Your data
Privacy policy
What personal data Vozi collects, why, how long we keep it and what your rights are.
Last updated: October 7, 2026
Who is responsible
The controller of your personal data is Vozi d.o.o., Dunajska cesta 100, 1000 Ljubljana, Slovenia.
For anything about your data, write to info@vozi.si.
What we collect and why
We only collect what the site needs to work. We don't sell personal data, show ads or use analytics or tracking services.
| What | Data | Why | Legal basis | How long |
|---|---|---|---|---|
| Account | Name, email, phone, location, country and password (stored only as a one-way hash). | To run your account, show your listings and let buyers reach you. | Contract | Until your account is deleted. |
| Car listings | Car details, price, description and photos. | To publish your car on the site. | Contract | While the car is listed. Deleted listings are hidden from everyone; we erase them for good on request. |
| Messages to sellers | Your name, email, phone and message. | To pass your question on to the seller. | Your request (steps before a contract) | As long as the listing exists, or until you ask us to delete them. |
| Purchases and sales | Buyer, seller, car, price and the commission. | To reserve the car, put buyer and seller in touch and charge the commission. | Contract and legal obligation | 10 years, as tax and accounting law requires. |
| Payments and subscriptions | Amount, payment method, status and the payment provider's reference. Never your card or PayPal details. | To take payments, renew subscriptions until you cancel them, and refund. | Contract and legal obligation | 10 years, as tax and accounting law requires. |
| Wishlist, saved searches and alerts | The cars and searches you saved and the alerts we sent you. | To show your wishlist and send the alerts you asked for. | Contract | Until you remove them or your account is deleted. |
| Visitor statistics | A random visitor id, which cars it viewed and when. No name, no IP address. | To show view counts and who is watching a car right now, and to keep a wishlist without an account. | Legitimate interest | Views are kept as statistics; "watching now" lasts 40 seconds. |
| Security | IP address and browser in your login session; email and IP address of failed logins. | To keep you logged in and stop password guessing. | Legitimate interest | The session ends 2 hours after your last visit; failed logins are forgotten after 1 minute. |
Legal bases under the GDPR: contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c); legitimate interest, Art. 6(1)(f).
Who sees your data
- EveryoneYour listings, with the location you entered, are public.
- Buyers who contact youWhen a visitor sends you a message through "Contact seller", they see your name, phone and email.
- Buyer and seller of a carWhen a car is reserved, the buyer and the seller get each other's name, email and phone to arrange the handover.
- Mollie B.V., AmsterdamOur payment provider. It receives your name, email and the payment. Card and PayPal details go straight to Mollie, never to us. Mollie's own privacy statement also applies.
- Our hosting and email providersThey store the site and send emails (such as password resets) on our behalf, under a data processing agreement.
- AuthoritiesOnly when the law requires it.
Your data is processed in the European Union.
Your rights
- See what data we have about you and get a copy of it.
- Correct it. Most of it you can change yourself on your account page.
- Have it deleted, including your whole account.
- Restrict or object to how we use it.
- Get the data you gave us in a machine-readable format.
- Complain to the Information Commissioner of the Republic of Slovenia (Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si) or the data protection authority in your country.
To use a right, write to info@vozi.si from the email address of your account. We answer within one month and may ask you to confirm it's you.
When an account is deleted, we keep only what the law requires (payments and sales) until the legal period ends.
Security
Passwords are stored only as a one-way hash, connections are encrypted, payments go through Mollie, and every form is protected against forgery. Logging in is limited to 5 attempts a minute.
Cookies
We only use cookies the site needs to work. The details are in our Cookie policy.
Children and changes
Vozi is not meant for children under 15, and only adults can buy or sell a car.
If we change this policy, we update the date at the top. We tell account holders about important changes before they apply.