Privacy policy
INTRODUCTION AND GENERAL PRINCIPLES - GDPR
CONCEPT d.o.o. (hereinafter referred to as CONCEPT) takes the protection of your personal data seriously and implements all necessary technical and organizational measures in accordance with best practices and obligations stipulated by REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL of April 27, 2016, on the protection of individuals regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation - GDPR) and the Act on the Implementation of the General Data Protection Regulation (NN 42/2018).
In its operations, CONCEPT is guided by the fundamental principles of personal data protection in accordance with the General Data Protection Regulation - GDPR, which means that it processes data lawfully, transparently, and fairly, and that processing is limited to the purpose for which the data was collected, and only those data necessary for that purpose are processed.
If you do not agree with this privacy policy, please do not use our website or provide your personal data.
DATA PROCESSOR
In accordance with the General Data Protection Regulation - CONCEPT based in Lošinjska 7, 52440 Poreč, acts as the data controller.
Your personal data is accessed exclusively by authorized persons of the agency CONCEPT (data controller) and partners who provide business support (data processors).
If you have any questions about how your data is collected or used, please contact us at: CONCEPT, Lošinjska 7, 52440 Poreč, or at the email address: info@concept-porec.hr, or by phone: +385 99 408 1238.
WHEN WE COLLECT YOUR PERSONAL DATA
We may collect your personal data in the following ways:
- we may collect and store personal data you enter when filling out a contact form on our website, requests for sending information, listing properties in our offer, when leaving personal data for the purpose of feedback during the listing of a property with certain characteristics, and similar.
- if you contact us, we may collect and store records of such correspondence, including any personal data you provide during the correspondence.
WHAT PERSONAL DATA WE COLLECT AND PROCESS
CONCEPT processes those personal data collected during the business relationship, such as: name, surname, tax identification number, address, property details, and similar. For the execution of business activities, and if necessary and unrelated to a specific contractual or business relationship, we collect data from public sources (Court Register, Land Registry, FINA) or data that has been legitimately communicated to us by other contractual partners or third parties.
FOR WHAT PURPOSES WE USE PERSONAL DATA
As the data controller, CONCEPT protects your privacy and processes only those personal data that are necessary and that have been obtained within the framework of business activities, whether the data was obtained from you, from third parties, or from publicly available sources.
The personal data we collect about you is used in the following ways:
- to verify your identity,
- to provide the services you contracted with us, and to fulfill our obligations arising from the contracts you have entered into with us,
- to respond to your inquiries,
- to provide information and services you request from us, in cases where you have given consent for us to contact you,
- to send notifications about changes related to our services,
- to send promotional email messages, in cases where you have given your explicit consent for this,
- to prevent fraud.
LEGAL BASIS FOR DATA PROCESSING
The General Data Protection Regulation - GDPR stipulates the legal bases for the lawful processing of personal data as follows:
- Execution of contractual obligations - when processing is necessary for taking actions at your request prior to entering into a contract or when you contract for the provision of some of our services, we must collect personal data to fulfill our contractual obligations (for example, to organize a property viewing, forward the property address, issue invoices for services, contact you for information purposes, and so on).
- Satisfaction of legitimate interests - when necessary, we process personal data even outside a specific contractual relationship, in order to satisfy our legitimate interests. For example, such a legitimate interest may be: conducting legal proceedings and keeping records thereof; detecting offenders and preventing fraud; protecting persons and property; fulfilling your requests to help us develop, deliver, and improve our services or for our internal needs, such as auditing, data analysis, and research aimed at improving our products, services, and communication with users, as well as responding to your inquiries and comments.
- Compliance with legal obligations - CONCEPT must adhere to regulations in force in the Republic of Croatia that impose the obligation to process data for certain purposes, such as accounting purposes (e.g., issuing invoices), and providing data as required by judicial authorities. We are also obliged to act in accordance with the Act on the Prevention of Money Laundering and Terrorist Financing (NN 108/2017), the Act on Real Estate Brokerage (NN 107/2007 until 14/2014), etc.
- Consent - when you have given consent for the processing of your personal data for one or more specific purposes described in the consent, only after we receive your consent for the processing of personal data for a specific purpose, while retaining the right to withdraw your consent at any time.
