Privacy Policy

I. What is this Privacy Policy?

This Privacy Policy defines the fundamental principles, objectives and rules for the protection of personal data, which we carry out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), fully applicable since 25 May 2018 in the Republic of Croatia and all EU Member States, the Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18) and other applicable regulations, guidance of supervisory authorities and internal acts of LORA INVEST.

We collect, process and use your personal data lawfully, fairly and transparently, to the extent strictly necessary and for specified, explicit and legitimate purposes. We protect the security of your personal data from unauthorised or unlawful processing by applying the highest technical, security and organisational safeguards.

II. Data Controller

The data controller independently determines the purposes and means of processing personal data within the scope of its business activities.

The data controller is LORA INVEST d.o.o., with its registered office in Dubrovnik, Vukovarska 22, Tax ID (OIB): 59930702418.

III. Personal Data Protection Management

In carrying out its primary business activities, as data controller we collect certain personal data of data subjects. To protect personal data, we have aligned our operations with the GDPR and the relevant implementing legislation. We have established personal data protection management processes through internal policies, implemented appropriate technical and organisational safeguards, appointed authorised persons for data processing matters with clearly defined responsibilities, and established rules, principles, safeguards, reporting processes and oversight of processing activities.

IV. Whose Personal Data Do We Collect?

In the course of our business, we collect and process personal data of (prospective) buyers, lessees and tenants, co-owners and other holders of real property rights on real estate that is (co-)owned or managed by LORA INVEST, as well as data of business partners and employees.

V. What Types of Personal Data Do We Process?

The data controller processes the following categories of data in accordance with the GDPR:

• Personal data of (prospective) buyers of real estate that is (co-)owned, managed or brokered by LORA INVEST, including name, surname, address, tax ID, email address, phone number, property ownership details, bank account number, video surveillance data, data of spouses, data of authorised representatives, and other data necessary to conclude and finalise purchase agreements;
• Personal data of lessees and tenants of real estate (co-)owned, managed or brokered by LORA INVEST, including name, surname, address, tax ID, email address, phone number, bank account number, video surveillance data, data of all persons included in the lease, data of authorised representatives, and other data necessary to finalise lease agreements;
• Personal data of co-owners and other holders of real property rights on real estate (co-)owned or managed by LORA INVEST;
• Personal data of business partners covered by the GDPR, such as name, surname, address, tax ID, email address, phone number, and other relevant data of individuals associated with legal entities;
• Personal data of employees as required by LORA INVEST as an employer (name, surname, tax ID, date of birth, address, email address, phone number, professional qualifications, certificates, diplomas, etc.);
• Data of other persons and visitors to the premises, primarily collected for the purposes of technical protection and security of the premises, such as video surveillance data.

VI. How and Why Do We Use Your Personal Data?

We use your personal data to fulfil the purpose for which it was collected: to perform contractual or employment obligations, other statutory obligations, on the basis of your explicit consent, or for the purpose of protecting safety and property on the basis of legitimate interest (video surveillance). Collected data is retained for a limited period as necessary for the purposes for which it was collected. Access to personal data is restricted to authorised persons within the company whose conduct is subject to confidentiality obligations and internal policies in accordance with the GDPR.

Access to personal data may also be granted to other legal entities on the basis of applicable law, contractual provisions or your consent — including service providers relating to the property, parties involved in the execution of purchase or lease agreements (electricity and water utilities, financial institutions, insurance companies), and competent state authorities in the fulfilment of legal obligations.

Data we forward will be limited to the minimum necessary. Your personal data will not under any circumstances be transferred to a third country, international organisation, or recipient in a third country.

Where processing is based on your consent, you may withdraw that consent at any time in writing by contacting the Data Protection Officer at the email address indicated in Section IX, or at the registered address of LORA INVEST.

VII. Do We Use Cookies?

We use functional and Google Analytics cookies to improve our website and user experience, and to analyse visits to our website. For more information, please refer to our Cookie Policy.

VIII. Rights of Data Subjects

Data subjects have the following rights under the GDPR:

• the right to information about processing and access to personal data,
• the right to rectification,
• the right to erasure,
• the right to restriction of processing,
• the right to data portability,
• the right to object,
• the right to lodge a complaint with a supervisory authority,
• the right to withdraw consent.

You may contact the Data Controller through the Data Protection Officer at any time to exercise your rights in accordance with the GDPR, using the contact details provided in Section X.

IX. Protection of Personal Data

We process personal data lawfully, fairly and transparently, for specified, explicit and legitimate purposes, ensuring that only data necessary for the purpose of processing is collected, that data is kept accurate and retained only for as long as necessary. We process data in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical and organisational measures.

X. How Can You Contact Us?

In accordance with the GDPR, the data controller has appointed a Data Protection Officer. For all enquiries regarding the collection, processing, use and storage of your personal data, your rights as a data subject and the exercise of those rights, you may contact the Data Protection Officer at: sales.lora.office@gmail.com or at the registered address of LORA INVEST d.o.o., as data controller: Vukovarska 22, 20000 Dubrovnik, Croatia.