Privacy Policy

1. Data Controller

Ulventora d.o.o., with its registered office at Ulica grada Vukovara 269D, 10000 Zagreb, Croatia (OIB: 45839201784, MBS: 081274519), is the data controller of your personal data within the meaning of the General Data Protection Regulation (GDPR) and the Croatian Implementation Act of the GDPR.

For all questions related to the protection of personal data, you can contact us at: privacy@ulventora.com or by post at the above address.

2. Data We Collect

In the course of providing our real estate crowdfunding platform services, we collect the following categories of personal data:

Identification data: name, surname, email address — collected through the contact form on the website.

Technical data: IP address, browser type, operating system, language settings, device data — automatically collected when you visit the website.

Usage data: pages you visited, time spent on the page, traffic source, interactions with page elements.

Cookie data: cookie preferences, session identifiers, and analytics identifiers in accordance with your privacy settings.

3. Purpose and Legal Basis of Processing

We process your personal data on the following legal grounds:

Legitimate interest (Article 6(1)(f) GDPR): to ensure the technical functionality of the website, security protection, and usage analysis to improve user experience.

Consent (Article 6(1)(a) GDPR): for analytics cookies, advertising cookies, and personalization cookies — we process data only if you have given explicit consent through our cookie management platform.

Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR): to process your inquiry submitted through the contact form.

Legal obligation (Article 6(1)(c) GDPR): to fulfill our regulatory obligations under Croatian and European Union legislation.

4. Data Retention Period

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected:

Contact form data: up to 12 months after the last communication, unless longer retention is required to fulfill legal obligations.

Technical and analytics data: up to 26 months from collection.

Cookie data: in accordance with the retention periods set out in our Cookie Policy.

After the expiration of the retention period, data is deleted or anonymized.

5. Your Rights

Under the GDPR and Croatian legislation, you have the following rights regarding your personal data:

Right of access: you have the right to request confirmation of whether we process your personal data and to obtain a copy thereof.

Right to rectification: you have the right to request the correction of inaccurate or incomplete personal data.

Right to erasure: you have the right to request the deletion of your personal data when it is no longer necessary for us to retain it.

Right to restriction of processing: you have the right to request the restriction of processing of your personal data in certain circumstances.

Right to data portability: you have the right to request the transfer of your personal data in a structured, commonly used, and machine-readable format.

Right to object: you have the right to object to the processing of your personal data based on legitimate interest.

Right to withdraw consent: you have the right to withdraw your consent to data processing at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact us at: privacy@ulventora.com. We will respond to your request within 30 days.

If you believe that the processing of your data is in violation of data protection regulations, you have the right to file a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.

6. Third-Party Data Sharing

We share your personal data only with trusted service providers who assist us in our operations:

Google LLC (Google Analytics, Google Ads): for website analytics and advertising effectiveness measurement. Google processes data in accordance with its own Privacy Policy and Standard Contractual Clauses for transfers outside the EEA.

Hosting service providers: for technical maintenance and security of the website, with servers located within the European Economic Area (EEA).

We do not sell, rent, or exchange your personal data with third parties for commercial purposes.

7. International Data Transfers

Some of our service providers may process your data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards, including Standard Contractual Clauses approved by the European Commission and certification under the EU-U.S. Data Privacy Framework, where applicable.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or alteration, including SSL/TLS encryption, access controls, and regular security assessments.

9. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation or business practices. We will notify you of any significant changes through a notice on the website. We recommend regularly checking this page.

The date of the last update is indicated at the top of this page.

10. Contact

For all questions related to this Privacy Policy or the processing of your personal data, please contact:

Ulventora d.o.o., Ulica grada Vukovara 269D, 10000 Zagreb, Croatia

Email: privacy@ulventora.com

Phone: +385 1 234 5678