Last updated: January 1, 2026
Valid from: January 1, 2026
This Privacy Policy explains how Select Home j.d.o.o., operating under the brand HomeInZagreb (“HomeInZagreb”, “we”, “us”, “our”), collects, uses, stores and protects personal data when you use our website, submit an inquiry, create an account, book accommodation, communicate with us, or use our services.
HomeInZagreb processes personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
By using our website or services, you acknowledge that your personal data may be processed as described in this Privacy Policy.
1. Data Controller
The data controller is:
Select Home j.d.o.o.
Brand: HomeInZagreb
Svetice 24
10000 Zagreb, Croatia
OIB: 76915079150
Email: office@homeinzagreb.com
Website: www.homeinzagreb.com
2. What Personal Data We Collect
Depending on how you use our website and services, we may collect and process different types of personal data.
2.1 Identification and Contact Data
We may collect your first name, last name, email address, phone number, country of residence, nationality, date of birth where required, and identification or document details where needed for booking, contract, payment, residence-related, accounting or legal purposes.
2.2 Booking and Housing-Related Data
We may collect information related to your housing search, inquiry or booking, including selected property, preferred move-in and move-out dates, number of tenants, rental duration, budget, tenant profile information, study or work information relevant to the rental, booking status, booking history, move-in information, move-out information and communication related to the stay.
If you complete move-in, move-out, deposit, property condition or similar forms, we may also process the information, photos, videos or documentation submitted through those forms.
For approved or confirmed bookings, we may collect and process additional booking-related information such as date of birth, nationality, country of residence, reason of stay, study or work information, university or company information, rental duration and other details where necessary to prepare or coordinate the tenancy agreement, verify booking details, support residence-registration related documentation, communicate with the landlord/accommodation provider, manage payments, issue invoices, handle refunds or disputes, and provide booking-related administrative support.
2.3 Payment and Financial Data
We may process information related to service fee payments, security deposit payments, rent or utility payment confirmations if you send them to us, bank transfer confirmations, payment reference numbers, invoice details, payer name, billing details, refund information, bank account details where necessary, and payment-related communication.
If card or online payments are available, payments may be processed through Stripe or another external payment provider. HomeInZagreb does not store full card numbers or full card security details. Stripe or the relevant payment provider may process payment, authentication, fraud-prevention and transaction-related data according to its own terms and privacy documentation.
HomeInZagreb may use payment records, receipts, invoices, booking confirmations, communication records, Terms acceptance records and related documentation for payment confirmation, accounting, fraud prevention, refund handling, chargeback/dispute response and protection of legal rights.
If payment is made by bank transfer, payment data is processed by the relevant banks and may also be processed by HomeInZagreb for booking confirmation, accounting, refund, support and legal purposes.
2.4 Communication Data
We may process communication records, including emails, website form submissions, HubSpot records, support messages, phone or WhatsApp communication where applicable, internal notes related to inquiries or bookings, and communication related to move-in, stay, move-out, complaints, deposits or support requests.
2.5 Technical and Website Data
When you use our website, we may process technical data such as IP address, browser type, device information, operating system, website usage data, cookies and similar technologies, account login data, pages visited and actions taken on the website.
2.6 Landlord and Property-Related Data
For landlords, property owners and property representatives, we may process name and contact details, property address and listing details, ownership or management information, rent, deposit, utility and availability information, property descriptions, photos, videos, 360 tours, payment or payout details, communication records and cooperation details.
3. How We Collect Personal Data
We collect personal data when you visit our website, create an account, submit an inquiry, send a booking request, pay a service fee, pay a security deposit, send payment confirmations, communicate with us, sign or receive documents, complete forms, contact us for support, provide property information as a landlord or interact with our website and online tools.
We may also receive personal data from tenants, landlords, parents, guardians, third-party payers, companies, universities, colleges, payment providers, electronic signature providers, professional advisors or public authorities where relevant to the service.
4. Why We Process Personal Data
We process personal data for legitimate and necessary business, contractual, legal and operational purposes.
4.1 Inquiry and Booking Management
We process personal data to respond to inquiries, check property availability, present tenant requests to landlords, communicate offers and rental conditions, manage booking steps, confirm bookings, coordinate tenancy agreements and organize move-in or move-out arrangements.
