Privacy Policy
Last updated: January 15, 2026.
1. Introduction
Qenlito d.o.o., with its registered office in Zagreb, Vukovarska ulica 34, 10000 Zagreb, Croatia (hereinafter: 'Qenlito', 'we' or 'our company'), is the controller of your personal data. This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our real estate crowdfunding platform.
We manage the processing of personal data in accordance with the General Data Protection Regulation (GDPR), the Act on the Implementation of the General Data Protection Regulation (OG 42/18), and other applicable regulations of the Republic of Croatia.
2. Personal data we collect
We collect the following categories of personal data: identification data (name, surname, date of birth), contact data (email address, phone number, postal address), financial data (bank account information, investment history), and technical data (IP address, browser type, operating system).
We collect personal data directly from you during registration on the platform, use of our services, communication with us, or when filling out forms on our website.
3. Purposes of data processing
We process your personal data for the following purposes: providing and managing platform services, processing investments and financial transactions, fulfilling legal obligations (including anti-money laundering and counter-terrorism financing), communicating with you about your account and investments, improving our services and user experience, and sending notifications about new projects and investment opportunities with your consent.
4. Legal basis for processing
The processing of your personal data is based on the following legal grounds: performance of a contract — processing is necessary to provide the services you have requested; legal obligation — processing is necessary to fulfill our legal obligations under Croatian financial regulations; legitimate interest — processing is necessary for our legitimate interests, such as platform improvement and security; consent — for certain processing activities, we seek your explicit consent.
5. Data sharing
We may share your personal data with the following recipients: service providers who assist us in operating the platform (hosting, payment processing, analytics), regulatory bodies and competent authorities when required by law, financial institutions for the purpose of processing transactions, and professional advisors (lawyers, auditors) when necessary to protect our rights.
We do not sell or rent your data to third parties for marketing purposes.
6. Data retention
We retain your personal data for as long as necessary to fulfill the purposes for which they were collected. Data related to your user account is retained during the duration of your relationship with us and for an additional five years after account closure, in accordance with statutory retention periods.
Financial data and documentation are retained in accordance with the Accounting Act and tax regulations, which may amount to up to eleven years.
7. Your rights
As a data subject, you have the right to: access your personal data, rectification of inaccurate data, erasure of data ('right to be forgotten'), restriction of processing, data portability, objection to processing, and withdrawal of consent at any time.
To exercise your rights, please contact: privatnost@qenlito.com. If you believe your rights have been violated, you have the right to file a complaint with the Croatian Personal Data Protection Agency (AZOP).
8. Security measures
We implement appropriate technical and organizational measures to protect your personal data, including data encryption during transmission (SSL/TLS), access controls, regular security audits, and employee training on data protection.
9. Changes to privacy policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes through our platform or by email. We recommend that you periodically check this page for updated information.
10. Contact
For all questions related to the processing of your personal data, please contact: Qenlito d.o.o., Vukovarska ulica 34, 10000 Zagreb, Croatia. Email: privatnost@qenlito.com.