Cookie Policy
Last updated: August 2026 · Consent mechanism version: 2026.08
1. General
This Cookie Policy explains the use of cookies and other comparable technologies on the DomNeed.si website (the “website”, “portal” or “DomNeed”).
The operator of the website is:
Nicole Daniel Svetovanje s.p., Rakuševa ulica 8, 1000 Ljubljana, Slovenija
Company registration number: 7381867000 · Tax number: 74738518 · VAT ID: SI74738518 · E-mail: support@domneed.si
For any questions concerning cookies, privacy or the processing of personal data, users may contact the operator at the e-mail address above.
This Policy forms an integral part of the privacy framework of DomNeed.si and must be read together with the Privacy Policy and, where applicable, the Terms of Use.
2. Legal basis
The use of cookies and other technologies that store information in, or access information already stored in, the user's terminal equipment is carried out in accordance with the applicable law of the Republic of Slovenia and the European Union, in particular:
- the Electronic Communications Act (ZEKom-2);
- Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
- Directive 2002/58/EC on privacy and electronic communications;
- other applicable rules on electronic communications and data protection.
2.1. Prior consent
As a rule, prior consent of the user is required in order to store information in the user's terminal equipment or to access information already stored there.
Consent is not required where the technology is strictly necessary solely for carrying out the transmission of a communication over an electronic communications network, or for providing an information society service explicitly requested by the user.
3. What cookies are
Cookies are small text files or data records that a website may store on the user's device, such as a computer, tablet or mobile phone. They allow the website to recognise the device for a certain period or to remember information about the visit.
Cookies and comparable technologies may be used in particular to:
- enable the correct operation of the website;
- enable sign-in to a user account and maintain the session;
- ensure security and prevent abuse;
- remember user preferences and the selected language;
- store the user's cookie choice;
- analyse the use of the website, where such a service is actually used;
- display or measure advertising content, where such services are actually used.
4. Other comparable technologies
For the purposes of this Policy, the term “cookies” also covers other comparable technologies performing a similar function, in particular local storage, session storage, online identifiers, device identifiers, pixels, tags and SDKs.
On DomNeed.si, data is currently stored in the user's terminal equipment predominantly through local storage rather than classic cookies. The use of such technologies is subject to the same consent rules where required by law.
5. First-party and third-party technologies
5.1. First-party technologies are installed or managed directly by DomNeed.si. They are used for the technical operation of the portal, sign-in, security, language settings and storage of consent.
5.2. Third-party technologies are installed or managed by external service providers integrated into the website. DomNeed does not list services in this Policy that it does not actually use.
As of the last update, DomNeed.si uses the following external providers: Lovable Cloud (Supabase) for hosting, authentication, the database and photo storage; Google Maps (Google Ireland Ltd.) for maps and place search; Google Fonts and unpkg (CDN) for typography and stylesheets; Cloudflare Turnstile for security verification and bot protection, loaded only when a challenge-protected action requires it. In addition, SumUp acts as an external payment provider reached only in its own hosted payment environment when the user initiates a payment (see section 16); because it is not loaded inside DomNeed.si pages, it is not part of the inventory table of technologies loaded on the website. No analytics, advertising or social media plugins are used.
6.1. Strictly necessary cookies
Strictly necessary technologies are those without which the website, or a service explicitly requested by the user, cannot function correctly. They are used in particular to:
- establish and maintain the user session;
- sign in and authenticate the user;
- prevent unauthorised access and protect the user account;
- prevent abuse and attacks;
- store the user's cookie choice;
- ensure the correct operation of forms and technical routing of requests;
- display the property map requested by the user;
- complete a payment procedure initiated by the user.
Such technologies generally do not require prior consent where the statutory conditions are met. They cannot be switched off through the consent management tool, as this would prevent the basic operation of the website or the requested function.
6.2. Functional and preference cookies
Functional technologies allow the website to remember certain user choices, such as the selected language, user preferences, content display mode and interface settings.
