CRECCommercial Real Estate Catalog

Commercial real estate catalog on the map

Privacy Policy

How CREC obtains, uses and protects personal data.

Version dated 4 October 2026.

1. General provisions

This Policy explains which personal data may be processed when CREC is used and why that data is needed.

The CREC administration organises data processing for the operation, development, support and protection of the service.

2. Data that may be processed

The amount of data depends on the CREC functionality used by a person.

  • Account data: phone number, name, email and company when provided, together with a protected representation of the password.
  • Listing data: address, coordinates, property characteristics, description, price, photographs, contact details and authorship.
  • Interaction data: saved properties, contact openings, messages, requests, reports and listing actions.
  • Technical data required for authentication, security, error diagnostics and operation of the service.
  • Location data when a user has allowed the browser to use it for nearby search.
  • Analytics events associated with use of the map, filters and other catalog functionality.

3. Sources of data

Data may be provided directly by a user, generated while CREC is used or received with listing information processed by the CREC administration.

A user who adds another person’s data must have a lawful basis for using and publishing it.

4. Purposes of processing

Data is used only to the extent required for CREC to operate.

  • Creating and protecting user accounts.
  • Publishing, finding, saving and managing listings.
  • Opening contacts and enabling communication between users and the CREC administration.
  • Checking information, handling reports and moderation.
  • Providing partner and administrator access according to assigned roles.
  • Security, abuse prevention and technical diagnostics.
  • Analysing service usage and improving the catalog.
  • Compliance with lawful obligations and protection of rights in disputes.

5. Who may access data

A listing author’s contact details may be shown to users who open them through the designated CREC functionality.

CREC administrators, managers and partners may access data only according to their roles and work responsibilities.

The service may use hosting, database, file-storage and other technical providers. They receive only the access needed to provide the relevant services.

Data may also be disclosed where directly required by law.

6. Data retention

Data is retained for the period required to operate accounts, the catalog, communications and security and to comply with lawful obligations.

Listings removed from active display may remain archived for change history, analytics, duplicate prevention, request handling and abuse prevention.

The retention period may depend on the type of data, processing purpose and unresolved requests or disputes.

7. Cookies and local storage

CREC may use technically necessary cookies and browser local storage for authentication, language preference, session maintenance and stable operation of functionality.

With your consent, CREC uses Google Ads to assess the effectiveness of its own advertising campaigns and measure successful registrations. The Google advertising tag loads only after advertising measurement is allowed and may use cookies.

Google may receive a successful-registration event, advertising click identifiers, information about the page and referral source, and technical request data, including your IP address and browser information.

CREC does not send Google your phone number, password, CREC account identifier or registration-form contents as part of this advertising measurement.

With consent, CREC also stores advertising-source parameters in your browser, including UTM parameters and advertising click identifiers. The stored source is used for a period of up to 30 days to analyse catalog actions, including contact openings. Without permission, the advertising source is not added to new internal analytics events.

Your choice is stored in your browser. You can change or withdraw it through the “Cookie settings” button by selecting “Decline”. Declining does not prevent use of CREC’s core functionality. Withdrawing consent does not change events already sent.

CREC does not use advertising cookies to display third-party advertising on the site.

8. Data protection

CREC applies organisational and technical measures to restrict access, protect accounts and reduce the risk of loss, alteration or unlawful use of data.

No transmission or storage method can guarantee absolute security, so users must also protect their passwords and devices.

9. User rights

A user may request access to their data, correction, updating, restriction of processing or deletion where there is no lawful basis for continued retention.

A user may also report contact details or property information that has been published without a proper basis.

Some data may be retained after a request where required for security, protection of rights, compliance with lawful obligations or maintenance of an appropriate transaction history.

10. Policy updates

This Policy may be updated as CREC develops, its functionality changes or legal requirements change.

The current version is published on this page with its effective date.

Google’s data processing: Google Privacy Policy.

Personal data requests may be submitted through the Contacts page.