Privacy Policy
Privacy Policy
1. General Provisions and Operator Information
1.1. This Privacy Policy applies to the website makan. az, available at https://makan. az.
1.2. The operator and owner of the Service is: Operator / Administration: makan. az Legal entity / Individual entrepreneur: Ilgar Z. K. VÖEN / Tax Identification Number: 1702404502 Legal address: Baku, Azerbaijan Ganja ave 67/12 Contact email: info@makan. az
1.3. The User may contact the Administration regarding any privacy, personal data, account, advertisement, or deletion request by sending an email to: info@makan. az
1.4. This Privacy Policy becomes effective from: Effective date: 12.05.2025
1.5. By using the Service, registering an account, placing an advertisement, filling out any form, subscribing to messages, contacting the Administration, or continuing to use the website, the User confirms that they have read, understood, and agreed to this Privacy Policy.
2. What Data We Collect
2.1. The Service may collect personal data provided directly by the User, including but not limited to:
name and surname
phone number
email address
password or authentication data
city, region, location, or address
advertisement information
property details
photographs, descriptions, prices, and other listing content
company or agency information
communication history with the Administration
payment-related information where applicable.
2.2. When a User places an advertisement, the Service may collect and process information related to the advertised property, including:
property type
sale or rent price
location
description
photos
contact details
ownership or agency-related information if provided by the User.
2.3. The Service may automatically collect technical information when the User accesses or uses the website, including:
IP address
browser type
device type
operating system
pages visited
date and time of access
referral source
cookies and similar technologies
approximate location based on technical data
security logs and activity logs.
2.4. If the User logs in through social networks or third-party authentication services, the Service may receive information from such services depending on the User’s settings and consent.
2.5. The Service does not intentionally collect or process sensitive personal data such as:
racial or ethnic origin
political opinions
religious or philosophical beliefs
trade union membership
criminal conviction information
health information
sexual life information
biometric data
genetic data.
2.6. The User must not publish sensitive personal data in advertisements, descriptions, comments, messages, or other public fields of the Service.
3. Publicly Visible Data in Advertisements
3.1. The User understands and agrees that when they publish an advertisement on makan. az, certain information may become publicly visible to other Users and visitors of the Service.
3.2. Publicly visible information may include:
name or contact name
phone number
property location
advertisement description
price
property photos
agency or company name
other information voluntarily provided by the User in the advertisement.
3.3. The User is responsible for ensuring that any information published in an advertisement is accurate, lawful, and does not violate the rights of third parties.
3.4. If the User publishes personal data of another person, including a phone number, name, address, photo, or other identifying information, the User confirms that they have obtained the necessary consent or have another lawful basis to publish such data.
3.5. The Administration is not responsible for personal data unlawfully published by Users without the consent of the relevant third party, but may remove such content upon receiving a valid complaint or discovering a violation.
4. Purposes of Data Processing
4.1. The Administration processes personal data for the following purposes:
providing access to the Service
creating and managing User accounts
publishing and managing advertisements
allowing Users to contact advertisers
verifying advertisements and preventing fake listings
moderating content
preventing fraud, spam, abuse, unauthorized access, and illegal activity
improving the operation, security, and functionality of the Service
sending technical, service-related, or administrative notifications
sending information about new features, updates, promotions, or advertising messages where permitted
processing payments, packages, premium services, or paid features where applicable
responding to User requests and support inquiries
collecting statistical and analytical data
ensuring compliance with applicable laws
resolving disputes and enforcing the User Agreement.
4.2. The Administration may process and review advertisements, phone numbers, IP addresses, account activity, technical data, and other information to detect and prevent:
fraudulent advertisements
duplicate or misleading listings
spam
phishing
unauthorized access
abuse of the Service
violation of the User Agreement
illegal or suspicious activity.
5. Legal Basis and User Consent
5.1. The User provides personal data freely and voluntarily when using the Service, registering an account, placing an advertisement, contacting the Administration, subscribing to notifications, or using website features.
