Privacy Policy

Regent d.o.o. with its registered office in Zagreb, Nova Ves 17, personal identification number (OIB): 81223221931 (hereinafter: "Regent" or "Data Controller") pays special attention to the protection of personal data and processes them in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data - General Data Protection Regulation (hereinafter: "General Regulation").

Terms

For the purposes of this Privacy Policy, the following terms have the following meanings:

"Personal data" means any information relating to an identified or identifiable natural person (an individual); an identifiable individual is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of that individual;

"Processing" means any operation or set of operations which is performed on data or on sets of data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

"Data subject" is a natural person (individual) whose identity can be determined directly or indirectly, in particular on the basis of a name, identification number, location data, an online identifier or with the help of one or more features specific to his physical, physiological, mental, economic, cultural or social identity;

"Data controller" is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Purpose and legal basis for the processing of personal data

Regent processes only those data that are necessary to achieve a specific legal purpose and only if and to the extent that at least one of the following is met:

1. Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract, namely:

   • - for the purpose of fulfilling obligations from concluded brokerage agreements or taking actions at the order of the data subject;
   • - for the purpose of fulfilling obligations from concluded business cooperation agreements.

   Personal data collected for this purpose are: name and surname, address, OIB, e-mail address, home and/or mobile phone number, ______, ______. The personal data in question are collected directly from the data subject, as well as by inspecting public registers (e.g. Land Registry, Cadastre, etc.). The data subject is not obliged to provide the personal data in question, however in that case Regent will not be able to conclude a contract and/or perform certain actions related to the performance of the contract and/or provide the requested services. These personal data are kept for a maximum of 6 years from the termination of the contractual relationship and/or the performance of the requested action, unless a longer retention period is specified by a specific applicable regulation or if the data in question are evidence in a judicial, administrative, arbitration or other equivalent procedure.

2. Processing is necessary for compliance with the legal obligations of the Data Controller, namely:

   • - in order to act in accordance with the obligations prescribed by the Act on Real Estate Brokerage, the Act on the Prevention of Money Laundering and Terrorist Financing, the General Regulation and other regulations related to the business activity of Regent.

   Personal data collected for this purpose are: name and surname, address, OIB, date and place of birth, data on the identification document, data on political exposure, ______. Regent collects personal data on this legal basis exclusively for the purposes and to the extent necessary to fulfill its legal obligations and keeps them for the period prescribed by applicable regulations. In the event of entering into a business relationship with Regent, the data subject will be obliged to provide Regent with personal data that Regent is obliged to collect in view of the specific relationship in accordance with applicable regulations. If the data subject refuses to provide the requested personal data, Regent will not be able to conclude a contract and/or fulfill its obligations and/or provide the requested services.

3. Processing is necessary for the purposes of the legitimate interests of Regent or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, namely:

   • - for the protection of persons and property, video surveillance of Regent's business premises is carried out.

   Personal data collected for this purpose are: video recordings of persons entering and leaving Regent's business premises, i.e. data on the presence of persons in the area covered by the recording. Video recordings may be submitted to the competent authorities (police, court) at their request if this is necessary for the conduct of proceedings on the basis of special regulations. Video recordings are kept for a maximum of 6 months, unless a longer retention period is specified for a particular case by special regulations or if they are evidence in a judicial, administrative, arbitration or other equivalent procedure.

4. The data subject has given consent to the processing of his or her personal data for one or more specific purposes, namely:

   • - by visiting Regent's website (www.regent.hr) via the online interface, the data subject may give consent to the processing of personal data through the use of so-called cookies for the purpose of better

5. Functioning of all features of the website and enabling a better user experience (see below). The data subject may at any time in the same way withdraw the given consent, however this does not affect the lawfulness of the processing based on the consent before it was withdrawn.

In any other cases of personal data processing, Regent will inform the data subject in advance about this processing and provide him with all information about the details of the processing in accordance with the provisions of the General Regulation.

