Privacy Policy

1. Controller & Contact

The data controller responsible for this website is:

Ali Makhloufi
Bergiusstr. 7, 40880 Ratingen, Germany
Email: [email protected]

2. Data We Collect

We collect the following data depending on how you use DarScout:

• Account registration: Email address and password (stored securely via Supabase Auth)
• Property listings: Title, description, location, contact details (WhatsApp, phone, email), photos and all other information you voluntarily submit
• Search alerts: Email address and search preferences you provide
• Contact form: Name, email address and message content
• Usage data: Browser type, IP address, pages visited — collected automatically via server logs

3. How We Use Your Data

• To display property listings on the platform
• To send search alert notifications when matching listings are posted
• To notify you when your listing is about to expire
• To allow you to manage your listings via your account
• To respond to contact form submissions
• To detect and prevent fraudulent or abusive listings

The legal basis for processing is Art. 6(1)(b) GDPR (contract performance) for account and listing data, and Art. 6(1)(f) GDPR (legitimate interests) for usage data and platform security.

4. Third-Party Services

DarScout uses the following third-party services:

• Supabase (supabase.com) — database, authentication and file storage. Data is stored on EU-based servers. Privacy Policy
• Google Maps API — map display and location search. Google may collect usage data. Privacy Policy
• Google Fonts — typography loaded from Google servers. Privacy Policy
• Brevo (Sendinblue) — used to send transactional emails (search alerts, expiry notifications). Privacy Policy
• open.er-api.com — exchange rate API for currency conversion. No personal data is transmitted.

5. Data Storage & Retention

• Property listings are automatically deleted after 14 days (or 30 days for registered users) unless renewed
• Account data is retained until you delete your account
• Search alerts remain active until you unsubscribe
• Contact form messages are retained for up to 12 months

To request deletion of your data, email us at [email protected].

6. Your Rights

Under the GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit processing of your data
• Portability — request your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the competent supervisory authority (in Germany: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW).

7. Cookies

DarScout does not use tracking cookies or advertising cookies. The only data stored in your browser is:

• Your authentication session token (stored in localStorage by Supabase, required for login functionality)

No consent banner is required as we do not use non-essential cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this