5.2. By providing personal data, the User consents to the collection, storage, processing, use, disclosure, and transfer of such data in accordance with this Privacy Policy.
5.3. Processing of personal data may also be carried out where necessary for:
performance of the Service requested by the User
compliance with applicable law
protection of the rights and legitimate interests of the Administration
prevention of fraud, abuse, and illegal activity
fulfillment of legal obligations
dispute resolution.
5.4. The User may withdraw consent or request deletion of personal data, subject to limitations required by law, security, fraud prevention, or dispute resolution.
6. Sharing Data with Third Parties
6.1. The Administration does not sell or rent Users’ personal data.
6.2. The Administration does not disclose personal data to third parties unrelated to the Service except:
with the User’s consent
where required by law
where necessary to operate the Service
where necessary to protect the rights, safety, and lawful interests of the Administration, Users, or third parties.
6.3. The Administration may share personal data with service providers and partners only to the extent necessary for the operation of the Service, including:
hosting providers
domain and server providers
email delivery services
SMS or phone verification services
payment processors
analytics services
advertising platforms
moderation tools
security and anti-spam systems
technical support providers
legal, accounting, or compliance advisers.
6.4. Such third parties may process personal data only for the purposes related to the operation, security, support, development, or legal compliance of the Service.
6.5. The Administration may disclose personal data to competent state authorities, courts, law enforcement bodies, or regulators if required by applicable law or lawful request.
7. Communication Between Users
7.1. The Service may provide limited access to contact information of advertisers to facilitate communication regarding real estate advertisements.
7.2. Users may use contact information received through the Service only for the purpose of discussing the relevant advertisement, property, transaction, or service.
7.3. Users are prohibited from using contact information obtained through the Service for:
spam
unsolicited advertising
mass messaging
fraud
harassment
illegal offers
resale or transfer to third parties
any purpose unrelated to the relevant advertisement.
7.4. Violation of this rule may result in restriction, suspension, or deletion of the User account and removal of advertisements.
8. Email, SMS, and Marketing Messages
8.1. The Administration may send Users technical, transactional, and service-related messages, including:
account registration notifications
password reset messages
advertisement approval notifications
advertisement rejection notifications
package activation messages
payment confirmation messages
security alerts
support replies.
8.2. The Administration may also send information or promotional messages about new features, offers, updates, and services of makan. az where permitted by law.
8.3. The User may unsubscribe from promotional messages where such option is provided.
8.4. The Administration does not use Users’ contact details for unlawful spam or unauthorized mass messaging.
8.5. Service-related messages necessary for account security, advertisement management, payments, or operation of the Service may still be sent even if the User unsubscribes from promotional messages.
9. Cookies and Similar Technologies
9.1. The Service uses cookies, web beacons, pixels, local storage, and similar technologies for the operation, security, analytics, personalization, and advertising functions of the website.
9.2. The Service uses the following categories of cookies:
Strictly necessary cookies — required for the operation, security, login, session management, and basic functionality of the Service.
Functional cookies — used to remember User preferences and improve website usability.
Analytics cookies — used to measure traffic, understand User behavior, and improve the Service.
Advertising and marketing cookies — used for advertising, remarketing, campaign measurement, and personalized or non-personalized advertising.
9.3. Except for strictly necessary cookies, the Service shall display a cookie consent banner before placing analytics, advertising, marketing, or non-essential cookies on the User’s device.
9.4. The cookie consent banner shall provide the User with the ability to:
accept all cookies
reject non-essential cookies
manage cookie preferences by category
change or withdraw cookie consent later where technically available.
9.5. Strictly necessary cookies may be used without separate consent because they are required for the proper operation and security of the Service.
9.6. The User may also block, delete, or restrict cookies through browser or device settings. However, disabling certain cookies may affect the correct operation of the Service.
9.7. If third-party services such as analytics platforms, advertising networks, payment providers, or social media pixels are used, such third parties may place cookies or similar technologies according to their own privacy and cookie policies.
