Privacy Policy

02Who we are

Punto is operated by Nekretnine 2.0 d.o.o., based in Ljubuški, Bosnia and Herzegovina ("Punto", "we", "us", "our"). We are the controller responsible for the personal data described in this policy.

You can reach us about any privacy question at the address in section 14.

03Information we collect

We only collect what we need to run Punto day to day. Depending on how you use the platform, this may include:

• Account information — such as your name, email address, phone number, and password (stored only in a hashed form).
• Advertiser profile information — details a professional advertiser adds to their public profile, such as business name, contact details, description, and logo.
• Property information — the details of a property an advertiser publishes, such as location, price, size, and description.
• Uploaded images — photos added to a property listing or a profile.
• Uploaded documents — files an advertiser attaches to a listing (for example, documents relating to a property for sale).
• Browser and device information — such as browser type and device characteristics.
• IP address.
• Preferred language.
• Country.
• Landing page — the first page you arrive on.
• Referrer — the site or link that brought you to Punto.
• UTM parameters — campaign tags in a link that tell us where a visit came from.
• Approximate location — only where you grant your browser's location permission (see section 12).

We do not intentionally collect sensitive personal data, and we ask that you not include it in free-text fields, images, or documents.

Punto.ba is not intended for persons under 18 years of age, and we do not knowingly collect children’s personal data. If we learn that we have collected a minor’s data without a proper basis, we will take the necessary and legally prescribed steps to delete it.

04How we use your information

We use your information to:

• create and manage your account and keep you signed in;
• publish and display property listings and advertiser profiles;
• operate core features such as search, maps, and enquiries;
• respond to your messages and enquiries;
• send you service-related messages (for example, email confirmation or important notices);
• understand how the platform is used so we can improve it;
• keep Punto secure and prevent fraud and abuse;
• meet our legal obligations.

We do not use your personal data to make automated decisions that produce legal or similarly significant effects about you.

05Legal basis for processing

We process personal data on one or more of these legal bases:

• Performance of a contract — to provide the service you asked for, such as running your account and publishing your listings.
• Consent — for things you opt into, such as approximate location and any marketing emails. You can withdraw consent at any time.
• Legitimate interests — to keep Punto secure, prevent abuse, and understand and improve how the platform is used, in a way that respects your rights.
• Legal obligation — where the law requires us to process or retain certain data.

06Sharing your information

We never sell your personal data.

We share information only where necessary to run Punto, and only with:

• Service providers who process data on our behalf under contract — such as our hosting, email delivery, media/file storage, error-monitoring, and product-analytics providers. They may act on our instructions only.
• A third-party AI provider, where an advertiser uses our optional AI writing assistance — the text submitted for assistance is processed to generate a suggestion (see section 11).
• Other users, but only the information a listing or profile is meant to show publicly (for example, a property's details and an advertiser's public contact information). Private account details are not shown publicly.
• Authorities, where we are legally required to disclose information.

Some of these providers may process data outside Bosnia and Herzegovina, including in the European Union. Where they do, we rely on appropriate safeguards for that transfer.

07Cookies

We use a small number of cookies that are necessary to make Punto work — for example, to keep you signed in securely across our site. These are essential to the service.

For product analytics we use PostHog, configured in a privacy-conscious way. We do not use Google Analytics, and we do not use advertising or cross-site tracking cookies.

08Data retention

We keep personal data only as long as we need it:

• Account and profile data — for as long as your account is active, and for a limited period afterwards.
• Listings, images, and documents — for as long as they are published, and for a limited period after removal.
• Enquiry and contact messages — for as long as needed to handle your request and keep a reasonable record.
• Analytics and technical logs — for a limited period.

When we no longer need data, we delete it or anonymise it. We may keep certain information longer where the law requires.

09Your rights

You have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• delete your data (the "right to be forgotten"), where applicable;
• restrict or object to certain processing;
• port your data — receive it in a portable format;
• withdraw consent at any time, where we rely on it.

To exercise any of these, contact us using the details in section 14. We will respond to your request without undue delay, and within 30 days at the latest. You also have the right to lodge a complaint with the Agency for Personal Data Protection in Bosnia and Herzegovina, or with your local supervisory authority.

10Security

We take protecting your data seriously. Connections to Punto are secured with HTTPS, passwords are stored only in hashed form, and access to personal data is restricted to those who need it. No system can be guaranteed perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.

If a personal data breach occurs that could pose a high risk to your rights, we will, in accordance with the applicable regulations, notify the competent Agency without undue delay and, where necessary, the affected users.

11AI-assisted content

Punto offers advertisers optional AI assistance to help them write:

• listing titles;
• listing descriptions;
• profile biographies.

When an advertiser uses this feature, the information they provide is sent to a third-party AI provider to generate a suggestion. The suggestion is only a draft: the advertiser remains responsible for reviewing, editing, and approving any AI-assisted content before it is published. Published content reflects the advertiser's own choices, not an automated decision by Punto.

12Location data

Some features, such as showing properties on a map, work better with your approximate location. We only access your approximate location if you grant your browser's location permission, and you can withdraw that permission at any time in your browser settings.

Separately, the location of a property shown on Punto is information the advertiser provides as part of the listing — it is not derived from your device.

13Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make a material change, we will update the "last updated" date and, where appropriate, let you know. Please check back occasionally to stay informed.

14Contact

If you have any questions about this Privacy Policy or how we handle your personal data, contact us at legal@punto.ba.