Protection of personal data

KRKIMMO d.o.o. (trading as KrkImmo, hereinafter the Agency), from Šilo, Kostrij 7, personal identification number 16270002658, based on the provisions of the Law on Protection of Personal Data (Narodne novine 103/03, 118/06, 41/08, 130/11, 106/12), and in accordance with EU Directive 2016/679, adopts the following Amended General Data Protection Regulation in Šilo on February 14, 2018.
  • Excerpt from the Regulation
This Regulation defines the methods of collection, processing, use and storage of personal data of users of the Agency’s services.
Users of the services are buyers and sellers of real estate who directly or indirectly establish contact with the Agency and at the same time disclose personal data to the Agency, voluntarily or in accordance with legal provisions.

Article 1
A direct method of data collection is considered to be:
a) Collection of personal data (name, surname, phone number and e-mail address) of users via the Agency’s website.
b) Collection of personal data (name, surname, address of residence, personal identification number, telephone number, e-mail address and number of personal identification document - identity card or passport) of the user necessary for the fulfillment of the brokerage agreement, and in accordance with the General Terms and Conditions of the Croatian Real Estate Brokerage Law.
c) Collection of user’s personal data (including, but not limited to, first and last name, residential address, personal identification number, telephone number, e-mail address, date and place of birth and number of personal identification document) that the Agency must collect to the extent specified by The Law on Prevention of Money Laundering and Terrorism Financing.

Article 2
An indirect method of data collection is considered to be the collection of user’s personal data (including, but not limited to, first and last name, residential address, personal identification number, telephone number, e-mail address and number of personal identification document) provided to the Agency by third parties, e.g., advertisers, collaborators, etc.

Article 3
The collection and further processing of personal data related to racial or ethnic origin, political views, religious or other beliefs, trade union membership, health or sex life and personal data on criminal and misdemeanor proceedings is prohibited.

Article 4
Personal data must be essential to achieve the established purpose and must not be collected to a greater extent than is necessary to achieve the established purpose.

Article 8
The Agency may use data collected directly (Article 1.a):
1) In order to provide a one-time response to a potential service user’s inquiry,
2) In order to achieve business communication with the user of the service if the user of the service has asked it to establish or maintain contact with them in order to present the offer of the Agency and/or the Agency needs to contact the user with whom it has established a business relationship.
In the mentioned cases, the Agency may use personal data only to the extent necessary for communication with the user of the service.
If the potential user of the service (Article 8, point 1) does not express his desire to continue communication with the Agency by not responding, the Agency will destroy his personal data from the inquiry in the received form.
If the user of the service (Article 8, point 2), who has established business communication with the Agency, expresses a desire to terminate it, the Agency undertakes to terminate further communication, and not to use their personal data for the purpose of further promotion, presentation of the offer and/or business communications. Personal data from this category may be kept by the Agency for a maximum of one year after the request for termination of communication, and only if the user of the service has previously entered into an obligatory legal relationship with the Agency. Otherwise, the Agency undertakes to destroy the personal data of the service user in the received form.

Article 9
The Agency may use data collected directly (Articles 1.b and 1.c):
1) If it has established a business relationship with the user to the extent necessary for the implementation of the Agency’s service,
2) If the Agency is required to do so by state institutions by force of law, and/or the user of the service has authorized it to perform tasks for them towards third parties.
Personal data collected directly (Articles 1.b and 1.c) are kept until the expiration of the contractual obligation (in the case of brokerage agreements), i.e. within the deadlines prescribed by law (in the case of sales contracts and forms for the prevention of money laundering and terrorism financing), and after the expiration of the deadline, they are destroyed in the received form.

Article 10
Users of the Agency’s service (covered by articles 1.a, 1.b and 1.c) have the right at any time to request from the head of the collection of personal data an insight into what personal data has been collected about them and to request their updating or deletion/destruction (if the same is not contrary to legal acts).

Article 11
The same rules that apply to users of services from Article 1.a apply to the personal data of service users collected indirectly (e.g. through advertisers, associates, etc.). The Agency may use the personal data collected in this way:
1) In order to provide a one-time response to a potential service user’s inquiry,
2) In order to achieve business communication with the user of the service if the user of the service has asked it to establish or maintain contact with them in order to present the offer of the Agency and/or the Agency needs to contact the user with whom it has established a business relationship.
In the mentioned cases, the Agency may use personal data only to the extent necessary for communication with the user of the service.
If the potential user of the service (Article 11, point 1) does not express his desire to continue communication with the Agency by not responding, the Agency will destroy their personal data from the inquiry in the received form.
If the user of the service (Article 11, point 2), who has established business communication with the Agency, expresses a desire to terminate it, the Agency undertakes to terminate further communication, and not to use their personal data for the purpose of further promotion, presentation of the offer and/or business communications. Personal data from this category may be kept by the Agency for a maximum of one year after the request for termination of communication, and only if the user of the service has previously entered into an obligatory legal relationship with the Agency. Otherwise, the Agency undertakes to destroy the personal data of the service user in the received form.

Article 12
The Agency does not use the user’s personal data for regular marketing activities (e.g. newsletter) nor does it transfer, distribute or sell the same to third parties in any way.

Article 16
Pursuant to Article 16.a of the Law, the manager of the collection of personal data employs less than 5 employees and is not obliged to submit records of the collection of documents related to the field of labor legislation to the Central Office of the Agency for Personal Data Protection.