Privacy and Cookie Policy

1. General Information

This Privacy and Cookie Policy explains how A2Z d.o.o., Otokara Keršovanija 1, Čakovec, OIB: 86361736584 (hereinafter: the Company or the Data Controller), collects, uses, stores and protects the personal data of users of its services and visitors to its website.

The Company processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) and other applicable personal data protection legislation.

Personal data is used solely for the purposes for which it was collected and is processed lawfully, fairly and transparently.

2. Data Controller

The data controller is:

A2Z d.o.o.
Otokara Keršovanija 1
Čakovec
OIB: 86361736584

For questions regarding the processing of personal data or the exercise of data subject rights, you may contact the Company through the official contact channels provided on its website.

3. Personal Data We Collect

Depending on how the website is used, the user's communication with the Company and the services requested, the Company may process personal data voluntarily provided by the user.

Such data may include:

first and last name
address
date of birth, where required for a particular business or contractual relationship
OIB (Croatian Personal Identification Number), where required for a particular business or contractual relationship
email address
telephone number
information relating to a property
information contained in enquiries and communications with the Company
information required for entering into and performing a real estate brokerage agreement
other information voluntarily provided to the Company

When entering into a brokerage agreement, the Company may also collect personal data relating to authorised representatives, signatories and other persons associated with the client where this is necessary for entering into and performing the contractual relationship.

4. Purposes and Legal Bases for Processing

The Company may process personal data for the purposes of:

responding to user enquiries
communicating with interested parties
providing information about properties and the Company's services
processing enquiries relating to the sale, purchase, rental, lease or other real estate transactions
preparing, entering into and performing brokerage agreements
complying with the Company's legal and regulatory obligations
protecting the rights and legitimate interests of the Company
maintaining business and contractual documentation

Depending on the circumstances of the particular processing activity, the legal basis may be the performance of a contract or taking steps at the request of the data subject prior to entering into a contract, compliance with a legal obligation, the Company's legitimate interests, or the data subject's consent where required.

Where processing is based on consent, the data subject has the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

5. Contact Forms and Communications

When a user contacts the Company through a contact form, telephone, email or another available communication channel, the Company may process the information provided by the user for the purpose of handling the enquiry and further communication.

Users should provide only the information necessary for handling their enquiry.

6. Real Estate Enquiries

When a user submits an enquiry regarding a particular property, offers their own property or requests brokerage services, the Company may process the contact details, property information and other information required to handle the specific request.

If the communication results in a brokerage agreement or another business relationship, the data may subsequently be processed for the purposes of entering into, performing and documenting that relationship.

7. Recipients of Personal Data

Access to personal data is limited to persons authorised by the Company who require such information to perform their duties.

Where necessary for business operations or compliance with legal and contractual obligations, personal data may be disclosed to third parties, including business partners and service providers, particularly for accounting and bookkeeping purposes.

Personal data may also be disclosed to competent authorities where required by law.

The Company will not use or disclose personal data for purposes incompatible with the purpose for which it was collected unless an appropriate legal basis exists.

8. Data Retention

Personal data is retained for as long as necessary to fulfil the purpose for which it was collected.

Data relating to a contractual relationship is retained for the duration of the contract and, following its termination, for as long as necessary to regulate legal relationships arising from the contractual relationship and until the expiry of the applicable limitation periods in accordance with applicable legislation.

Once the purpose or legal basis for processing ceases to exist, the data will be deleted, anonymised or its further processing restricted, unless continued retention is required by law.

9. Personal Data Security

The Company applies appropriate organisational, physical and technical measures to protect personal data against unauthorised access, misuse, unauthorised disclosure, loss, alteration or destruction.

Electronic data is protected by appropriate access-control measures, while physical documentation is stored in a manner designed to restrict unauthorised access.

10. Data Subject Rights

In accordance with the GDPR and other applicable legislation, depending on the circumstances of the processing, data subjects may exercise the following rights:

right of access to personal data
right to rectification of inaccurate or incomplete data
right to erasure of personal data
right to restriction of processing
right to data portability
right to object to processing
right to withdraw consent where processing is based on consent
right to lodge a complaint with the competent supervisory authority

Requests to exercise these rights may be submitted to the Company through its official contact channels.

11. Right to Lodge a Complaint

If a data subject considers that their personal data is being processed in breach of applicable data protection legislation, they have the right to contact the Company and to lodge a complaint with the competent data protection supervisory authority.

12. Cookies

The website may use cookies and similar technologies to ensure the proper functioning of the website, improve the user experience and, where applicable and permitted, collect information about the use of the website.

A cookie is a small text file stored on a user's device when visiting a website.

13. Necessary Cookies

Necessary cookies are required for the basic and secure operation of the website and its functionality.

Where such cookies are technically necessary to provide a service explicitly requested by the user, their use does not depend on the user's consent to the extent permitted by applicable law.

14. Analytics and Other Optional Cookies

The website may use analytics or other optional cookies only if such technologies have been implemented on the website.

Where consent is required for their use, such cookies will not be placed before the user has provided the appropriate consent.

As the available documentation does not identify any specific analytics, advertising or other optional tools, this Policy does not name or presume the use of any particular service providers.

15. Managing Cookie Consent

Where the website uses cookies requiring consent, users are given the opportunity to accept or reject their use in accordance with the available cookie settings.

Users may subsequently change or withdraw their consent through the available cookie settings where such functionality has been implemented on the website.

Withdrawal of consent does not affect the lawfulness of the use of cookies prior to the withdrawal.

Users may also manage cookies through their web browser settings.

16. Third-Party Services

The website may contain links to third-party websites or services.

The Company is not responsible for the privacy practices, content or processing of personal data on third-party websites. Users are advised to review the privacy and cookie policies of such websites or services before using them.

17. Changes to the Privacy and Cookie Policy

The Company may amend or supplement this Policy from time to time to reflect changes in its personal data processing activities, the operation of the website or applicable legislation.

The current version of the Policy will be made available on the Company's website.

18. Contact

For questions regarding this Policy, the processing of personal data or the exercise of data subject rights, please contact:

A2Z d.o.o.
Otokara Keršovanija 1
Čakovec
OIB: 86361736584

Through the Company's official contact details published on its website.