Privacy Policy

Last updated: July 2025

INTRODUCTION AND GENERAL PRINCIPLES

PIRAMIDA d.o.o. for real estate business and tourist agency, with its registered office in Tar, Brajde 31, OIB: 54890989849 (hereinafter: the Data Controller), takes the protection of personal data seriously and undertakes all necessary technical and organisational measures in accordance with best practices and the obligations prescribed by Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018).

In our business operations, we are guided by the fundamental principles of processing: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity/confidentiality.

If you do not agree with this Privacy Policy, please do not use our website or provide personal data.

DATA CONTROLLER

In accordance with the General Data Protection Regulation – GDPR, PIRAMIDA d.o.o. Tar, with its registered office in Tar, Brajde 31, OIB: 54890989849, acts as the controller of personal data.

Access to your personal data is granted exclusively to authorised persons of PIRAMIDA d.o.o. Tar, as the Data Controller, and to partners who provide business support to the Data Controller, acting as data processors.

If you have any questions regarding how your data is collected or used, please contact us at: PIRAMIDA d.o.o., 52465 Tar, Brajde 31, or by e-mail at: [info@ladriaestate.com](mailto:info@ladriaestate.com).

WHEN WE COLLECT YOUR PERSONAL DATA

We may collect your personal data in the following ways:

* we may collect and store personal data that you enter when completing the contact form on our website, submitting a request for information, listing a property in our offer, leaving personal data for the purpose of being contacted regarding the listing of a property with certain characteristics, and similar;

* if you contact us, we may collect and store records of such correspondence, including any personal data you provide during the correspondence;

* if you use our website, we may collect technical and analytical data through cookies.

WHICH PERSONAL DATA WE COLLECT AND PROCESS

PIRAMIDA d.o.o. Tar processes personal data collected during the course of a business relationship, such as: name, surname, personal identification number/OIB, address, property details, and similar.

For the performance of business activities, and where necessary regardless of a specific contractual or business relationship, we collect data from public sources, such as the Court Register, Land Registry and FINA, or data that has been lawfully communicated to us by other contractual partners or third parties.

Technical data is also collected, including IP address, browser type and device type, as well as data on website usage through cookies and analytical tools.

PURPOSES FOR WHICH WE USE PERSONAL DATA

PIRAMIDA d.o.o. Tar, as the Data Controller, protects your privacy and processes only those personal data that are necessary and that have been obtained within the scope of business activities, whether the data were received from you, from third parties or from publicly available sources.

The personal data we collect about you are used in the following ways:

* to verify your identity;

* to provide the services you have contracted with us and to fulfil our obligations arising from contracts entered into with you;

* to respond to your enquiries;

* to provide information and services that you request from us, in cases where you have given consent for us to contact you;

* to send notifications about changes related to our services;

* to send promotional e-mail messages, in cases where you have given your explicit consent;

* to prevent fraud;

* for marketing communication, newsletters, and the use of cookies for analytics and advertising.

LEGAL BASIS FOR DATA PROCESSING

The General Data Protection Regulation – GDPR prescribes the legal bases for the lawful processing of personal data as follows:

Performance of contractual obligations

When processing is necessary in order to take steps at your request before entering into a contract, or when you contract the provision of any of our services, we must collect personal data from you in order to fulfil our contractual obligations. For example, this may be necessary in order to organise a property viewing, provide the property address, issue invoices for services, contact you for the purpose of providing information, and similar.

Legitimate interests

Where necessary, we also process personal data outside a specific contractual relationship for the purpose of fulfilling our legitimate interests. Such legitimate interests may include, for example: conducting and keeping records of court proceedings; detecting perpetrators of criminal offences and preventing fraud; protecting persons and property; fulfilling your requests in order to help us develop, deliver and improve our services; or for our internal needs, such as audits, data analysis and research aimed at improving our products, services and communication with users, as well as responding to your enquiries and comments.

Compliance with legal obligations

PIRAMIDA d.o.o. Tar must comply with regulations in force in the Republic of Croatia which impose an obligation to process data for certain purposes, such as accounting purposes, for example issuing invoices, and providing data in accordance with the requests of judicial authorities. We are also obliged to act in accordance with the Anti-Money Laundering and Terrorist Financing Act, the Real Estate Brokerage Act, and other applicable regulations.

