Zoulou's Privacy Policy
Welcome to Zoulou's Privacy Policy. We value your privacy and are committed to protecting your data in accordance with articles 13 and 14 of the EU General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, use, store, and protect your information when you use our website. By using our services, you agree to the terms outlined in this Privacy Policy.
Our commitment to safeguarding your personal data is guided by the following principles outlined in the General Data Protection Regulation (GDPR):
1. Lawfulness, Fairness, and Transparency: Your personal data will be processed in accordance with the law, in a fair and transparent manner.
2. Purpose Limitation: We collect your personal data for specific, clear, and legitimate purposes and will not process it in ways incompatible with these purposes.
3. Data Minimization: We only collect personal data that is relevant and necessary for the intended purposes of processing.
4. Accuracy: We take steps to ensure the accuracy of your personal data and will rectify or erase any inaccuracies without delay.
5. Storage Limitation: Your personal data will be stored in a form that allows your identification for no longer than necessary for the purposes for which it is processed.
6. Integrity and Confidentiality: We implement security measures to protect your personal data from unauthorized or unlawful processing, as well as accidental loss, destruction, or damage.
7. Accountability: We, as the data controller, are responsible for demonstrating compliance with these principles and the GDPR's requirements.
These principles underpin our approach to data protection, ensuring your rights and privacy are respected in all our data processing activities.
Please note that this Privacy Policy applies to distinct types of users: Users without an account or Registered Users, which can be an Individual using our Website and Professional Clients such as agents, sellers or partners.
Data Controller
The data controller responsible for processing your personal data is Zoulou iMarketing Ltd. Registered at Róth Johanna utca 6, 3044 Szirak, Hungary, Company Registration 12-09-013453, EUID: HUOCCSZ.12-09-013453, Tax-No. 32816426-2-12, EU-Tax-No. HU32816426. Email: security@zoulou.eu
The services provided by the Data Controller are designed for individuals aged 18 and above. If the Data Controller becomes aware that data of individuals under 18 is being processed without proper consent from parents or a legal guardian, the Data Controller reserves the right to unilaterally cease the provision of services and erase the collected data.
What data do we collect?
Zoulou collects and processes various types of data for different purposes.
The information we collect includes:
▫ Identifying Data:
- Name and surname
- User ID and password
▫ Contact Details:
- Telephone number
- Contact e-mail
- Address for contact purposes
▫ Personal Characteristics:
- Age
- Gender
- Profession
- Living preferences for property searches
▫ Economic and Financial Data:
- PayPal account details or credit card details for billing purposes
- Budget information relevant to property criteria
▫ Interaction and Browsing Information:
- Interaction and browsing on the platform
- IP address
- Advertising interaction data (e.g., visits, page views, and actions following advertisements on external platforms)
▫ Data Related to Services You Contract:
- Information about advertised properties (including descriptions, images, videos, floor plan, details, features, and address)
- Information derived from contracted services
▫ Information Affecting Professional Clients (Legal Entity):
- Identification and contact details of natural person(s) representing the company
How do we collect your data?
You directly provide Zoulou with most of the data we collect. We collect data and process data when you:
- Create an account on the platform
- Subscribe to our newsletter or place an order for any of our plans or services
- Voluntarily complete a customer survey or provide feedback via website form or email
- View or use our platform via your browser’s cookies
How will we use your data?
Zoulou collects your data for the following processing and legitimacy purposes:
▫ Processing Necessary for Provision of Services:
- Registration as a Registered User
- Saving and managing searches
- Publication of property listings
- Contracting services or plans
▫ For the Legitimate Interest of Zoulou:
- Processing of identification and contact details for formalizing contractual relationships (Art. 6 I p. 1 b GDPR)
- Processing of identification, contact, and financial data for processing claims and payments
▫ By Express Consent Provided (Art. 6 I p. 1 a GDPR):
- Sharing identification and contact details with property listers
- Processing of data for profile qualification service
- Measuring the effectiveness of advertising campaigns and performing remarketing through advertising platforms
- Sending promotional communications about Zoulou's products and services
The financial data required to process payment for a plan or service will be transmitted to our payment processor Stripe regardless of the payment method you choose (credit card, apple pay or google pay). Your data will be processed exclusively within the EU, unless otherwise specified below.
How do we store your data?
Zoulou securely stores your personal data being processed electronically and will be stored in electronic archives. Electronic documentation will be correctly maintained and protected for as long as necessary using appropriate security measures, to minimize the risk of destruction or loss, unauthorized access or processing that does not comply with the purposes of collection.
There is no automated decision-making process.
Depending on each of the purposes for which we process your data, the period will be:
- During the contractual relationship. That is, for as long as you are a User, Private or Professional Client, which is necessary for the provision of the services you request from us.
- Until the purpose for which your data was collected ends, or you object to their processing on the grounds of legitimate interest.
- Until you revoke your consent, based on the express consent provided.
- Until you request their erasure, in the legally permitted cases.
Marketing:
Zoulou would like to send you information about products and services of ours that we think you might like. If you have agreed to receive marketing, you may always opt out later. You have the right at any time to stop Zoulou from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact us at security@zoulou.eu
What are your data protection rights?
