Skip to main content

Privacy Policy

Last updated: June 7, 2026

ОбщНаем ("we", "us", "our platform") is an online platform for room and flatmate listings, accessible at obshtnaem.com. This Privacy Policy describes how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Bulgarian data protection laws.

1. Data Controller

The data controller is ОбщНаем.
Contact email: contact@obshtnaem.com

2. What data we collect

2.1 Data you provide

  • Name and email address (via Google or Facebook sign-in)
  • Profile photo (from your Google/Facebook account)
  • Profile information (age, gender, occupation, interests — optional)
  • Listing content (text, photos, price, location)
  • Messages you send through the platform

2.2 Automatically collected data

  • IP address
  • Browser type and device
  • Date and time of access
  • Pages viewed

3. Legal basis for processing (Art. 6 GDPR)

  • Performance of contract — to provide the service (publishing listings, enabling messaging)
  • Legitimate interest — to improve the service, moderate content, and prevent abuse
  • Consent — for analytics cookies (if added in future)

4. How we use your data

  • To provide and maintain the platform
  • To display your listings to other users
  • To enable communication between users
  • To moderate content and ensure platform safety
  • To improve the service (using aggregated anonymous data)

5. Data sharing with third parties

We do not sell your personal data. We share data with the following service providers:

  • Supabase (USA) — database hosting and authentication
  • Vercel (USA) — web application hosting
  • Google / Meta (Facebook) — for OAuth authentication

These providers process data in compliance with GDPR and have appropriate safeguards for data transfers (Standard Contractual Clauses).

6. Data retention

  • Account data: as long as your account is active
  • Listings: 30 days after deactivation (automatic or manual)
  • Messages: as long as your account is active
  • Logs: up to 90 days

7. Your rights (Art. 15-22 GDPR)

You have the right to:

  • Access — obtain a copy of the data we hold about you
  • Rectification — correct inaccurate data
  • Erasure ("right to be forgotten") — request deletion of your data
  • Restriction — restrict the processing of your data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interest

To exercise these rights, email: contact@obshtnaem.com. We will respond within 30 days.

8. Cookies

We use only technically necessary cookies for:

  • Maintaining your login session
  • Remembering your language preference

We do not use advertising or tracking cookies. Vercel Analytics collects aggregated anonymous data without cookies.

9. Security

We implement technical and organisational measures to protect your data, including: encryption in transit (HTTPS/TLS), access controls, and regular security reviews.

10. Children

The platform is not intended for persons under 18 years of age. We do not knowingly collect data from minors.

11. Changes

If we make material changes to this policy, we will notify users via email or an in-platform notice.

12. Supervisory authority

If you believe the processing of your data violates GDPR, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP):
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: cpdp.bg

13. Contact

For privacy questions: contact@obshtnaem.com