Welcome to our new website. We’re currently in beta. If you experience any issues, please reach out to office@homeinzagreb.com and we will manually process your booking.

HomeInZagreb – Privacy Policy

Last updated: January 1, 2026
Valid from: January 1, 2026

This Privacy Policy explains how Select Home j.d.o.o., operating under the brand HomeInZagreb (“HomeInZagreb”, “we”, “us”, “our”), collects, uses, shares, and protects your personal data when you use our website, services, and communication channels.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Croatian data protection laws.

By using our website, contacting us, creating an account, sending an inquiry, or entering into a tenancy arranged through HomeInZagreb, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is for information only. It does not replace any contract you sign with HomeInZagreb or with a landlord.

1. Data Controller

The data controller responsible for your personal data is:

Select Home j.d.o.o. – HomeInZagreb
Address: Svetice 24, 10000 Zagreb, Croatia
OIB: 76915079150
Email: office@homeinzagreb.com

When this Privacy Policy says “we” or “HomeInZagreb”, we are referring to this company.

2. What This Privacy Policy Covers

This Privacy Policy applies to:

  • visitors to our website,
  • users who create an account or send inquiries through our forms,
  • prospective tenants,
  • tenants who book or rent accommodation via HomeInZagreb,
  • landlords and partners who cooperate with us,
  • people who communicate with us by email, phone, or other channels.

It explains:

  • what personal data we collect,
  • how and why we use it,
  • with whom we share it,
  • how long we keep it,
  • your rights under GDPR.

3. Personal Data We Collect

We may collect and process the following categories of personal data, depending on how you interact with us:

3.1 Identification and Contact Data

  • First name, last name
  • Email address
  • Phone number
  • Home/billing address
  • Country of origin / nationality
  • Emergency contact (if provided)

3.2 Tenancy and Booking Data

  • Planned move-in and move-out dates
  • Preferred properties and type of accommodation
  • Information about your status (student, intern, employee, etc.)
  • University, school, company, or program details (if relevant)
  • Details of your booking, property code, rent conditions
  • Tenancy (Lease) Agreement details and related documents

3.3 Payment and Financial Data

  • Information necessary to issue offers and invoices (name, address, OIB or tax data if applicable)
  • Payment details and transaction information (amount paid, date, payment method, reference)
  • Bank details you share with us for refunds (e.g., IBAN, account holder name)

We do not store or process your full card data on our own servers if you pay through external payment providers. Those providers process card details according to their own security standards.

3.4 Communication Data

  • Emails and messages sent to us
  • Call notes or summaries where we document important information about your case
  • Attachments you send (e.g., ID scans, contracts, university letters)

3.5 Document and Signature Data

When we use HelloSign (or similar e-sign tools) to sign contracts, we may process:

  • Signed agreements and related documents
  • Signature data associated with you
  • Timestamps and technical signature metadata (provided by the e-signature platform)

3.6 Technical and Usage Data

When you use our website, we may collect:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Date and time of visits
  • Pages viewed and actions taken
  • Cookie identifiers and similar tracking technologies (see Cookies section below)

3.7 Marketing and Preference Data

  • Your newsletter or marketing email preferences
  • Your consent or opt-out choices
  • Information about which emails you opened or links you clicked (through our CRM / email tools, e.g., HubSpot), if you consent to such tracking where applicable

3.8 Special Categories of Data

We do not intentionally collect special categories of personal data (e.g., health data, religion, political opinions) unless you choose to provide such information yourself (for example, explaining a special medical need related to housing). If you share such information, we will handle it with extra care and only use it if strictly necessary for the specific purpose you requested (e.g., finding a property that matches an accessibility need).

4. How We Collect Your Data

We collect data in the following ways:

  1. Directly from you
    • When you fill out inquiry forms or contact forms on our website
    • When you send us an email or call us
    • When you create an account, send documents, or sign a contract
    • When you pay a service fee or deposit and provide payment details
  2. From landlords and partners
    • When landlords share information necessary to prepare contracts or manage a tenancy
    • When universities, schools, or partner organizations send us lists of participants or confirm your status (only in programs where such cooperation exists)
  3. Automatically through our website and tools
    • Through cookies and similar technologies
    • Through analytics and CRM tools (e.g., HubSpot)
    • Through email systems and storage tools (e.g., Google Workspace / Google Drive)
  4. From public or official sources (in specific cases)
    • For example, verifying company or address details when needed for invoicing and compliance.