On DomNeed.si this category currently contains only the record of the selected language (domneed.locale), which is stored only once the user actually selects a language, i.e. on the basis of a service explicitly requested by the user. The user may switch this category off at any time in cookie settings; the record is then deleted and the language is not retained between visits.
6.3. Analytics cookies
Analytics technologies allow the collection of information about the number of visits, pages viewed, time of use, navigation, features used, technical errors and the general performance of parts of the portal.
As of the last update, DomNeed.si uses no analytics tool. The category is prepared in the consent mechanism for possible future use and remains inactive. Non-essential analytics will not be installed before valid consent has been obtained.
6.4. Advertising and marketing cookies
Advertising technologies may be used to measure advertising effectiveness, limit ad repetition, measure conversions, build audience groups and personalise advertising content.
DomNeed.si currently uses no such technologies and no advertising pixels or social media plugins are installed. The category does not create the impression that marketing tracking actually takes place; should it be introduced, it will only be activated after prior consent.
7. Obtaining consent
On the first visit, a consent management mechanism is displayed with a clear and comprehensible choice. The basic options are: “Accept all”, “Necessary only” and “Cookie settings”.
The option to reject non-essential technologies is neither hidden nor harder to access than acceptance. Continued browsing does not in itself constitute valid consent.
8. Requirements for valid consent
Where processing is based on consent, that consent must be:
- freely given;
- specific;
- informed;
- unambiguous;
- obtained before the technology is activated, where prior consent is required by law.
Pre-ticked boxes are not used: all optional categories are switched off by default. DomNeed keeps a technical record of consent so that it can demonstrate that consent was properly obtained.
9. Refusing cookies
Refusing non-essential technologies does not prevent access to the core content and functions of DomNeed.si, including property search, viewing listings, the map, signing in and publishing a listing.
If the preferences category is refused, the selected language is not retained between visits and the default Slovenian version is displayed on each visit.
10. Changing or withdrawing consent
The user may change or withdraw their decision at any time. A “Cookie settings” link is permanently available in the website footer, and a persistent button for opening cookie settings is available in the bottom-right corner of every page.
Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. After withdrawal, further use of the relevant non-essential technologies ceases and stored records of those categories are deleted from the browser as far as technically feasible.
11. Record of consent
DomNeed keeps a technical record of the user's cookie choice. The record is stored locally in the user's browser (the domneed.consent entry) and contains:
- a consent identifier (randomly generated string);
- the date and time of the choice;
- the selected categories;
- the source of the choice (banner or settings);
- the version of the consent mechanism and the display language.
The record contains no name, e-mail address or other direct identifiers and is not used for other, incompatible purposes.
12. Validity period of consent
Consent is not unlimited. A stored choice is valid for a maximum of 180 days, after which the user is asked again. DomNeed may also ask for a new choice:
- if the list of technologies used changes materially;
- if the purposes of use change;
- if the provider of a service changes;
- if, for technical reasons, the previous choice can no longer be reliably associated with the user.
Purely linguistic or editorial corrections do not constitute a new version and do not trigger a renewed request. Changing the website language does not invalidate consent already given.
13. List of technologies actually in use
The list below reflects the actual technical configuration of DomNeed.si. Analytics and advertising tools are not currently installed and are therefore not listed. Should they be introduced, they will be added to the list and included in the consent mechanism before activation.
