Privacy policy

1. Data controller

The controller of personal data is KALAMITA NEKRETNINE j.d.o.o., Tijardovićeva 18, Split, OIB (Croatian tax ID) 12425179749 (hereinafter: the Mediteran Gold agency). For any questions about personal data, please contact us via the Contact page.

2. What data we process and why

Enquiry via the form. When you send an enquiry, we process your first and last name, email address, message and, if you enter it, your contact number. For property enquiries we also record which property the enquiry concerns. Together with the enquiry, the IP address, browser details, the address of the page from which the enquiry was sent, and the date and time are technically recorded. Name, email and message are mandatory because we cannot reply without them; the contact number is optional.

The purpose is to respond to your enquiry and, if you wish, to arrange a viewing or brokerage. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) of the General Data Protection Regulation, GDPR) and our legitimate interest in responding to enquiries and protecting the forms from abuse and spam (Art. 6(1)(f)). Technical data is used only for security and to prevent abuse.

Telephone and email. If you call us or write to us directly, we process the data you provide to us yourself, for the same purpose and on the same legal basis.

We do not send newsletters or promotional messages, we do not profile visitors and we do not use automated decision-making.

3. Cookies and tracking

This website does not set cookies for visitors and does not use analytics, advertising, tracking or third-party content (maps, videos, external fonts). Cookie consent is therefore not required. Technical login cookies are used only by agency staff in the website administration.

As on any website, the server records the IP address and time of access in security logs. This is necessary for the operation and protection of the website (legitimate interest).

4. Recipients of data

Enquiries are received by persons employed by or working for the agency. We do not sell data and do not provide it for others’ marketing purposes. Data may be processed only by our hosting and email service providers, as processors acting on our instructions and under a data processing agreement. We do not transfer data to third countries, unless necessary for the operation of those service providers and subject to appropriate safeguards prescribed by the GDPR (e.g. standard contractual clauses).

5. Retention period

We keep enquiries and correspondence for up to two years from the last communication, and then delete them. If an enquiry leads to a Brokerage Agreement, we keep the data for as long as required by regulations (e.g. on real estate brokerage and accounting). Server security logs are kept by the hosting provider in accordance with its short retention periods.

6. Your rights

You have the right to request access to your data, its rectification or erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. If processing is based on consent, you can withdraw it at any time. Send your request via the Contact page; we will respond within one month at the latest.

7. Complaint to the supervisory authority

If you believe that the processing of your data violates regulations, you can lodge a complaint with the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

8. Changes

We may update these rules; the version published on this page applies. Last updated: 4 November 2026.