5. Why We Use Your Data (Purposes & Legal Bases)

Under GDPR, we must have a legal basis for each purpose. We mainly rely on:

  • Performance of a contract (Article 6(1)(b) GDPR)
  • Compliance with legal obligations (Article 6(1)(c) GDPR)
  • Legitimate interests (Article 6(1)(f) GDPR)
  • Consent (Article 6(1)(a) GDPR), where applicable

Below is a summary of the main purposes:

5.1 To Respond to Inquiries and Pre-Contract Steps

Legal basis: Performance of contract / pre-contract steps; legitimate interest

  • Answer your questions about properties or conditions
  • Check availability and suitability of properties for your requested dates
  • Communicate with landlords about your inquiry
  • Prepare and send offers

5.2 To Manage Bookings and Tenancies

Legal basis: Performance of contract; legitimate interest

  • Process bookings, service fee payments, and deposits
  • Prepare and coordinate Tenancy (Lease) Agreements
  • Organize move-in and move-out
  • Communicate about rent, utilities, and obligations
  • Handle issues or disputes during the tenancy

5.3 To Comply with Legal and Regulatory Obligations

Legal basis: Legal obligation

  • Maintain accounting and tax records
  • Provide documentation to authorities when legally required
  • Cooperate with inspections or legal procedures
  • Respect Croatian and EU laws relevant to our business

5.4 To Communicate With You During Your Stay

Legal basis: Performance of contract; legitimate interest

  • Send important information about your tenancy, payments, and rules
  • Help coordinate with landlords if problems arise
  • Provide documentation that may support registration of stay (where applicable, and without replacing your own legal responsibilities)

5.5 To Improve Our Services and Website

Legal basis: Legitimate interest

  • Analyze website usage and inquiries to improve our offer and user experience
  • Understand what types of properties are most relevant to users
  • Maintain and secure our IT systems

5.6 To Send Marketing Communications

Legal basis: Consent and/or legitimate interest (soft opt-in where allowed)

  • Send you information about housing offers, updates, or related services
  • Invite you to related programs or opportunities (e.g., student housing or services connected with your stay)

You can opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting us.

5.7 To Use E-Signature Tools (HelloSign or similar)

Legal basis: Performance of contract; legitimate interest

  • Send agreements for electronic signature
  • Track signature status and keep signed copies
  • Ensure secure signing and proper documentation

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

  • make the website function correctly (necessary cookies),
  • remember user preferences (e.g., language),
  • analyze website traffic and usage (analytics cookies),
  • support our CRM and marketing tools (e.g., HubSpot cookies where applicable).

When you first visit the site, you will normally see a cookie banner (for example, provided via HubSpot or another provider) that:

  • informs you about the use of cookies, and
  • allows you to accept, reject, or customize certain categories of cookies, where this is required by law.

For more information about the types of cookies we use, please refer to our Cookie Policy (once published) and the settings in the cookie banner.

7. Who We Share Your Data With

We share your personal data only when necessary and with appropriate safeguards. We may share data with:

7.1 Landlords

We share data needed to:

  • present your profile and inquiry (e.g., name, status, dates),
  • prepare and sign Tenancy Agreements,
  • coordinate move-in and move-out,
  • manage issues during your stay.

7.2 Service Providers (Processors)

We use trusted third-party providers to help us operate our business, such as:

  • Google Workspace (G Suite) – for email, calendars, storage (Google Drive), and internal collaboration
  • HubSpot – for customer relationship management (CRM), contact forms, and email communications
  • HelloSign (or similar tools) – for electronic signature of agreements
  • IT support providers, website hosting, analytics tools
  • Accounting and invoicing software providers

These providers process data on our behalf under data processing agreements and are required to protect your personal data.

7.3 Professional Advisors and Authorities

Where necessary, we may share data with:

  • accountants, auditors, or legal advisors (for compliance and legal support),
  • banks and payment providers (to process and confirm payments and refunds),
  • public authorities (tax, police, courts, immigration offices) when required by law.

7.4 Universities, Schools, and Partner Organizations

In specific programs where HomeInZagreb cooperates with universities, schools, or organizations, we may:

  • share basic booking or attendance information with them,
  • receive confirmation of your status or participation from them.

This happens only when there is a clear relationship between your housing and that institution (for example, a student housing program).