↔ List of technologies actually in use
| Name | Provider | Purpose | Category | Type | Retention | Origin | Consent |
|---|---|---|---|---|---|---|---|
| Sign-in session sb-<project>-auth-token | Lovable Cloud (Supabase) | User sign-in and authentication, keeping you signed in, account protection and access to My Account and the Admin Dashboard. | Strictly necessary | localStorage | Until sign-out; the access token is refreshed (typically 1 hour). | First party | Not required |
| Cookie consent record domneed.consent | DomNeed.si | Stores your category selection, the consent identifier, the date and the version so the banner is not shown on every visit and compliance can be demonstrated. | Strictly necessary | localStorage | 180 days | First party | Not required |
| Selected language domneed.locale | DomNeed.si | Remembers the interface language you selected (Slovenian, English, German, Russian). | Preferences | localStorage | Until deleted in your browser | First party | Not required |
| Map tiles maps.googleapis.com, maps.gstatic.com | Google Maps (Google Ireland Ltd.) | Displays the map and the location of a property. The provider sets no cookies; when the map loads, your IP address and technical request data are transmitted. | Strictly necessary | Request to an external server | Duration of the request only; nothing is stored on your device | Third party | Not required |
| Fonts and libraries (CDN) fonts.googleapis.com, fonts.gstatic.com, unpkg.com | Google Fonts, unpkg (Cloudflare) | Loads typography and map stylesheets required for correct rendering of the website. No cookies are set; the IP address of the request is transmitted. | Strictly necessary | Request to an external server | Duration of the request only; browser caching | Third party | Not required |
| Bot protection (Cloudflare Turnstile) challenges.cloudflare.com | Cloudflare | Security verification, bot protection and abuse prevention. Loaded only on demand when a challenge-protected action requires it (e.g. applicable authentication, contact reveal, report a listing). Technical request information, including IP address, user agent and challenge/security telemetry, may be sent to Cloudflare. Any cookies or storage used in that environment are controlled by Cloudflare; DomNeed application code does not itself write a Turnstile cookie. | Strictly necessary | Request to an external server | Only while a challenge runs; any storage is determined by Cloudflare | Third party | Not required |
| Pending legal/sign-up step domneed.legal.pending | DomNeed.si | Temporary state for completing a required legal or sign-up step (acceptance of documents) so the flow does not have to be restarted. | Strictly necessary | localStorage | Until the flow is completed or deleted in your browser | First party | Not required |
| Sign-up draft domneed.signup.draft | DomNeed.si | Temporary storage of sign-up form input so registration can be continued. | Strictly necessary | localStorage | Until sign-up is completed or deleted in your browser | First party | Not required |
| Listing draft domneed:listing-draft:<id> | DomNeed.si | Temporary storage of an unsaved listing during the session (crash safety against reloads or errors). | Strictly necessary | sessionStorage | Until the end of the tab session | First party | Not required |
| Last search domneed:last-search-url | DomNeed.si | Restoring the previous search results page when you navigate back from a listing. | Strictly necessary | sessionStorage | Until the end of the tab session | First party | Not required |
| Last search scroll position domneed:last-search-scroll | DomNeed.si | Restoring the scroll position on the search results page during the tab session. | Strictly necessary | sessionStorage | Until the end of the tab session | First party | Not required |
14. Maps and location services
To display property locations, to enable map search and to suggest places, DomNeed.si uses Google Maps and Google Places (Google Ireland Ltd.).
The tile provider sets no cookies and stores no data on the user's device. When the map loads, the user's IP address and technical request data (browser type, requested tiles) are transmitted to the provider, which is strictly necessary to display the map requested by the user.
As this is a function explicitly requested by the user and no data is stored on the device, the map is not made conditional on consent and is not unnecessarily blocked. Should a mapping or geocoding provider that sets cookies or performs tracking be introduced in the future, it will be integrated into the consent mechanism and a placeholder will be shown until consent is given.
15. Sign-in and user account
For registered users, DomNeed uses strictly necessary technologies to verify sign-in, maintain the user session, protect the account, prevent authentication abuse and apply user profile settings.
The authentication token (sb-<project>-auth-token) is stored in browser local storage via the Lovable Cloud (Supabase) platform and is required for access to My Account, my listings, favourites, messages and the Admin Dashboard. These technologies are not used for analytics or marketing purposes and are not classified in such categories.
16. Cookies and payments
Publishing an active listing on DomNeed.si is a paid service. Billing cycles and items are kept in DomNeed's own infrastructure, while payment execution uses the external payment provider SumUp.
No payment-card fields are embedded on DomNeed.si. Card details are entered in SumUp's hosted checkout environment, to which the user is redirected after initiating a payment. SumUp may use its own cookies or other storage on its own domain/environment in accordance with its own rules; these are not DomNeed first-party cookies and DomNeed's cookie-consent interface does not control them.