Cookies

This website uses cookies. A cookie is a small text file with information about user activities and settings and is stored on his device when visiting websites. A cookie usually consists of several data: the internet domain of origin, user identification, the expiration date of the cookie and security tags. Cookies usually store user settings related to the website, such as preferred language or address. Certain information that cookies store also serves to track user preferences for the purpose of improving services, targeted marketing, etc. During the next visit to the same website on the same device, the browser sends the cookie and the information stored in it to the web page that generated them (first-party cookie) or to another web page to which the cookie relates (third-party cookie). This allows the site to display information tailored to your needs.

Regent's website uses the following types of cookies:

• Necessary (technical, mandatory) cookies - cookies without which the website cannot function or its functioning would be associated with significant difficulties, and as such cannot be excluded and the user's consent is not required for the use of this type of cookie. However, they can be disabled in the settings of the internet browser on the user's device, but in that case some parts of the site will not work. This type of cookie does not store any information that could identify the user.

• Functional cookies - improve functions and personalization by recording choices and customizations made during the visit to the website. These cookies are used to store, for example, the choice of preferred language. These cookies can be disabled.

• Analytical (statistical) cookies - collect information about how visitors use the website, for example, which pages visitors visit most often, for the purpose of internal research on possible ways to improve the service provided to all users. The information collected by these cookies is anonymous and is used to improve the functioning of the website. These cookies can be disabled.

Functional and analytical cookies can be rejected (disabled) during the first visit to Regent's website, and later re-enabled by selecting the "Cookie Settings" menu at the bottom of the page and vice versa.

Data forwarding

The collected personal data are not transferred to third countries, however they may be forwarded to third parties in cases where this is determined by a binding regulation (e.g. a request from a competent authority), when this is necessary for the performance of a concluded contract with the data subject or when Regent has contracted with third parties as subcontractors to perform a certain job as a processor (e.g. IT support, accounting service, provider of postal and other delivery services, etc.).

Regent will entrust certain tasks related to the processing of personal data only to processors who provide sufficient guarantees regarding the implementation of appropriate measures for the protection of personal data and will conclude a contract with them in which mutual rights and obligations will be regulated in accordance with the provisions of the General Regulation.

Security of personal data

Regent collects and processes personal data in a way that ensures appropriate security and confidentiality in their processing and enables the effective application of the principles of data protection, data minimization, storage limitation, etc.

Regent undertakes appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized use, access or access to data, theft or any other violation and misuse, which includes, among other things:

• implementation of measures to prevent unauthorized use of IT systems (such as password protection) with regular updating of programs (software) and antivirus protection;
• restricting access to media for storing personal data in electronic form only to authorized persons who can access the data only by entering a username and password;
• restricting physical access to premises where documents containing personal data are stored only to authorized persons;
• obliging all employees to keep personal data by signing a confidentiality statement;
• obliging all subcontractors to protect the personal data of data subjects through appropriate contractual clauses.

Retention period of personal data

Personal data are kept for as long as necessary for the execution of the lawful purpose for which they were collected, after which they are permanently deleted or anonymized, and at the latest until the expiration of the deadlines prescribed by applicable regulations.

Rights of data subjects

Data subjects have the right to:

• the right to access the personal data of the data subject processed by Regent and information related to the processing in question prescribed by the General Regulation;
• the right to correct inaccurate personal data relating to him, including the right to supplement incomplete personal data;
• the right to erasure of personal data relating to him without undue delay if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed and in other cases prescribed by the General Regulation;
• the right to restriction of processing if one of the conditions prescribed by the General Regulation is met;
• the right to data portability, i.e. the right to receive personal data relating to him in a structured, commonly used and machine-readable format and the right to transfer this data to another controller without interference from Regent, if the processing is based on consent or is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject before concluding a contract, and the processing is carried out by automated means.
• the right to object to the processing of their personal data or the right to report a suspicion of a violation of their personal data, which right the data subject may exercise by contacting Regent via the contact information published on this website or by contacting the supervisory authority

Contact details

In case of questions regarding the processing of personal data by Regent, you can contact us via the contact information published on Regent's website.

Changes to the privacy policy

Regent reserves the right to amend and/or supplement this Privacy Policy from time to time, and it will be available at all times on Regent's website.