1. Controller
ARS Estate
Represented by Mendim Klimenta and Ermal Kelmendi
Pejë, Kosovo
Email: info@arsestate.com
Phone: +49 152 31874031
ARS Estate is responsible for this website and for the user accounts of the platform. Real estate companies use ARS Estate to present their projects and manage enquiries and sales. For client and sales data that a company records in its projects, that company is the controller; ARS Estate processes this data on its behalf. For questions about a specific project, please contact the company named there or reach us at the address above.
2. Visiting the website
The website is hosted by IONOS. When you open a page, the host processes technically necessary connection data, in particular your IP address, date and time of access, the page requested and browser information, in order to deliver the website and keep it secure. The font is served from our own server; no connection to Google or other font providers is made.
Your choice of language is stored locally in your browser under the key „ars-lang“. We do not use analytics or advertising cookies.
3. Demo request and early access
If you enter your email address on the website and request a demo, a form from our service provider HubSpot (HubSpot, Inc., USA) opens in a new tab with your address prefilled. In that form you can also provide your name, phone number and a message. HubSpot stores this information on our behalf so that we can contact you about ARS Estate. We only contact you about your request and the launch of ARS Estate. More information: HubSpot privacy policy.
4. The app and the platform
Enquiries: name, email address, phone number if provided, message, selected unit and offer details.
Sales management: authorised staff of a real estate company can record client contacts, budget, shortlists, reservations, sales, contract and payment details and the processing status. Changes are logged with user and time.
Company accounts: name, username, company, role, assigned projects, notification address if provided, and session and device information. Passwords are stored only as a hash.
Projects: images, floor plans and 3D models uploaded by the operator or the company.
Security: IP addresses are processed to deliver the service and to limit abusive requests. Hosting providers keep technical access and error logs.
5. Purposes and legal bases
We process data to provide the website and platform, to answer property enquiries and demo requests, to handle reservations and sales and to keep access secure. Where the GDPR applies, the legal bases are: your consent (Art. 6(1)(a) GDPR), for example for enquiries via the client form; the performance of a contract or pre-contractual steps (Art. 6(1)(b)), for example for demo requests and company accounts; legal obligations (Art. 6(1)(c)); and our legitimate interest in a secure and reliable service (Art. 6(1)(f)). In Kosovo, processing is based on the Law on Protection of Personal Data.
6. Recipients and service providers
Enquiries are visible only to authorised accounts of the assigned project and to the operator. Public project links show project and offer information, never other clients' contact details, enquiries or reservations.
We use the following service providers, who process data on our behalf:
IONOS – website hosting
Railway – hosting of the app server
HubSpot – demo requests and contact management
an email provider – notifications about new enquiries
If a company activates them, contact and offer data are also transferred to the CRM it has connected (for example HubSpot or Salesforce), and floor plan images and image instructions are sent to OpenAI for AI visualisation.
7. Transfers outside the EU
ARS Estate is based in Kosovo, and some service providers process data in the USA. Where the GDPR applies, such transfers are based on an adequacy decision or on appropriate safeguards such as the EU Standard Contractual Clauses (Art. 44 et seq. GDPR).
8. Retention
We store personal data only for as long as is necessary for the purposes described or as required by statutory retention obligations. Demo requests are deleted when the request has been dealt with and no business relationship has arisen, or when you ask us to delete them. Account data is deleted when the account is closed. Client and sales data is deleted on behalf of the responsible company. Server backups are overwritten on a rolling basis.
9. Storage on your device and permissions
The app stores settings, project copies and sign-in data locally on your device. Access to the camera or photos is only requested when you use the corresponding feature and can be changed at any time in your device settings. Public project links do not set analytics or advertising cookies.
10. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing. You can withdraw consent at any time with effect for the future. To exercise your rights, write to info@arsestate.com. You also have the right to lodge a complaint with a supervisory authority – in Kosovo the Information and Privacy Agency, in the EU the data protection authority of your place of residence.
11. Changes
We update this privacy policy when our services or the law change. The current version is always available on this page.