Privacy Policy
Last updated: January 15, 2026.
Krovelio d.o.o. (hereinafter: Krovelio, we, our) takes the protection of your personal data seriously. This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our website krovelio.com and related services.
1. Data Controller
The controller of your personal data is Krovelio d.o.o., registered at Ulica grada Vukovara 271, 10000 Zagreb, Croatia, OIB: 78291034567. For all questions regarding personal data processing, you can contact us at info@krovelio.com.
2. Categories of Personal Data We Collect
We collect the following categories of data: identification data (name, surname, email address) that you voluntarily provide in the contact form; technical data (IP address, browser type, operating system, screen resolution) automatically collected when visiting the site; site usage data (pages visited, time spent on site, clicks) through analytics tools, exclusively with your prior consent.
3. Purpose and Legal Basis of Processing
We process your data for the following purposes: responding to your inquiries through the contact form (legal basis: legitimate interest); improving website functionality and user experience (legal basis: consent for analytics cookies); fulfilling legal obligations regarding communication records (legal basis: legal obligation); providing information about the platform and real estate crowdfunding projects (legal basis: legitimate interest).
4. Sharing Data with Third Parties
We do not sell your personal data to third parties. We may share data with: hosting and infrastructure service providers acting as our data processors; Google LLC for analytics services (Google Analytics), exclusively with your consent through Consent Mode v2; competent authorities if required by law or court order. All our processors are bound by contractual data protection obligations.
5. International Data Transfers
Some of our service providers may be headquartered outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards through Standard Contractual Clauses (SCC) approved by the European Commission or through adequacy decisions.
6. Your Rights
Under GDPR, you have the right to: access your personal data; rectify inaccurate data; erase your data (right to be forgotten); restrict processing; data portability; object to processing; withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To exercise these rights, contact us at info@krovelio.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
7. Data Retention
We retain your personal data only as long as necessary to fulfill the purpose for which it was collected. Contact form data is retained for up to 12 months after the last communication. Technical and analytics data is retained for up to 26 months. After these periods expire, data is permanently deleted or anonymized.
8. Data Security
We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or alteration. This includes SSL encryption, access control, regular security audits, and employee training on data protection.
9. Changes to Privacy Policy
We reserve the right to amend this Privacy Policy. All changes will be published on this page with an updated date. We recommend regularly checking this page. Continued use of our website after publication of changes is considered acceptance of the new terms.