If we are to process your personal data for purposes not described here or outside the purpose for which you have given consent, we will provide you with information about that other purpose and any other relevant information regarding processing prior to such processing.
HOW LONG WE KEEP PERSONAL DATA
We retain your data only as long as necessary to fulfill the purpose for which it was collected to carry out a contractual or legal obligation or legitimate interest, except in the case of processing personal data based on consent, where processing ceases at the moment you withdraw your consent. Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If your personal data is no longer required to fulfill the above purpose, it will be destroyed, unless further retention is required by law.
WHOM WE SHARE PERSONAL DATA WITH
CONCEPT is committed to safeguarding your personal data and will not disclose or make it available to third parties without your explicit permission, except:
- to service providers we engage as data processors for tasks related to the execution of contracts in which you are a party (e.g., law firms, accounting services, relevant utility transfer authorities),
- to competent authorities for carrying out tasks within their jurisdiction (e.g., the Tax Administration),
- when such data is required by a court or competent state attorney’s office, or other bodies in equivalent legal proceedings,
- when CONCEPT is obliged to provide such data in accordance with the law.
As part of our business, we use a web application for managing real estate.
YOUR RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION - GDPR
Under the General Data Protection Regulation - GDPR, you have certain rights concerning your personal data, as follows:
- Right to restrict processing - you have the right to request the restriction of processing your personal data when there is no legitimate interest to do so:
- when you contest the accuracy of personal data, for a period allowing us as the data controller to verify the accuracy of personal data.
- when you have lodged an objection to the processing of data, while we consider whether our legitimate reasons override yours.
- when processing is unlawful, and you oppose the deletion of personal data and instead request the restriction of their use.
- when we no longer need personal data, but you request it for the establishment, exercise, or defense of legal claims.
You can exercise your right at any time by contacting us (see How to Contact Us).
- Right of access - the General Data Protection Regulation - GDPR gives you the right to request access to personal data concerning you, which means you have the right to ask us what personal data we hold about you and how we process it. You can exercise your right by contacting us (see How to Contact Us).
- Right to deletion (Right to be forgotten) - as a natural person, you have the right to request the deletion of all your personal data we hold. However, note that this is not an absolute right; for instance, it does not override our legal obligations to retain accounting data. You can request the deletion of your personal data when your data is no longer necessary in relation to the purposes for which it was originally collected or processed (e.g., if you cancel all services you have used with us). You can exercise your right by contacting us (see How to Contact Us).
- Right to rectification - the General Data Protection Regulation - GDPR gives you the right to rectify any personal data that is inaccurate or incomplete, and in such cases, we are obliged to act in accordance with your request without unnecessary delay. You can exercise your right by contacting us (see How to Contact Us).
- Right to object - you have the right to object to the processing of personal data when there is no legitimate or legal reason for us to do so. You can exercise your right by contacting us (see How to Contact Us).
- Right to data portability - you have the right to receive your personal data in a structured format and in a commonly used and machine-readable format, and you have the right to transfer such data to another data controller, if the processing is carried out by automated means and is based on consent or contract, and if it is technically feasible.
HOW TO CONTACT US
Your questions, comments, and requests regarding these Privacy Rules are welcome, and you can contact us at: CONCEPT, Lošinjska 7, 52440 Poreč, or via email at: info@concept-porec.hr, or by phone at: +385 99 408 1238
HOW TO CONTACT THE SUPERVISORY AUTHORITY
Although we will do everything possible to resolve any situation regarding your personal data that you are not satisfied with, if you believe that we are not handling your personal data properly, you have the right to contact the supervisory authority - the Agency for the Protection of Personal Data (AZOP) http://azop.hr/zastita-podataka-hrvatska/detaljnije/kontaktirajte-nas
COOKIE USAGE STATEMENT
Cookies in your browser allow us to ensure the functionality of all features of the website, customize certain content specifically for you, and continuously improve the website through visitor analysis. Additionally, you can choose not to allow the use of cookies. In that case, the website in your browser will not load any permanent cookies except for our own cookies that analyze website traffic and cookies that allow you to make reservations through the website. However, we cannot guarantee that you will be able to use the website in its entirety. The website uses elements from other providers who also use cookies.