This Privacy Policy explains how Dimitar Petrov, operating from Sofia, Bulgaria ("Umno", "we", "us" or "our"), collects, uses, stores and protects personal data when you use the Umno Property Deal Checker website and related services.
Contact:
Dimitar Petrov, Sofia 1618, Bulgaria
umnoestate@gmail.com
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Bulgarian legislation.
The data controller is Dimitar Petrov, Sofia 1618, Bulgaria (umnoestate@gmail.com). As an individual operating from Bulgaria, the operator is personally responsible for data-protection compliance.
When you access the Service, we may process: IP address; browser type and version; operating-system information; date and time of requests; usage and security logs; and a device fingerprint (see section 3.2).
To enforce the daily free analysis limit and prevent abuse, the Service uses FingerprintJS (open-source version) — a client-side library that generates a technical identifier from browser characteristics (screen properties, installed fonts, graphics rendering and other device signals). This identifier is used solely to enforce the one-free-report-per-day limit.
The fingerprint identifier is processed in temporary server memory only and is not stored in a persistent database. It is not used for behavioural tracking, advertising or profiling. The open-source version of FingerprintJS operates entirely locally and does not transmit data to Fingerprint.com or any third-party fingerprinting service.
When you submit a property listing URL, we process the URL and the listing information needed to provide the requested analysis. This information is obtained in one of the following ways:
(a) Automatic retrieval. At your request, our server retrieves the publicly accessible listing page once. Before the page text is analysed, e-mail addresses and telephone numbers are automatically removed. The retrieved page content is kept in temporary server memory for up to 10 minutes, so that the page does not need to be retrieved again for the same request, and is then discarded. Where a portal is known not to allow automatic access, no retrieval is attempted.
(b) Screenshots. If the listing page cannot be retrieved automatically, you may upload up to three screenshots of the listing. Screenshots are reduced in size in your browser before upload, processed in temporary server memory only for the duration of your request, and transmitted to Anthropic (see section 6) so that the listing information can be read. We do not write screenshots to disk, include them in the report or retain them after the analysis has been generated.
(c) Details you enter. Alternatively, you may enter the asking price, size and town or area of the property yourself.
Listing pages and screenshots may incidentally contain personal data of third parties, such as the name or contact details of an agent or seller. We do not seek this information, and the analysis is instructed not to reproduce contact details. Please crop out personal information that is not needed for the analysis, and do not submit sensitive personal data about yourself or other people.
If you provide additional context with your property URL, we process that information to make the analysis more relevant.
Generated reports are currently stored in temporary server memory and expire automatically after 48 hours. They are not currently stored in a persistent database. Umno may introduce persistent report storage in the future; if so, this Privacy Policy will be updated before such storage is activated, and reports may in that case be retained for up to three months.
If you purchase a report or a report pack, the associated report key may be stored in your browser's local storage under the key pdc_premium_key. This allows access across sessions on the same device without logging in. You can remove this data at any time by clearing your browser's local storage.
Report keys are generated for, and linked to, the Stripe payment for which they were issued. So that keys keep working when our servers restart, the following is stored as metadata of that payment with Stripe: a random secret part of the key, the number of reports included and used, the expiry date, the identifier of the report unlocked with the purchase, and whether the key has been e-mailed. Report contents and listing information are not stored with Stripe.
After a purchase, we send the report key to the e-mail address you entered at checkout, using our e-mail service provider Resend.
Payments are processed by Stripe Technologies Europe, Limited. We do not store full payment card numbers or card security credentials. We may receive and retain limited transaction information (transaction identifier, amount, currency, payment status, Stripe session reference) for managing purchases, providing support and fulfilling accounting obligations.
The Service does not currently use Google Analytics or other third-party analytics tools. If analytics are introduced in the future, this Privacy Policy will be updated before any such tool is activated and the required consent mechanism will be implemented.
Performance of a contract (Article 6(1)(b) GDPR): Information necessary to provide the Service, including property URLs, listing information retrieved at your request, screenshots and listing details you provide, optional context and transaction information.
