Privacy Policy

Last updated: 2.4.2026

1. Introduction

This Privacy Policy (“Policy”) explains how estate.com.hr collects, uses and protects the personal data of visitors and users (“You”) in accordance with Regulation (EU) 2016/679 (GDPR) and the relevant laws of the Republic of Croatia.

By using this website (“Website”), you confirm that you are familiar with this Policy. If you do not agree with it, please do not use the Website.

2. Controller and manager / processor

Controller,Manager / operational partner (processor where applicable):
For certain projects, especially those where it is engaged as construction manager or investment partner, part of the operational data processing may be carried out by:

MILJAS NEKRETNINE d.o.o. for construction and services
Vukovarska 26, 20000 Dubrovnik, Croatia
Main activity: 41000 – Construction of residential and non‑residential buildings
OIB: 87587972671, Company registration No.: 06141129

In such cases, MILJAS NEKRETNINE d.o.o. acts as a processor, strictly within Our instructions and for the purposes defined in this Policy and/or contracts with clients.

3. What data we collect

We collect only the amount of data necessary for clearly defined purposes.

3.1. Data you provide to us

For example, via the contact form or by e‑mail:

• first and last name

• e‑mail address and/or phone number

• company name and position (where relevant)

• the content of your enquiry and projects you are interested in

• any other information you voluntarily provide.

3.2. Data collected automatically

• IP address, date and time of access

• type of device and browser, basic technical information

• pages you visit and the duration of your visit

• cookies and similar tracking technologies (analytics).

We do not collect special categories of personal data (such as health data, religious beliefs etc.) via the Website.

4. Purposes and legal bases of processing

We process your data for the following purposes:

1. Responding to enquiries and communication

   • purpose: handling your enquiry, sending requested information, arranging meetings

   • legal basis: legitimate interest (Article 6(1)(f) GDPR) and/or taking steps at your request prior to entering into a contract (Article 6(1)(b)).

2. Maintaining records of contacts and potential clients

   • purpose: CRM, tracking business opportunities, preparing offers

   • legal basis: Our legitimate interest as controller.

3. Project implementation and contractual relationships

   • purpose: performance of contracts, coordinating project activities with partners (including MILJAS NEKRETNINE d.o.o. where applicable)

   • legal basis: performance of a contract and compliance with legal obligations.

4. Analytics and Website improvement

   • purpose: anonymous and aggregated statistics on visits, optimisation of content and user experience

   • legal basis: legitimate interest; for non‑essential cookies – your consent via a cookie banner, if implemented.

5. Compliance with legal obligations and protection of rights

   • purpose: storing documentation, responding to requests from authorities, defending against legal claims

   • legal basis: compliance with legal obligations and legitimate interest.

5. Cookies

The Website uses technical and analytical cookies:

• Necessary cookies – ensure basic functionality (security, language, sessions)

• Analytical cookies – help us understand how the Website is used (for example Google Analytics or a similar tool).

You can adjust your cookie settings in your browser. Disabling certain cookies may affect the functionality of the Website.

6. Recipients and data transfers

We may share your data with:

• hosting, IT support and analytics service providers

• project partners, including MILJAS NEKRETNINE d.o.o., only where necessary for a specific project and on the basis of data‑processing agreements

• competent authorities where required by law.

As a rule, data are processed within the EU/EEA. If data are exceptionally transferred outside the EU/EEA, we will apply appropriate safeguards (such as standard contractual clauses).s

7. Retention period

We keep data for the following periods:croatia+1

• contact enquiries: up to 3 years after the end of communication, or longer where we enter into a contractual relationship

• contractual documentation: in accordance with statutory deadlines (e.g. 10 years for accounting records)

• anonymised statistical data: without a specific time limit.

After the retention period expires, data are deleted or anonymised.

8. Your rights

Under the GDPR you have the following rights:

•   right to be informed and to access your personal data

• the right to rectification of inaccurate data

• the right to erasure (“right to be forgotten”) in the cases provided by law

• the right to restriction of processing

• the right to object (especially where processing is based on legitimate interest)

• the right to data portability, where applicable

• the right to withdraw consent where processing is based on consent.

To exercise your rights, contact us at [info@estate.com.hr]. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia.

9. Security

We implement appropriate technical and organisational measures (restricted access, backups, system updates, confidentiality obligations for service providers) to protect personal data from unauthorised access, loss or misuse.

10. Changes to this Policy

We may update this Policy from time to time. The updated version will be published on the Website with the date indicated. We recommend that you review this page periodically.