Zoulou would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:
1. The right to access – You can request information from us as to whether we process your data and, if this is the case, you have a right to information on this data and on the further information specified in Art. 15 GDPR.
2. The right to rectification – You have the right to correct any inaccurate data concerning you and may request the completion of incomplete data in accordance with Art. 16 GDPR.
3. The right to erasure – You have the right to demand that we delete the personal data concerning you immediately. We are obliged to delete it immediately, especially if one of the following reasons applies:
- Your data is no longer necessary for the purposes for which they were collected or otherwise processed.
- You withdraw your consent, on which the processing of your data is based, and there is no other legal basis for the processing.
- Your data has been processed unlawfully.
- The right of deletion does not exist if your data is necessary to assert, exercise, or defend our legal claims.
4. The right to restrict processing – You have the right to request that Our Company restrict the processing of your personal data, under certain conditions.
5. The right to object to processing – You have the right to request us to restrict the processing of your personal data if you deny the correctness of the data and we, therefore, check the correctness, the processing is unlawful and you refuse the deletion and instead request the restriction of use, we no longer need the data, but you do need it to assert, exercise, or defend legal claims, you have objected to the processing of your data and it is not yet clear whether our justified reasons outweigh your reasons.
6. The right to data portability – You have the right to receive the personal data concerning you that you have provided to us in a structured, current, and machine-readable format, and you have the right to transmit this data to another person in charge without our interference, provided that the processing is based on consent or a contract and the processing is carried out by us using automated procedures.
7. The Right of revocation - If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.
8. The right of appeal - The exercise of your above rights is free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) Website: https://www.naih.hu/
We also cooperate with other EU supervisory authorities as necessary.
Cookies:
We use cookies to improve user experience and gather analytics. You will be informed via a cookie banner and may manage preferences or withdraw consent at any time.
For more information, please refer to our cookie policy.
▫ How do we use cookies?
Zoulou uses Cookies, which are small data files stored on your device, that are integral to optimising your browsing experience on our platform. Alongside this, we employ server-side sessions, a technique involving data storage that ensures your browsing session remains uninterrupted as you navigate our digital presence
▫ What types of cookies do we use?
a. Strictly Necessary and Session Cookies: These terms are used interchangeably to denote cookies essential for the fundamental functionality of our platform. They facilitate secure navigation, account access, and seamless transaction processing. These session-based cookies are temporary and are automatically deleted once your browser session concludes.
b. Functional Cookies: referring to cookies that enhance your experience by retaining preferences and choices. These cookies empower us to offer personalized functions and store information such as language preferences or prior selections.
c. Marketing / Third-Party Cookies: Originating from external advertising entities, marketing and third-party cookies assist in gathering data about your visited websites. This data aids in creating targeted advertising, allowing us to present content tailored to your interests
We prioritize the safeguarding of your privacy and assure you that no personal data is obtained from sessions or cookies without your explicit consent. Cookies may also be used for analytics and marketing purposes where you have provided consent. By continuing to use our platform, you acknowledge and consent to our use of cookies as detailed in this section.
▫ How to manage cookies:
You retain control over your cookie preferences. Most browsers automatically accept cookies, but you can adjust settings to receive notifications before cookies are stored or to reject all cookies. Keep in mind that disabling cookies may limit access to certain features of our platform.
Privacy policies of other websites:
Our privacy policy is exclusively applicable to our website. We maintain a presence on various social media platforms, which are listed below. When you engage with these platforms, we recommend reviewing their respective privacy policies. For payment processing, we utilize PayPal, and you can refer to their privacy policy provided below. Additionally, we incorporate third-party services, which are outlined in the following section along with links to their respective privacy policies.
▫ Presence on social media platforms
We use the following social media platforms for company presentation and communication (explicit reference is made to the following linked data protection declarations and opt-out options).
- Facebook (Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland):
- Privacy Policy: [https://www.facebook.com/about/privacy/]
- Opt-Out: (https://www.facebook.com/settings?tab=ads)
- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA):
- Privacy Policy and Opt-Out: (http://instagram.com/about/legal/privacy/)
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland):
- Privacy Policy: (https://www.linkedin.com/legal/privacy-policy)
- Opt-Out: (https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out)
These social media platforms may process personal data outside the EU; we refer to the above data protection declarations of the social media platforms. The respective social media platforms may create user profiles based on your usage behaviour and the resulting interests and actions on your part and store cookies on your computer in which your usage behaviour is stored. If you have an account on the respective social media platform and are logged in, your usage behaviour can even be stored regardless of the device. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests. We process the personal data exclusively for communication with you via the social media platform of your choice and for the optimization of ours and ensure that no interests on your part are affected which outweigh this legitimate interest on our part (Art. 6 I p. 1 f GDPR). If you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data also takes place based on this consent (Art. 6 I p. 1 a GDPR).
▫ We use Stripe as our payment processors, you can click on the link to their privacy policy below:
[https://stripe.com/it/privacy]
▫ Third-party services
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the responsible body for the data processing that occurs via this website has their basis outside of the European Economic Area and Switzerland, then the associated Google Analytics data processing is carried out by Google LLC. Google Ireland Limited and Google LLC. will hereinafter be referred to as “Google”.