Legitimate interests (Article 6(1)(f) GDPR): Technical and security information where necessary for preventing abuse and circumvention of the free daily limit (including device fingerprinting), securing the Service, preventing fraud and defending legal claims; and personal data of third parties that may incidentally appear in listing pages or screenshots, to the limited extent necessary to provide the requested analysis. We have assessed that these interests are not overridden by users' rights, given the limited scope of processing and absence of profiling purposes.
Legal obligation (Article 6(1)(c) GDPR): Where necessary to comply with accounting, tax, consumer-protection or other legal obligations.
The Service uses AI technology provided by Anthropic, PBC, to analyse property listing information. When you request an analysis, the property URL, the listing information obtained under section 3.3 (retrieved page text, screenshots or details you entered) and any optional context are transmitted to Anthropic's API to generate the requested analysis.
We do not use your submitted information to train our own AI models. Anthropic confirms that API inputs and outputs are not used to train its models.
Information transmitted to Anthropic via the API may be retained by Anthropic for up to 7 days for safety and security purposes, after which it is deleted. For current details, see Anthropic's Privacy Policy at anthropic.com/privacy.
Anthropic acts as a data processor on our behalf under its Data Processing Addendum (incorporated into Anthropic's Commercial Terms of Service), which includes Standard Contractual Clauses for international data transfers. See anthropic.com/legal/data-processing-addendum for current details.
We do not sell your personal data.
Some providers process personal data outside the European Economic Area, including in the United States (Anthropic, Render, Resend). Where personal data is transferred outside the EEA, we use an appropriate GDPR transfer mechanism, which may include the EU–US Data Privacy Framework (where the recipient is certified) or Standard Contractual Clauses approved by the European Commission. Please verify current transfer mechanisms with each provider's documentation.
We use reasonable technical and organisational measures to protect personal data. No internet-based service can guarantee absolute security. If we become aware of a breach requiring notification under applicable law, we will take the legally required steps.
Subject to applicable conditions, you may have the right to: access your personal data; request correction; request deletion; request restriction of processing; object to processing based on legitimate interests; request data portability; withdraw consent; and lodge a complaint with a supervisory authority.
To exercise your rights, contact: umnoestate@gmail.com. We will respond within the timeframe required by applicable law (generally one month under GDPR).
If you believe your personal data has been processed unlawfully, you may lodge a complaint with:
Commission for Personal Data Protection (КЗЛД / CPDP)
2 Prof. Tsvetan Lazarov Blvd., Sofia, Bulgaria
www.cpdp.bg
You may also have the right to lodge a complaint with the supervisory authority in the EU Member State of your habitual residence or place of the alleged infringement.
The Service uses automated AI processing to generate property-analysis content. The Service does not make decisions producing legal or similarly significant effects on individuals solely through automated processing. The AI output is decision-support information about a property, not a decision about the user's rights or eligibility.
The Service is intended for persons aged 18 or older. We do not knowingly provide the Service to children under 18.
Umno has a page on Facebook and a company page on LinkedIn, where we share updates for property buyers in Spain, Portugal and Greece. Our website only links to these pages. It contains no social media plug-ins, buttons or embedded posts, so visiting our website sends no data to Meta or LinkedIn. They process data only if you follow a link and open their website.
When you visit or interact with our pages, Meta Platforms Ireland Limited and LinkedIn Ireland Unlimited Company process your personal data under their own privacy policies. For the page statistics they provide to us ("Page Insights"), we are joint controllers with them under Article 26 GDPR:
We receive only aggregated statistics, such as the number of followers and how our posts perform, and cannot identify individual visitors from them. If you message us or comment on our pages, we see your profile name and what you write, and we use it to reply. Our legal basis is our legitimate interest in presenting Umno and communicating with people who contact us there (Article 6(1)(f) GDPR).
You can exercise your rights regarding Page Insights directly with Meta or LinkedIn, or write to us and we will forward your request. For their own processing, see the Meta Privacy Policy and the LinkedIn Privacy Policy.
We may update this Privacy Policy from time to time. The updated version will be published on the website with a revised "Last updated" date.
Dimitar Petrov
Sofia 1618, Bulgaria
umnoestate@gmail.com