Правила защиты персональных данных

Personal Data Protection Policy

GENERAL PRINCIPLES
Adriatic Realty d.o.o., a real estate and travel agency, is dedicated to protecting the personal data of its users and implements all necessary technical and organizational measures in accordance with the laws of the Republic of Croatia and the General Data Protection Regulation (EU 2016/679) – GDPR.

Our information system ensures a high level of data protection through the application of modern security standards. Physical and logical access to the system is strictly controlled, and our employees are regularly trained on the importance of information security and personal data protection.

The purpose and method of personal data processing depend on the specific business relationship established with users. Data processing is based on key principles: legality, transparency, and fairness. We process data solely for predefined purposes and collect only the data necessary for those purposes.

Personal data is retained only as long as necessary to fulfill the purpose for which it was collected, unless legal regulations require longer retention or if necessary to protect our legitimate interests, such as the establishment, exercise, or defense of legal claims.

The principles of accuracy, confidentiality, and data integrity are fundamental to our approach to personal data protection. Access to personal data is granted only to authorized personnel within the agency and external partners who support our business operations (data processors), with the application of all necessary security measures.

Acceptance of Privacy Policy

If you do not agree with this Privacy Policy, please do not use our website or provide your personal data. Any changes to the Privacy Policy will be promptly published on our website.

 

Data Controller

Data Controller: Adriatic Realty, Real Estate and Travel Agency
Owner: Danijela Ćopić
Address: Trg kneza Branimira 48 A, Vodice
Email: [email protected]

 

Purpose and Legal Basis for Data Processing

As the data controller, Adriatic Realty is committed to protecting your privacy and processes only the personal data necessary for its business activities, whether obtained directly from you, from third parties, or from publicly available sources, for the following purposes:

  1. Contract Execution – When processing is necessary to fulfill a contract to which you are a party or to take steps at your request before entering into a contract.
  2. Legitimate Interests – When necessary, we process personal data outside a specific contractual relationship to satisfy our legitimate interests, such as:
    • Detecting criminal offenses and preventing fraud
    • Protecting persons and property
  3. Compliance with Legal Obligations – Due to the nature of its business activities, Adriatic Realty must adhere to various legal obligations, such as compliance with the Anti-Money Laundering and Terrorist Financing Act, the Real Estate Brokerage Act, etc.
  4. Processing Based on Consent – For specific purposes described in the consent you provide. Your consent is voluntary, and you have the right to withdraw it at any time without affecting the legality of the processing based on the consent before its withdrawal.

If we intend to process your personal data for purposes not described here or beyond the scope of the provided consent, we will inform you of the new purpose and other relevant information before proceeding with such processing.

 

What Personal Data Do We Collect?

We process personal data collected during our business relationship, such as:

  • Name and surname
  • Personal identification number (OIB)
  • Address
  • Email address
  • Contact phone number
  • Property-related information

Additionally, if necessary for our business activities, we collect data from public sources (e.g., Court Register, Land Registry, FINA) or receive it from legitimate third-party sources.

Personal data is generally stored electronically on secure servers, protected by usernames and passwords known only to authorized employees responsible for data processing. Data in physical form is stored in secure cabinets.

 

Website www.adriatic-realty.com

If a data subject contacts the Data Controller via email or the contact form on the website, the personal data provided (name, surname, email, phone) will be automatically stored. These personal data are stored for processing or further communication with the data subject. There is no transfer of this personal data to third parties.

 

 

Obligation to Provide Personal Data

Providing personal data to the Data Controller is not mandatory. However, in certain cases, Adriatic Realty may be unable to establish a contractual relationship or fulfill its legal and contractual obligations without the necessary personal data. For example, if you do not provide your name and surname in the contact form, you will be unable to send a message to the Data Controller. Similarly, without identification, we may be unable to comply with legal obligations requiring clear identification of the client.

 

Data Retention Period

Adriatic Realty will retain your personal data only as long as necessary to fulfill its contractual or legal obligations or legitimate interests. For processing based on consent, data processing will cease once the consent is withdrawn. You can withdraw your consent at any time by sending a request to: [email protected].

The withdrawal of consent does not affect the legality of the processing conducted before the withdrawal. If your personal data is no longer necessary for the purposes outlined above, it will be deleted unless further retention is required by law.

 

Recipients of Personal Data

Adriatic Realty is committed to safeguarding your personal data and will not disclose or make it available to third parties without your explicit consent, except in the following cases:

  • Service providers engaged as data processors related to contract execution (e.g., law firms, utility transfer services)
  • Competent authorities for the purpose of performing tasks within their jurisdiction (e.g., Tax Administration, Ministry of the Interior)
  • When data is required by a court, public prosecutor’s office, or other equivalent legal proceedings
  • When legally obligated to provide such data

 

Rights Related to Personal Data Processing

Data subjects have the following rights regarding their personal data stored by Adriatic Realty:

  • Access – The right to access personal data related to them.
  • Data Portability – The right to receive a copy of their personal data.
  • Correction – The right to request the correction or supplementation of inaccurate or incomplete data.
  • Erasure – The right to request the deletion of personal data when it is no longer necessary for the purposes for which it was collected or if the consent for processing is withdrawn.

If you believe your rights under the GDPR have been violated, you have the right to file a complaint with the relevant authority, such as the Croatian Personal Data Protection Agency (AZOP).

 

This policy is effective as of November 30, 2024.