Privacy Policy
Last updated: January 15, 2026
This Privacy Policy describes how Prexovix d.o.o. ("we", "us", or "our") collects, uses, and shares your personal data when you use our website prexovix.com and related services.
1. Data Controller
The data controller of your personal data is Prexovix d.o.o., with its registered office at Ulica Ivana Lučića 2a, 10000 Zagreb, Croatia, OIB: 78234561290. For all questions related to the protection of personal data, you can contact us at: privacy@prexovix.com.
2. Data We Collect
We collect the following categories of personal data: • Identification data: name, email address, phone number • Technical data: IP address, browser type, operating system, date and time of access • Usage data: pages visited, time spent on page, clicks • Communication data: content of messages you send us through the contact form or email • Cookie and similar technology data: as described in our Cookie Policy
3. Purpose of Data Processing
We process your personal data for the following purposes: • Providing and improving our real estate crowdfunding services • Responding to your inquiries and providing customer support • Sending notifications about projects and platform updates (with your consent) • Analyzing website usage to improve user experience • Fulfilling legal obligations, including HANFA regulatory requirements • Preventing fraud and ensuring platform security
4. Legal Basis for Processing
We base the processing of your data on the following legal grounds in accordance with the General Data Protection Regulation (GDPR) and the Croatian Act on Implementation of the General Data Protection Regulation: • Consent (Article 6(1)(a) GDPR) — for analytics and advertising cookies • Performance of a contract (Article 6(1)(b) GDPR) — for providing platform services • Legal obligation (Article 6(1)(c) GDPR) — for regulatory reporting • Legitimate interest (Article 6(1)(f) GDPR) — for analysis and service improvement
5. Data Sharing
We may share your personal data with the following recipients: • Service providers acting as our data processors (hosting, analytics, email) • Competent regulatory authorities (HANFA, Tax Administration) when required by law • Legal advisors and auditors within legal obligations We do not sell your personal data to third parties. Transfer of data outside the European Economic Area (EEA) is carried out only with appropriate safeguards, including EU standard contractual clauses.
6. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected: • Contact data: 3 years from the last communication • Technical data (logs): 12 months • Contractual data: 10 years from the end of the contractual relationship (legal obligation) • Consent data: until withdrawal of consent + 1 year for compliance demonstration
7. Your Rights
Under the GDPR and Croatian legislation, you have the following rights: • Right of access — request a copy of your personal data • Right to rectification — request correction of inaccurate data • Right to erasure — request deletion of your data ("right to be forgotten") • Right to restriction of processing — restrict processing in certain circumstances • Right to data portability — receive your data in a structured format • Right to object — object to processing based on legitimate interest • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing Requests can be sent to: privacy@prexovix.com. We will respond within 30 days. You have the right to lodge a complaint with the Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including data encryption in transit (TLS), access controls, regular security testing, and employee training on data protection.
9. Changes to the Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We recommend regular review of this page.