10. Storage of Personal Data
10.1. The Administration stores personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.
10.2. The following retention periods apply:
Data category Retention period
Account data Until the account is deleted by the User or by the Administration
Published advertisement data While the advertisement is active and up to 12 months after deletion or expiration
Deleted or expired advertisement records Up to 12 months for dispute resolution, fraud prevention, moderation history, and legal protection
Phone number and email linked to account or advertisement While the account or advertisement is active and up to 12 months after deletion
Support requests and correspondence Up to 3 years after the last communication
Payment and package activation records Up to 1 year, or longer if required by tax, accounting, or financial legislation
Security logs, IP addresses, device and access logs Up to 12 months
Fraud, spam, abuse, or violation records Up to 2 years where necessary to protect the Service and other Users
Cookie consent records Up to 12 months after the last consent update
Newsletter or marketing consent records Until consent is withdrawn and up to 12 months thereafter for proof of compliance
Backups Up to 90 days, unless longer storage is required for security, legal, or technical reasons
10.3. After the expiration of the applicable retention period, personal data shall be deleted, anonymized, or securely archived where continued storage is required by law or legitimate legal interest.
10.4. If the User deletes an advertisement, the advertisement may be removed from public access immediately or within a reasonable technical period. However, certain records may remain stored for the periods specified above.
10.5. If the User requests deletion of their account or personal data, the Administration shall delete or anonymize the relevant data unless continued storage is required for:
legal compliance
accounting or tax obligations
payment records
dispute resolution
fraud prevention
security investigations
enforcement of the User Agreement
protection of the rights and lawful interests of the Administration, Users, or third parties.
10.6. Data stored in backups may not be deleted immediately from backup copies, but such data shall not be restored for active use unless required for security, legal, or technical reasons.
11. Security of Personal Data
11.1. The Administration takes reasonable technical, organizational, and administrative measures to protect Users’ personal data from:
unauthorized access
loss
misuse
alteration
disclosure
destruction
unlawful processing.
11.2. Personal data collected and processed by the Service is stored on secure servers with restricted access.
11.3. Employees, contractors, or representatives of the Administration with access to personal data are required to keep such data confidential.
11.4. The Administration may use security tools, logs, monitoring systems, access controls, encryption, backups, and anti-spam measures to protect the Service and Users.
11.5. No website or online system can guarantee absolute security. The User understands that data transmission over the Internet always carries certain risks.
12. User Rights
12.1. The User has the right to:
access their personal data
request correction of inaccurate or incomplete personal data
request deletion of personal data
withdraw consent where processing is based on consent
object to certain types of processing where applicable
request restriction of processing where applicable
request information about the purposes of processing
request information about third parties to whom personal data has been disclosed
request a copy of their personal data in a structured, commonly used, and machine-readable format where technically possible
request deletion of account and advertisements
contact the Administration regarding privacy and personal data matters.
12.2. The User may send a personal data request to: info@makan. az
12.3. The Administration shall respond to User requests related to access, correction, deletion, restriction, objection, or data copy within 30 calendar days from the date of receipt of the request.
12.4. If the request is complex or requires additional verification, the response period may be extended by up to 60 additional calendar days. In such case, the Administration shall notify the User about the extension and the reason for the delay.
12.5. Before fulfilling a request, the Administration may request additional information to verify the identity of the User and to prevent unauthorized access to personal data.
12.6. If the request is rejected fully or partially, the Administration shall provide the User with the reason for such rejection, unless prohibited by law or security requirements.
12.7. Deletion of personal data may result in the loss of access to the account, advertisements, paid services, saved preferences, and other functions of the Service.
13. Accuracy of User Data
13.1. The User is responsible for the accuracy, completeness, and legality of the information provided to the Service.
13.2. The User must not provide false, misleading, outdated, or unlawful information.
13.3. The User must not publish personal data of third parties without proper consent or legal basis.
13.4. The Administration may remove or restrict access to advertisements or accounts containing false, misleading, unlawful, or suspicious information.