Consent

When you have given consent for the processing of your personal data for one or more specific purposes described in the consent, we process your personal data exclusively after receiving your consent for the particular purpose, while retaining your right to withdraw your consent at any time.

If we process your personal data for purposes not described here or outside the purpose for which you have given consent, we will provide you, before such processing, with information about that other purpose and all other relevant information regarding the processing.

COOKIES AND ONLINE TECHNOLOGIES

Our website uses cookies for functionality and security purposes and, with your consent, for analytical and marketing purposes.

Necessary cookies: always active.

Analytical and marketing cookies: activated only with your consent through the cookie banner.

More information is available in the Cookie Policy published on the website.

HOW LONG WE KEEP PERSONAL DATA

We retain your data only for as long as is necessary to fulfil the purpose for which they were collected, in order to fulfil a contractual or legal obligation or legitimate interest, except in the case of processing based on consent, where processing ceases at the moment your consent is withdrawn.

Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If your personal data are no longer necessary for the fulfilment of the above-mentioned purpose, they will be destroyed, unless further retention is prescribed by law.

WITH WHOM WE SHARE PERSONAL DATA

PIRAMIDA d.o.o. Tar undertakes to protect your personal data and will not disclose or make them available to third parties without your special approval, except:

* to service providers engaged by us as data processors for activities related to the performance of a contract to which you are a party, such as law offices, IT service providers, accounting services, and competent services for the transfer of utilities;

* to competent authorities for the purpose of performing tasks within their competence, such as the Tax Administration;

* when such data are required by a court, competent state attorney’s office or other authorities in equivalent legal proceedings;

* when PIRAMIDA d.o.o. Tar is obliged to provide such data in accordance with the law.

Data may be transferred to third countries, for example the USA, in connection with Wix and Google. In such cases, appropriate safeguards apply, including the EU Standard Contractual Clauses.

YOUR RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION – GDPR

Under the General Data Protection Regulation – GDPR, you have certain rights relating to your personal data, as follows:

Right to restriction of processing

You have the right to request restriction of the processing of your personal data where there is no legitimate interest for us to process them:

* when you contest the accuracy of the personal data, for a period enabling us, as the Data Controller, to verify the accuracy of the personal data;

* when you have objected to the processing of data and we are considering whether our legitimate grounds override your grounds;

* when the processing is unlawful and you oppose the erasure of the personal data and request restriction of their use instead;

* when we no longer need the personal data, but you require them for the establishment, exercise or defence of legal claims.

You may exercise your right at any time by contacting us; see the section “How you can contact us”.

Right of access

The General Data Protection Regulation – GDPR gives you the right to request access to personal data relating to you. This means that you have the right to ask us which personal data we hold about you and how we process them. You may exercise your right by contacting us; see the section “How you can contact us”.

Right to erasure / Right to be forgotten

As a natural person, you have the right to request the erasure of all your personal data that we hold. However, please note that this is not an absolute right and, for example, it does not override our legal obligations to retain accounting data.

You may request the erasure of your personal data when your data are no longer necessary in relation to the purpose for which they were originally collected or processed, for example, if you cancel all services you used with us. You may exercise your right by contacting us; see the section “How you can contact us”.

Right to rectification

The General Data Protection Regulation – GDPR gives you the right to have any inaccurate or incomplete personal data corrected, and in such a case we are obliged to act in accordance with your request without undue delay. You may exercise your right by contacting us; see the section “How you can contact us”.

Right to object

You have the right to object to the processing of personal data where there is no legitimate or legal reason for us to do so. You may exercise your right by contacting us; see the section “How you can contact us”.

Right to data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller, where the processing is carried out by automated means and is based on consent or a contract, and where this is technically feasible.

HOW YOU CAN CONTACT US

Your questions, comments and requests regarding this Privacy Policy are welcome. You may contact us at: PIRAMIDA d.o.o., 52440 Tar, Brajde 31, by e-mail at: [info@ladriaestate.com](mailto:info@ladriaestate.com), or by telephone at: +385 989778357.

HOW YOU CAN CONTACT THE SUPERVISORY AUTHORITY

Although we will do everything reasonably possible to resolve any situation concerning your personal data with which you are not satisfied, if you believe that we are not handling your personal data properly, you have the right to contact the supervisory authority: the Croatian Personal Data Protection Agency, AZOP: https://azop.hr/kontakt/

In Tar, 1 July 2025

PIRAMIDA d.o.o. Tar