San Patrik Real Estate is a brand operated by Nobilis Expo d.o.o., a licensed real estate agency based in Zagreb, Croatia.

This Privacy Policy explains how we collect, use and protect personal data when you use our website or contact us in relation to our services.

We are committed to protecting your privacy and handling your personal data with discretion and in accordance with applicable laws of the Republic of Croatia and the European Union, including the General Data Protection Regulation (GDPR).

1. Data Controller

Nobilis Expo d.o.o.
San Patrik Real Estate
Zagreb, Croatia
VAT ID: HR53047404709
Email: info@sanpatrik.eu

This company acts as the data controller for personal data processed through this website.

For any privacy related questions, you may contact us at:
info@sanpatrik.eu

2. What data we collect

We may collect and process the following personal data:
- name and surname
- email address
- phone number
- property related information
- any information submitted via contact forms
- communication records

We may also automatically collect certain technical data such as:
- IP address
- browser type
- device type
- pages visited
- time of access

This information is used for website functionality, security and analytics.

3. Purpose of processing

We process personal data for the following purposes:
- esponding to enquiries
- providing real estate advisory and brokerage services
- property valuation requests
- client communication
- transaction preparation and execution
- improving our services
- sending relevant updates or opportunities where consent is given
- legal and regulatory compliance

We do not sell personal data to third parties.

4. Legal basis for processing

Personal data is processed based on one or more of the following legal grounds:
- user consent
- performance of pre-contractual or contractual obligations
- legitimate interest in providing and improving services
- legal obligations

You may withdraw consent at any time by contacting us.

5. Data sharing

We may share personal data only when necessary with:
- legal advisors
- notaries
- banks
- technical service providers
- CRM and hosting providers
- marketing or IT service providers

All partners are required to maintain confidentiality and comply with data protection laws.
We do not share data for unrelated marketing purposes.

6. International transfers

Data is primarily processed within the European Union.
If data is transferred outside the EU, this is permitted only with appropriate safeguards in accordance with the GDPR, including standard contractual clauses and technical protection measures.

7. Data retention

We retain personal data only as long as necessary for the purpose for which it was collected, or as required by law.

You may request deletion of your data at any time by contacting us.

8. Your rights

You have the right to:
- access your personal data
- request correction
- request deletion
- restrict processing
- object to processing
- request data portability

You also have the right to file a complaint with the Croatian Personal Data Protection Agency (AZOP).

9. Security measures

We take appropriate technical and organisational measures to protect personal data, including:
- secure servers
- SSL encryption
- restricted access
- confidentiality protocols

While we apply high standards of protection, no internet transmission can be guaranteed fully secure.

10. Cookies

Our website may use cookies and similar technologies to improve functionality and user experience.
Detailed information is available in our Cookie Policy.

11. Third-party services

Our website may use trusted third-party tools for:
- analytics
- CRM
- communication
- website functionality

These providers process data only as necessary and in compliance with GDPR.

12. Children

This website is not intended for persons under the age of 16.
We do not knowingly collect data from minors.

13. Changes to this policy

We reserve the right to update this Privacy Policy at any time.
The latest version will always be available on our website.

Continued use of the website implies acceptance of the updated policy.