your rights to [email protected]. We will respond to the request without undue delay, at the latest within one month of receiving the request.
9. Loyalty points system
The domspecialist.si portal enables the collection of loyalty points for certain activities on the portal. The points system is available exclusively to specialists, agents and agencies.
Points are awarded for: inviting a new specialist, agent or agency (upon purchase of a package), publishing a review after a completed project, and a one-time rating of the platform upon invitation. For the operation of the points system we record the activities that earned points, the total points balance and the redemption history. This data is part of the profile and is retained until account deletion.
Points have no monetary value, are not transferable and cannot be exchanged for cash. Points are valid for 1 year from the date of allocation.
10. Data security
To protect your personal data we use the following technical and organizational measures:
- • encryption of communication via the HTTPS/TLS protocol,
- • storage of passwords in a hashed, cryptographically protected form (argon2),
- • access to data is limited to authorized employees,
- • regular backup of data,
- • hosting on Hetzner infrastructure within the EEA,
- • regular checking of security vulnerabilities.
Despite all measures, we cannot guarantee absolute security of data transmission over the internet. In the event of a data security breach that could endanger your rights, we will notify you in accordance with legal requirements.
11. Changes to the privacy policy
NestVision d.o.o. reserves the right to amend this privacy policy. We will notify you of important changes by a notice on the portal or via email at least 14 days before the changes take effect. The date of the last change is stated at the top of the document.
12. Contact and complaints
For all questions regarding the protection of personal data, contact us:
NestVision d.o.o.
Kneza Koclja ulica 5, 1000 Ljubljana
Email: [email protected]
Tel: +386 51 430 998
If you believe that we are violating your rights regarding data protection, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana
Email: [email protected] | Website: www.ip-rs.si