Privacy Policy
This Privacy Policy describes how Fundnekretnine d.o.o. ("we", "us") collects, uses and protects your personal data when you visit fundnekretnine.com or use our services, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Croatian Act on the Implementation of the GDPR.
1. Data controller
Fundnekretnine d.o.o., Avenija Dubrovnik 16, 10000 Zagreb, Croatia. OIB: 12894537021. Contact: privacy@fundnekretnine.com.
2. Data we collect
Data you voluntarily provide (full name, email address, phone number when you contact us) and technical data (IP address, device type, browser data, cookie data) automatically collected during your visit to the website.
3. Purposes and legal basis
Communication with you and responding to enquiries (legitimate interest — Art. 6.1.f GDPR). Sending platform and project updates based on your consent (Art. 6.1.a GDPR). Fulfilling legal obligations under EU Regulation 2020/1503 and the Croatian Anti-Money Laundering Act (Art. 6.1.c GDPR). Analytics and site improvement based on consent given through the Cookie Banner.
4. Retention period
Data from enquiries is kept for up to 24 months from the last communication. Newsletter subscription data is kept until you withdraw your consent. Data collected to meet legal obligations is kept for the legally prescribed periods (up to 11 years for AML obligations).
5. Recipients of data
We do not sell your data to third parties. Access is granted to authorised employees and contractual processors (hosting, email delivery, analytics) with whom we have signed data processing agreements pursuant to Art. 28 GDPR. All processing takes place within the EEA or under adequate safeguards.
6. Your rights
Right of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent at any time. Requests may be sent to privacy@fundnekretnine.com. You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.
7. Security
We apply technical and organisational protection measures including TLS encryption, access control on a least-privilege basis, regular security updates and internal personal data processing policies.
8. Changes to this Policy
We may update this Policy from time to time. Material changes will be highlighted on this page together with the effective date.