Controller and contact
The operator identified at the top of this document is the controller for UseliSe accounts and features. Send privacy requests to managerhomeserbia@gmail.com with the subject “Data protection”. You can also use the legal requests section of your account.
Data we process
Account data includes your name, email, language, a securely derived password hash, legal acknowledgement records, sessions and security events. Passwords are not stored in their original form.
Depending on the features you use, we process saved listings and searches, notes, shared lists, enquiries, viewing appointments, offers, content in assistance tools, uploaded documents, notification settings and technical records. If an agency requests a conversation without an account, we store its name, contact name, email, optional phone, city and campaign marker to reply to that request; this is not marketing consent. For professionals, we process business identity, role, organisation, verification details and workspace activities. Do not enter unnecessary sensitive data in free-text fields.
Purposes and legal bases
Performance of a contract and steps you request before a contract are the basis for accounts, sign-in, saved choices and selected tools. Legal obligations apply to mandatory business, tax and complaint records. Legitimate interests support security, abuse prevention, defence of legal claims and limited analytics, subject to a balancing assessment and the right to object where applicable.
Consent is used for optional marketing and other processing that requires it. You may withdraw it without affecting prior lawful processing. Accepting the Terms and acknowledging this notice are not marketing consent. We cannot provide a feature without the data necessary for it; public listings can be browsed without an account.
Sharing with advertisers
When you send an enquiry, viewing request or offer, the selected contact details and content are sent to the advertiser identified for that action. The advertiser may be a separate controller for further communication. Check their identity and professional status in the listing. UseliSe does not sell your contact details.
Recipients and infrastructure
Authorised staff and service providers have access only as needed for the relevant function. Igor Efremov provides technical administration for the operator; hosting and the database use Hetzner. In this chain, Hetzner is the technical administrator's subprocessor. Access is limited to UseliSe, without access to unrelated projects.
- Cloudflare: website delivery and protection, form checks and object storage. Processes technical request data and stored objects.
- Resend: service messages and notifications you subscribe to; recipient email, message content and delivery status. The provider's primary processing is in the USA.
- MapTiler: map display; device technical data and requests for map areas, including IP address. The provider is based in Switzerland; infrastructure depends on the service used.
- HERE: route calculation; our server sends origin and destination coordinates and the chosen travel mode, not your name, email or enquiry to an advertiser.
- Make and OpenAI: optional AI prioritisation of an inquiry, only when the form's separate consent names this processing route and you explicitly choose it. Make receives reduced text and forwards it for assessment through OpenAI; original contact fields remain in UseliSe.
- SaveX Flow: an alternative, separately labelled route that prepares the inquiry using rules. This route does not use Make or OpenAI. The separate consent identifies the selected route; consent for one route does not automatically cover another.
Processing outside Serbia
These services involve processing outside Serbia. The WEUR object-storage location is not a guarantee that all technical data is processed exclusively in the EU. For information about recipients, the applicable transfer basis and an available copy of safeguards, contact managerhomeserbia@gmail.com. A provider's compliance statement does not replace assessment of a specific transfer.
Retention periods
Active-account data is retained while there is a valid need and basis. A confirmed deletion request has a 14-day cooling-off period. Data needed for legal obligations, open cases or disputes may be separated and retained with restricted access. Professional accounts and protected business records require separate review.
Technical cleanup thresholds are: tokens 30 days after expiry or use; unfinished quarantined uploads 24 hours after expiry; checked unattached files 24 hours after completion; analytics 395 days. Consumer complaint records are kept for at least two years. Closed enquiries, viewings and offers have a retention period of up to 24 months, with exceptions where another valid basis applies.
Daily database backups in database/daily/ have a 90-day expiry rule. Local backup snapshots are checked daily; removal of old snapshots stops if a verified newer copy is unavailable. This is not a promise that every item disappears from every copy exactly 90 days after a request. Backups are for recovery, not for reusing deleted accounts.
Security and mobile app
We use access controls, protected sessions, Argon2id password hashes, important-action records, multi-factor authentication for privileged roles and abuse controls. When enabled, breached-password checks send only the first five characters of a locally generated SHA-1 hash, not the password or full hash.
Mobile sign-in opens the system browser; the app does not store your password. UseliSe does not enable Google Ads or advertising tracking on iPhone, iPad, iPod or Mac, including with a previous website marketing choice; necessary sign-in and security storage remains active. Guest saved listings stay on the device; after sign-in the account list is available. Location permission is requested for a feature that uses it. Notifications are optional; you can change settings and revoke device permission.
Assistance tools and automation
UseliSe assistance tools provide informational results, not decisions with legal or similarly significant effects. New high-risk processing or an external generative provider requires a risk assessment and an update to this notice before introduction.
You can submit the inquiry without optional consent for additional processing. The selected route receives a technical inquiry identifier, language, source and shortened text. The known name, phone, email and recognised contacts are removed from the message; other personal information you enter may remain. This is not a guarantee of anonymity. Do not enter sensitive data. The result assists the team's review, does not decide access to housing and does not confirm delivery or an advertiser's reply.
The additional-processing record in UseliSe expires after 30 days and is scheduled for deletion after expiry. This does not promise simultaneous deletion by all external providers or from backups. To withdraw consent, stop remaining processing and request information about recipients, their retention periods and safeguards, contact managerhomeserbia@gmail.com. Withdrawal does not reverse processing already performed.
Your rights
You may request information, access, a copy, correction, erasure, restriction and portability where the conditions apply; you may object and withdraw consent. We respond without undue delay and within 30 days. If complexity or the number of requests requires an extension of up to a further 60 days, we will inform you within the first 30 days.
You may complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection: poverenik.rs. Exercising rights is generally free. Where there is reasonable doubt about identity, we may request proportionate verification without unnecessary documents.
Minors and changes
Accounts are intended for adults. When we learn of minors' data processed without a valid basis, it will be removed or restricted. We notify users of material changes where required; the document version appears above. Earlier legal acknowledgements are not overwritten with a new version.