We do not sell your personal data.

8. International Data Transfers

Some of our service providers (for example, Google, HubSpot, HelloSign) may process data on servers located outside the European Economic Area (EEA), including the United States.

When we transfer personal data outside the EEA, we do so only when:

  • it is necessary for providing our services, and
  • appropriate safeguards are in place, such as:
    • Standard Contractual Clauses (SCCs) approved by the European Commission,
    • or other mechanisms allowed by GDPR.

You can contact us if you would like more information about international transfers and the safeguards we use.

9. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes we collected it for, and to comply with legal requirements.

In practice, this means for example:

  • Inquiries and pre-contract data: usually up to 2 years after the last communication, if no contract is signed, unless a longer period is justified (for example, legal claims).
  • Contracts, booking records, and financial data: kept for the period required by Croatian accounting and tax law (often up to 10 years from the end of the year in which the transaction took place).
  • Communication data (emails, notes): usually kept as long as it is relevant to your booking or tenancy and for a reasonable period afterward for evidence and support.
  • Marketing data: kept as long as you do not withdraw your consent or object, and as long as it is relevant.
  • Website logs and technical data: kept for a shorter period (usually up to 1 year), unless security incidents or legal obligations require longer retention.

When data is no longer needed, we will:

  • delete it,
  • anonymize it, or
  • archive it securely where required by law.

10. How We Protect Your Data

We take appropriate technical and organizational measures to protect personal data, including:

  • access controls and user permissions,
  • secure passwords and authentication for our systems,
  • encryption and secure connections where appropriate,
  • regular updates and security maintenance of software and tools,
  • staff awareness and instructions on data protection and confidentiality.

However, no system is entirely risk-free. We cannot guarantee absolute security of data transmitted over the internet, but we work to minimize risks and react appropriately if an incident occurs.

11. Your Rights Under GDPR

Subject to legal conditions and limitations, you have the following rights regarding your personal data:

  1. Right of access – to know whether we process your data and to receive a copy.
  2. Right to rectification – to ask us to correct inaccurate or incomplete data.
  3. Right to erasure (“right to be forgotten”) – to request deletion of your data when it is no longer needed, when you withdraw consent (where consent is the basis), or when processing is unlawful.
  4. Right to restriction of processing – to request that we limit how we use your data in certain situations (e.g., while accuracy is being checked).
  5. Right to data portability – to receive personal data you provided in a structured, commonly used, machine-readable format and to transmit it to another controller where processing is based on consent or contract and carried out by automated means.
  6. Right to object – to object to processing based on our legitimate interests or for direct marketing.
  7. Right to withdraw consent – where processing is based on your consent, you can withdraw your consent at any time. This does not affect the lawfulness of processing before withdrawal.

If you wish to exercise any of these rights, please contact us at:

office@homeinzagreb.com
Subject line: “Data Protection Request”

We may need to verify your identity before fulfilling your request.

12. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of data protection laws, you have the right to lodge a complaint with the competent supervisory authority.

In Croatia, the supervisory authority is:

Agencija za zaštitu osobnih podataka (AZOP)
(Croatian Personal Data Protection Agency)

You may also contact the supervisory authority in your country of residence within the EU/EEA.

We would, however, appreciate the chance to address your concerns first, so we encourage you to contact us directly before approaching a supervisory authority.

13. Data About Minors

Our services are mainly aimed at adults (students and young professionals 18+).

If we become aware that we have collected personal data from a minor without proper involvement of a parent or legal guardian where required, we will:

  • take appropriate steps to delete or anonymize such data, or
  • ensure appropriate consent or authorization is in place.

If you are a parent or guardian and believe your child has provided us with data without your knowledge, please contact us.

14. Automated Decision-Making

HomeInZagreb does not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you.

If this changes in the future, we will update this Privacy Policy and provide the legally required information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes in our services,
  • changes in the tools and providers we use,
  • changes in legal or regulatory requirements.

When we do:

  • we will publish the updated version on our website with a “Last updated” date, and
  • where appropriate, we may inform you by email or website notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.

16. Contact

If you have any questions, requests, or concerns about this Privacy Policy or our data protection practices, please contact:

HomeInZagreb
(brand of Select Home j.d.o.o.)
Address: Svetice 24, 10000 Zagreb, Croatia
OIB: 76915079150
Email: office@homeinzagreb.com