Privacy Policy

Introduction

AstralRidge d.o.o. ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our website and services. We are the data controller for the personal data we collect about you.

Data Collection

The data we collect includes information you provide directly to us and information we collect automatically when you use our website:

• Personal identification information (name, email address, phone number)
• Company information and business details
• Financial information relevant to mortgage applications
• Website usage data and analytics information
• Communication records and correspondence
• Technical data including IP address, browser type, and device information

How We Use Your Information

We use of your data is based on legitimate business interests and, where required, your consent. We use your information to:

• Provide mortgage lending services and financial consultation
• Process and evaluate loan applications
• Communicate with you about our services and your enquiries
• Comply with legal and regulatory requirements
• Improve our website and services through analytics
• Send marketing communications (with your consent)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We may share your personal data with:

• Third-party service providers who assist us in delivering our services
• Regulatory authorities and government agencies as required by law
• Professional advisors including lawyers, accountants, and auditors
• Credit reference agencies and financial institutions for loan processing

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Financial records related to mortgage applications are typically retained for seven years in accordance with Croatian financial regulations. Marketing data is retained until you withdraw consent or for a maximum of three years.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption, secure servers, access controls, and regular security assessments.

International Data Transfers

As we operate within the European Union, your data is primarily processed within the EU. If we transfer data outside the EU, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) if you believe your data protection rights have been violated. Contact details are available on their official website.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.