14. Payments and Paid Services
14.1. If the Service offers paid packages, premium advertisements, VIP listings, agency packages, or other paid services, payment-related data may be processed by third-party payment providers.
14.2. The Administration may process data necessary to confirm payment, activate packages, issue invoices, manage subscriptions, and provide support.
14.3. The Administration does not intentionally store full bank card details unless expressly stated and technically required. Payment card data is generally processed by authorized payment providers.
14.4. Payment providers process payment data according to their own privacy policies and security standards.
15. Analytics and Advertising Services
15.1. The Service may use analytics and advertising tools to understand website traffic, improve functionality, measure performance, and promote makan. az.
15.2. Such tools may collect technical data, cookies, device identifiers, IP addresses, page views, clicks, and similar information.
15.3. The Administration may use services such as analytics platforms, advertising networks, search engine tools, social media pixels, or similar technologies.
15.4. The User may manage cookies and advertising preferences through browser settings, device settings, or cookie consent tools where available.
16. Cross-Border Data Transfer
16.1. Personal data may be stored or processed on servers located in Azerbaijan or outside Azerbaijan, depending on the hosting provider, technical infrastructure, email service, analytics service, payment provider, or other service providers used by the Administration.
16.2. By using the Service, the User agrees that personal data may be transferred and processed outside the User’s country of residence where necessary for the operation of the Service.
16.3. The Administration will take reasonable measures to ensure that such transfers are carried out with appropriate protection and in accordance with applicable law.
16.4. Cross-border transfer of personal data may be restricted where required by applicable legislation or where such transfer may create legal or security risks.
17. Children’s Data
17.1. The Service is not intended for use by children who do not have legal capacity to enter into agreements or publish advertisements.
17.2. Users must have the necessary legal capacity or permission of a legal representative to use the Service.
17.3. If the Administration becomes aware that personal data of a child has been collected without proper consent, such data may be deleted.
18. Data Breach and Security Incidents
18.1. In case of a security incident affecting personal data, the Administration will take reasonable measures to investigate, limit, and resolve the incident.
18.2. Where required by applicable law, the Administration may notify affected Users or competent authorities.
18.3. The Administration may temporarily restrict access to accounts, advertisements, or website functions if necessary to protect Users and the Service.
19. Deletion of Account and Personal Data
19.1. The User may request deletion of their personal data by contacting: info@makan. az
19.2. After receiving a deletion request, the Administration may delete or anonymize personal data, unless continued retention is necessary for:
legal compliance
accounting or tax obligations
payment records
fraud prevention
security investigations
dispute resolution
enforcement of the User Agreement
protection of the rights and interests of the Administration or third parties.
19.3. After deletion of personal data, future access to the Service may not be guaranteed.
19.4. Public advertisements may be removed from public access after deletion, but archived technical records may be retained where necessary and lawful.
20. Amendments to This Privacy Policy
20.1. The Administration may update, amend, or supplement this Privacy Policy from time to time.
20.2. The updated version of the Privacy Policy shall be published on the Service with a new “Effective date”.
20.3. If the changes are material and may significantly affect the rights, obligations, or privacy of Users, the Administration shall notify Users at least 7 calendar days before such changes take effect, where technically possible.
20.4. Notification of material changes may be provided through one or more of the following methods:
email notification
notice in the User account
announcement on the Privacy Policy page.
20.5. Non-material changes, including technical, editorial, formatting, or clarification updates, may take effect immediately after publication on the Service.
20.6. If the User does not agree with the updated Privacy Policy, the User must stop using the Service and may request deletion of their account and personal data.
20.7. Continued use of the Service after the effective date of the updated Privacy Policy means acceptance of the updated terms.
21. Contact Information
For all questions, requests, complaints, or notices related to this Privacy Policy or personal data, the User may contact the Administration at: info@makan. az