DomNeed does not store the full payment-card number, CVV/CVC or PIN. There is no automatic recurring card billing. Technologies strictly necessary for secure payment execution, fraud prevention and transaction verification are treated as strictly necessary and not as advertising technologies; any additional analytics or marketing tools of the provider are treated separately.
17. Analytics tools
DomNeed.si currently uses neither Google Analytics nor any comparable analytics service. Before any such service is introduced, the operator verifies what data it collects, which identifiers it uses, their duration, the recipients of the data, the place of processing, any transfer outside the European Economic Area, the legal mechanism for such transfer and the available privacy settings.
Any analytics system is configured so that non-essential analytics is not activated before the required consent has been obtained.
18. Transfer of data to third parties
Where the use of a technology involves the processing of personal data by a third party, such processing is carried out in accordance with applicable data protection rules. Further information on categories of recipients, legal bases, retention periods, possible transfers to third countries and data subject rights is set out in the DomNeed.si Privacy Policy.
19. Transfers outside the European Economic Area
Individual external providers may process data outside the European Economic Area. Where such processing involves a transfer of personal data to a third country, an appropriate mechanism permitted by the GDPR is used, in particular an adequacy decision of the European Commission or standard contractual clauses.
The data infrastructure of DomNeed.si (Lovable Cloud / Supabase) is hosted within the European Union. Requests to map tile and CDN providers may be served through global content delivery networks, in which case the IP address of the request is transmitted.
20. Browser settings
Users may also manage cookies and website data through their browser settings: reviewing, deleting or blocking stored data, including third-party data.
Blocking everything may affect the correct operation of some DomNeed.si functions, in particular sign-in, the user account and the storage of consent. Browser settings do not replace DomNeed's obligation to obtain valid consent for non-essential technologies.
21. Security
DomNeed applies reasonable technical and organisational measures to protect information related to the use of the website, in particular access restrictions, authentication, encrypted transmission (HTTPS), database access rules, control of user rights and infrastructure protection.
No transmission or storage technology guarantees complete security; DomNeed therefore cannot guarantee absolute security.
22. Multilingualism
Information on cookies and the consent management mechanism are available in Slovenian, English, German and Russian. The version corresponding to the currently selected website language is displayed. In the event of discrepancies between language versions, the Slovenian version prevails.
23. Relationship with the Privacy Policy
This Policy primarily governs the use of technologies in the user's terminal equipment, whereas the DomNeed.si Privacy Policy governs in more detail the processing of personal data, legal bases, retention periods and data subject rights.
24. Changes to this Policy
DomNeed reserves the right to amend this Policy due to changes in legislation, regulatory guidance, technical infrastructure, the introduction of new functionality, changes of providers or changes to the technologies actually used.
Each new version is published on DomNeed.si with the date of the last update. If a change affects the validity of consent already obtained, or if the purposes change materially, a new choice is obtained from the user.
25. Rights of the individual
Where data obtained through cookies or similar technologies constitutes personal data, the individual has the rights provided by the GDPR, including the right of access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent. Details are set out in the DomNeed.si Privacy Policy.
26. Supervisory authority
Individuals have the right to lodge a complaint with the competent supervisory authority. In the Republic of Slovenia this is the Information Commissioner of the Republic of Slovenia. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
27. Contact
For any questions, requests or comments regarding the use of cookies or the processing of personal data, users may contact:
Nicole Daniel Svetovanje s.p., Rakuševa ulica 8, 1000 Ljubljana, Slovenija
Company registration number: 7381867000 · Tax number: 74738518 · VAT ID: SI74738518 · E-mail: support@domneed.si
28. Final provision
This Policy applies to the DomNeed.si website and to the technologies actually integrated into its operation. If new analytics, advertising, mapping, payment or other external services are introduced in the future, the operator will assess their privacy impact, update the list of technologies and, where required, obtain valid consent before activation.