1. Who the controllers are
The MARK REAL real estate agency is operated jointly by two companies. They use a shared website and a shared client database and decide together on the purposes and means of processing your data. They are therefore joint controllers under Article 26 GDPR:
LMS SK s.r.o.
Registered office: Šikmá 11949/13, 821 06 Bratislava - Podunajské Biskupice, Slovakia
Company ID (IČO): 51080257
MARK REAL s.r.o.
Registered office: Šikmá 11949/13, 821 06 Bratislava - Podunajské Biskupice, Slovakia
Company ID (IČO): 45584524
Contact for personal data matters (for both companies): bagona@markreal.sk, +421 911 662 958
Essence of the arrangement between the joint controllers
- Both companies share a client and listing database, the website and the sending of listings; each works with the data only to the extent necessary for real estate services.
- The single point of contact for your requests is the contact above. However, you can exercise your rights against either of the two companies; they will handle the request together.
- Information about processing (this page), the security of the shared systems, contracts with suppliers and reporting of any data breaches are ensured by the companies jointly and coordinated by LMS SK s.r.o.
- You always conclude the brokerage agreement with one of them. That company is responsible for performing the agreement and for the obligations imposed on it by law (e.g. client identification under Act No. 297/2008 Coll., accounting).
We have not appointed a Data Protection Officer (DPO), as we are not required to do so by law. You can contact us directly with any questions.
2. Purposes and legal bases of processing
Replying to your message or inquiry about a listing
Data: name, email, phone, the content of the message, and possibly the listing you are interested in and what you are looking for (type, location, budget).
Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in replying to questions received (Article 6(1)(f) GDPR).
Retention period: while your request is being handled and no longer than 2 years from the last contact, unless a contractual relationship arises between us.
Client records and selection of suitable properties
We keep the data from inquiries in our internal records so that we can offer you properties matching what you told us you are looking for, or find a buyer for your property.
Legal basis: steps prior to entering into a contract and performance of the brokerage agreement (Article 6(1)(b) GDPR), legitimate interest (point (f)).
Retention period: no longer than 2 years from the last contact; after that we delete the data. You may object to this processing at any time.
Sending listings and news by email
Data: name, email and your preferences (what you are looking for). This includes new listing alerts you set up on the Properties page (buy or rent, property type, location, price, number of rooms): we send you listings only according to these criteria.
Legal basis: your consent (Article 6(1)(a) GDPR and Section 116 of Act No. 452/2021 Coll. on Electronic Communications), which you give by ticking the box in the form. Consent is voluntary; we will reply to you even without it.
Retention period: until you withdraw your consent. You can withdraw it with one click via the "Unsubscribe" link in every email or by sending a message to our email. Withdrawal does not affect the lawfulness of processing before it.
Seller's guide download
Data: email, and name and phone if you enter them, and the information that you downloaded the guide and whether you would like us to contact you.
Legal basis: our legitimate interest in recording to whom we provided the guide (Article 6(1)(f) GDPR); if you tick that we may contact you, steps taken at your request prior to entering into a contract (point (b)). We send listings and news by email only if you give separate consent in the form.
Retention period: no longer than 2 years from the last contact. You may object to the processing at any time.
Property valuation (online estimate and valuation request)
Data: property details (type, location, size, condition…) and, if you enter them, your name, email or phone for us to get back to you.
Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR). The online estimate on the Slovak website is indicative and automatically calculated; it has no legal effects and is not automated decision-making under Article 22 GDPR.
Retention period: no longer than 2 years from the last contact. An estimate without contact details is not stored against any person.
Preparing a mortgage / loan offer
Data: name, phone, email, purpose of the loan, property price, amount of your own funds and your note.
Purpose: so that our financial specialist can contact you and prepare a comparison of loan offers. More detailed data needed by the bank (income, documents) is requested only at a personal meeting and processed in accordance with the regulations on financial intermediation.
Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
Retention period: no longer than 2 years from the last contact, unless a contractual relationship arises between us.
Report for the property owner
Data: aggregate figures for the listing: the number of views of the listing on our website and their source, the number of inquiries and the dates of viewings with an overall assessment of interest. The report does not contain the names, contact details or other data of interested parties.
Purpose: so that you, as the owner, can continuously see how your listing is doing. The report is available only via a secret link sent to you by the agent; the link can be revoked at any time. We record when the report was opened.