Google Analytics uses “cookies”, which are text files saved on the site visitor’s computer, to help the website analyse their use of the site. The information generated by the cookie (including the truncated IP address) about the use of the website will normally be transmitted to and stored by Google.
Google Analytics is used exclusively with the extension "_anonymizeIp()" on this website. This extension ensures an anonymization of the IP address by truncation and excludes a direct personal reference. Via this extension, Google truncates the site visitor’s IP address within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional situations will the site visitor’s full IP address be transmitted to Google servers in the United States and truncated there. The IP address that is provided by the site visitor’s browser in using Google Analytics will not be merged by Google with other data from Google.
On behalf of the site operator, Google will use the information collected to evaluate the use of the website, to compile reports on website activity and to provide other website and internet-related services to the site operator (Art. 6 (1) (f) GDPR). The legitimate interest in data processing lies in the optimization of this website, the analysis of the use of the website, and the adaptation of the content. The interests of the users are adequately protected by the pseudonymization of their data.
Google LLC. has certified its compliance with the EU-U.S. Privacy Shield Framework and on that basis, they provide a guarantee to comply with European data protection law. The data sent and linked to the Google Analytics cookies, e.g., user IDs or advertising IDs will be automatically deleted after 50 months. The deletion of data whose retention period has been reached is done automatically once a month.
The website visitor may refuse the use of cookies by selecting the appropriate settings in their browser. The website visitor can also prevent Google from collecting information (including their IP address) via cookies and processing this information by downloading this browser plugin and installing it:
(http://tools.google.com/dlpage/gaoptout)
Further information concerning data processing and use by Google, the settings and deactivation possibilities can be found in the Google Privacy Policy:
(https://policies.google.com/privacy) as well as in the Google Ads Settings (https://adssettings.google.com/authenticated)
Use of Google Maps
This website uses Google Maps, a map service of Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). When using Google Maps, data about the use of the map functions by visitors to the website is also collected, processed, and used. No interests of users are affected here who outweigh this technical necessity of integrating the interactive map material (Art. 6 I p. 1 of GDPR). You can view Google's privacy policy at:(http://www.google.de/intl/de/policies/privacy/)
The additional usage instructions for Google Maps can be found at: (http://www.google.com/intl/de_en/help/terms_maps.html)
reCAPTCHA
We use the reCAPTCHA service provided by Google LLC (Google) to protect your submissions via internet submission forms on this site. This plugin checks if you are a person to prevent certain website functions from being (ab)used by spam bots (particularly comments). This plugin query includes the sending of the IP address and possibly other data required by Google for the Google reCAPTCHA service. For this purpose, your input will be communicated to and used by Google. However, your IP address is previously truncated by Google within member states of the European Union or in other states which are party to the agreement on the European Economic Area and is, as such, anonymized. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address provided by reCAPTCHA from your browser shall not be merged with any other data from Google.
This data collection is subject to the data protection regulations of Google (Google Inc.).
For more information about Google's privacy policy, please visit: (https://policies.google.com/privacy?hl=en)
By using the reCAPTCHA service, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
Meta Pixel
This website uses the Meta Pixel provided by Meta Platforms Inc.. The Meta Pixel is a tracking technology that allows us to measure the effectiveness of advertising campaigns on platforms such as Facebook and Instagram.
When you visit our website, the Meta Pixel may collect information about your interaction with the site, such as pages viewed, actions taken (for example form submissions or registrations), browser information, and device identifiers. This information helps us understand how users interact with our website after clicking on advertisements and enables us to deliver more relevant advertising to users.
The processing of this data takes place only with your consent in accordance with Art. 6 (1) (a) GDPR. The collected data may be transmitted to Meta servers, which may be located outside the European Economic Area. Meta processes the data according to its own privacy policy.
Further information can be found in Meta’s privacy policy:
https://www.facebook.com/privacy/policy/
Google Ads
This website uses conversion tracking and remarketing services provided by Google Ads, operated by Google Ireland Limited.
If you reach our website via a Google advertisement, a cookie may be stored on your device which enables us to analyze whether users perform certain actions on our website after clicking on an advertisement. This allows us to measure the effectiveness of our advertising campaigns and improve our marketing efforts.
Remarketing services may also be used to display relevant advertisements to users who have previously visited our website while browsing other websites within Google’s advertising network.
The processing of personal data in this context takes place only with your consent in accordance with Art. 6 (1) (a) GDPR.
Further information about how Google processes personal data can be found here:
https://policies.google.com/privacy
Data Breach Notification
In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, if required, affected individuals, in accordance with Articles 33 and 34 GDPR.
Changes to our privacy policy
Zoulou keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on June, 6th 2025.
How to contact us:
If you have any questions about Zoulou’s privacy policy, the data we hold on to, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at security@zoulou.eu
How to contact the appropriate authority:
Should you wish to report a complaint or if you feel that Our Company has not addressed your concern in a satisfactory manner, you may contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) Website: https://www.naih.hu/
We also cooperate with other EU supervisory authorities as necessary.