Version of launch date. This policy explains how Pazaris processes personal data under EU Regulation 2016/679 (GDPR) and the laws of the Republic of Cyprus.
1. Who is responsible for your data
The controller of pazaris.com is PAZARIS ENTERPRISES LTD, registration number HE 496415, address: Tafoi ton Vasileon, 10, Flat/Office 303, Mouttallos, 8046, Paphos, Cyprus.
For any question about personal data, write to privacy@pazaris.com.
2. What data we process
- Account: e-mail, password (stored only as a one-way hash), name, phone number, city. For business accounts — company name, registration number, logo, cover image and showcase description.
- Ads: text, photos, price, category, district and map location, links to videos and 3D tours.
- Messages between users.
- Reviews and enquiries sent through the feedback form: name, e-mail, phone number (if provided), text.
- Account activity: favourites, saved searches, notifications, view statistics for your ads.
- Payments: wallet top-up and service purchase amounts. You enter your card details on the Stripe page — we never receive or store them.
- Technical data: IP address, time and address of requests, browser type — in server logs and the activity log; sign-in attempts — to protect against password guessing.
3. Why we process data and on what legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Registration, your account, posting and showing ads, messages between users, paid services, service e-mails | Performance of a contract — our Terms of use (1 b) |
| Moderation, fraud and spam prevention, site security, logs | Legitimate interest: a safe and fair marketplace (1 f) |
| Replying to enquiries and publishing reviews | Legitimate interest (1 f) |
| Payment records | Legal obligation: tax and accounting rules (1 c) |
| Analytics, advertising, external media | Your consent (1 a) — via cookie settings |
We send marketing e-mails only with your separate consent; you can unsubscribe using the link in any such e-mail.
4. What other users can see
A published ad is visible to all visitors: text, photos, price, district, the seller name, city and phone number if you provided it. Business showcases are public. Reviews of the site are published with your name but without your e-mail. Messages are visible only to the participants of the conversation; a moderator may review a conversation when investigating a fraud report.
5. Who we share data with
We do not sell personal data. Access is given only to those the service cannot work without:
- hosting provider name, country — hosting the site and database;
- Stripe Payments Europe, Ltd. (Ireland) — payment processing;
- e-mail service name — sending e-mails;
- OpenStreetMap Foundation and Esri — map tiles and looking up the address of the point you pick on the map (Nominatim service): when you open a map, your browser requests map tiles from them and they see your IP address;
- YouTube (Google), Vimeo, Matterport — only if you click “Show” on a video or 3D tour or allow external media;
- analytics and advertising services — only with your consent (section 9);
- public authorities — where the law requires it.
6. Transfers outside the EEA
The site data is stored in hosting country. Some providers (for example Stripe and Google) may process data in the USA on the basis of the EU-US Data Privacy Framework or the European Commission standard contractual clauses.
7. How long we keep data
- Account — while it is active. After a deletion request the account can be restored within 14 days (30 days for business accounts); then the data is deleted.
- Ads — while published; unpublished ads — 12 months in your account archive unless you delete them earlier.
- Messages — until the account is deleted.
- Enquiries and reviews — 3 years.
- Payment records — 6 years, as required by tax law.
- Server and security logs — 12 months.
- Your cookie choice — 180 days.
8. Your rights
You can obtain a copy of your data, correct it, delete it, restrict processing, object to processing based on legitimate interest, receive your data in a machine-readable format and withdraw your consent at any time.
You can change or delete your name, phone number, city, ads and showcase in your account, and delete the account itself under “Settings”. For anything else, write to privacy@pazaris.com — we reply within one month.
If you believe we are violating your rights, you can lodge a complaint with the Cyprus Commissioner for Personal Data Protection: 1 Iasonos Street, 1082 Nicosia, commissioner@dataprotection.gov.cy, www.dataprotection.gov.cy.
9. Cookies
Necessary cookies are set without consent — signing in and form protection do not work without them:
| Name | Purpose | Duration |
|---|---|---|
| PHPSESSID | Session: signing in and form protection | Until the browser is closed |
| pz_consent | Your choice in cookie settings | 180 days |
Optional cookies — only after your consent:
- Analytics — to understand which pages are useful and improve the site;
- Advertising — to show more relevant ads and measure how they perform;
- External media — YouTube and Vimeo videos, Matterport 3D tours in ads; these services set their own cookies.
No analytics or advertising services are connected to the site at the moment. When they are added, we will list them here and ask for your consent.
You can change or withdraw your consent at any time: Cookie settings — the same link is at the bottom of every page.
10. Age
The site is intended for people over 18. We do not knowingly collect data from children.
11. How we protect data
The connection to the site is encrypted (HTTPS), passwords are stored only as hashes, sign-in attempts are limited and staff access to data is role-based.
12. Changes to this policy
A new version is published on this page. We will also notify you of significant changes in your account or by e-mail.