Legal basis: performance of the brokerage agreement (Article 6(1)(b) GDPR) and our legitimate interest in informing the client about the progress of the sale (Article 6(1)(f) GDPR).
Retention period: the link is valid until the agent revokes it or the listing is deleted.
Review request after a completed transaction
Data: name, email, the property concerned and whether you opened the review link.
Purpose: after a sale or rental, the agent may send you one email with thanks and a request for a review on Google, possibly with one reminder. We do not send more requests. You write the review directly on Google under its terms; we do not interfere with it.
Legal basis: our legitimate interest in obtaining feedback from clients (Article 6(1)(f) GDPR). You may object to this at any time, simply by replying to the email.
Retention period: we delete the record of sending no later than 90 days after the last sending.
Client zone (uploading documents)
Data: documents requested by the agent and uploaded by you (e.g. the document by which you acquired the property, a floor plan, a copy of your identity document), their name, size and upload time; your phone number for sending a verification code by text message; a record of when you opened the zone and which of us opened or checked a file.
Purpose: preparing contracts and a property transaction without handing over paper documents in person. The zone is available only via a secret link and after verification with a text message code; the files are stored in non-public storage and only the agent handling your case and the administrator can see them. We make a copy of your identity document for the purpose of identifying and verifying the client under Act No. 297/2008 Coll. on Protection against Money Laundering.
Legal basis: performance of a contract and steps prior to entering into it (Article 6(1)(b) GDPR); for the identity document, compliance with a legal obligation (Article 6(1)(c) GDPR).
Retention period: documents are deleted automatically 6 months after the transaction is completed (if no transaction is completed, no later than 2 years after the last upload). We keep a copy of the identity document for 5 years after the transaction is completed, as required by the above act. Verification codes are deleted within 2 days.
Brokering a transaction and legal obligations
If you conclude a contract with us, we process the data necessary for its performance (Article 6(1)(b) GDPR) and to fulfil obligations imposed on us by law, in particular Act No. 297/2008 Coll. on Protection against Money Laundering (client identification) and accounting and tax regulations (Article 6(1)(c) GDPR).
As part of customer due diligence under the same act, we check whether you are a politically exposed person and whether you appear on sanctions lists; for a company, we also check basic data from the commercial register, debts, insolvency, adverse media and ultimate beneficial owners. For this check we use your name, surname, date of birth or, for a company, its name and company ID. We keep the result for 5 years after the end of the business relationship.
Retention period: according to the relevant act, usually 5 to 10 years.
3. Who we share data with
We do not sell data or provide it to third parties for their marketing. It is handled only by the agents of the two joint controllers (LMS SK s.r.o. and MARK REAL s.r.o.) and by the following vetted suppliers (processors), who process it exclusively on our instructions:
- Supabase, Inc. - the website database and storage (listings, form messages, client records).
- Resend (Plus Five Five, Inc.) - sending emails (listings, notifications).
- TOPefekt s.r.o. (BulkGate, Czech Republic) - sending text messages (viewing reminders, client zone verification codes).
- Rokan Consulting, s.r.o. (AML Control, Bratislava, company ID 35 890 002) - client due diligence under the anti-money laundering act (politically exposed persons, sanctions lists, company data).
- Digital factory s.r.o. (Signi, Czech Republic, company ID 06988377) - electronic signing of contracts (name, email, phone number for signature verification and the contract being signed).
- Render Services, Inc. - operation of the online price estimate.
- Anthropic, PBC - a language model that formulates the text of the online estimate (it receives only the property details, not your contact details).
- WebCreators, s.r.o. (HostCreators) - web hosting, storage of the website itself.
- Google Ireland Limited and Meta Platforms Ireland Limited - traffic measurement and advertising, only if you consent to it in the cookie settings (see section 5).
Some of these suppliers are based in the USA. Data is transferred on the basis of the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
Where required by law, we may also provide data to public authorities (e.g. courts, the police, the tax office).
4. Your rights
You can exercise your rights by email at bagona@markreal.sk. We will reply within one month at the latest.
If you believe that we handle your data in breach of the law, you can file a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
This information is effective from 4 November 2026 (English translation of the Slovak version effective from 4 November 2026). If we change it, you will always find the current version on this page.