Privacy Policy
This privacy policy describes how Arvontiq d.o.o. processes your personal data when you use our website and real estate crowdfunding platform. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), the Croatian Act on the Implementation of the GDPR (OG 42/18) and the AZOP technical guidance updates of 2025/2026.
1. Who is the data controller?
The data controller is Arvontiq d.o.o., Ulica grada Vukovara 269D, 10000 Zagreb, Croatia, VAT/OIB: 73849261058. For privacy enquiries, write to privacy@arvontiq.com.
2. What data do we collect?
We collect data you provide to us directly (name, email, message content), technical data about your device and browser, and behavioural data about how you use the site — only if you give consent to analytics cookies. We do not collect special categories of personal data.
3. Legal basis for processing
We process your data based on your consent (Art. 6(1)(a) GDPR) for marketing and analytics, our legitimate interest (Art. 6(1)(f) GDPR) for the security of the site, and on the contractual relationship when you sign up to the platform.
4. Retention period
We retain contact-form data for up to 24 months from the last communication. Technical logs are kept for up to 12 months. Accounting data is kept in accordance with Croatian tax law (11 years).
5. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw your consent at any time without affecting the lawfulness of prior processing. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.
6. International transfers
Some of our service providers (e.g. Google) are located outside the EEA. In such cases we rely on Standard Contractual Clauses and adequacy frameworks approved by the European Commission, including the EU-US Data Privacy Framework.
7. Security
We apply TLS encryption in transit, restrictive access on a need-to-know basis, pseudonymisation of sensitive records and annual external security assessments.
8. Policy changes
We may update this policy periodically. We will notify you of any material changes via the website at least 14 days before they take effect.