4.2 Payment and Accounting
We process personal data to manage service fee payments, security deposit payments, bank transfers, Stripe or other payment provider transactions where available, invoices, accounting records, refund processing, payment confirmations, fraud prevention and legal or tax obligations.
4.3 Contract and Rental Support
We process personal data to prepare or coordinate tenancy agreements, support electronic signature processes, keep written records, coordinate communication between tenant and landlord, support move-in and move-out documentation and assist with deposit-related communication.
4.4 Customer Support and Communication
We process personal data to answer questions, send important booking, payment, contract, move-in, move-out or support information, provide reminders, help with communication between tenants and landlords, and handle complaints, disputes or reported issues.
4.5 Visa, Residence and Stay Registration Information
Tenants are responsible for informing themselves about any visa, residence, stay registration, address registration, study, work, travel or other administrative requirements that may apply to their stay in Croatia.
HomeInZagreb may process limited information related to a tenant’s stay, accommodation address or landlord support option where this is necessary for booking, communication or documentation. However, HomeInZagreb does not provide legal or immigration advice and does not guarantee the decision, requirements or processing of MUP, embassies, consulates, universities, employers or any other authority.
Tenants should always check official sources directly, including MUP, the relevant Croatian embassy or consulate, their university, employer or another competent authority.
4.6 Website Operation and Improvement
We process personal data to operate the website, maintain user accounts, improve website functionality, measure analytics and performance, prevent misuse, spam, fraud or unauthorized access, ensure security and troubleshoot technical issues.
4.7 Marketing and Relationship Management
Where permitted, we may process personal data to send relevant information about our services, communicate with tenants, landlords, partners, universities, colleges and companies, improve our content and guides, and manage advertising or remarketing where consent is required and given.
5. Legal Bases for Processing
Depending on the situation, we process personal data based on one or more legal bases.
5.1 Contract or Steps Before Contract
We process data where necessary to respond to inquiries, prepare offers, coordinate bookings, support tenancy agreements and provide services requested by users.
5.2 Legal Obligation
We process data where required for accounting, tax, legal, regulatory or compliance reasons.
5.3 Legitimate Interest
We process data for legitimate business purposes such as communication, customer support, fraud prevention, service improvement, record keeping, dispute management, website security and protecting our legal rights.
5.4 Consent
Where required, we rely on consent for certain cookies, marketing communication or optional data processing.
You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing that took place before withdrawal.
6. Service Providers and Third-Party Tools
We may use third-party service providers and tools to operate our business and services.
These may include:
- Google Workspace for email, documents, files, spreadsheets and internal collaboration.
- HubSpot for CRM, forms, communication, contact management and customer support.
- Stripe or other payment providers for card or online payments where available.
- Banks for bank transfer payments, payment confirmations and refunds.
- HelloSign / Dropbox Sign or similar tools for electronic signatures.
- WordPress, website hosting providers and website plugins.
- Analytics, security and performance tools.
- Accounting and bookkeeping service providers.
- Legal, tax, IT and professional advisors.
These providers may process personal data only where necessary for the relevant service and subject to applicable data protection requirements.
7. Sharing Personal Data
We may share personal data with tenants, landlords, property owners, companies, universities, colleges, payment providers, banks, electronic signature providers, accounting providers, legal advisors, IT providers, website providers, professional advisors, public authorities or other parties where necessary for booking, contract performance, payment processing, customer support, legal compliance, dispute management, service operation or protection of legal rights.
For example, tenant information may be shared with a landlord so the landlord can review an inquiry, approve a booking, prepare a tenancy agreement or support move-in arrangements.
Landlord information may be shared with tenants where necessary for booking, contract, payment, move-in, maintenance, residence-related support or communication.
We do not sell personal data.
8. International Transfers
Some service providers may process data outside the European Economic Area.
Where this happens, we rely on appropriate legal safeguards where required, such as adequacy decisions, Standard Contractual Clauses or other mechanisms required by applicable data protection law.
9. Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including booking, contract, accounting, tax, legal, dispute-resolution and operational purposes.
Inquiry, booking and communication records may be kept for as long as needed for customer support, booking history, legitimate business records and legal protection.
Contract, payment, invoice and accounting records may be kept for the period required by applicable accounting, tax and legal rules.
Account data may be kept until the account is deleted or no longer needed, subject to legal retention requirements.
Marketing data may be kept until consent is withdrawn or communication is no longer relevant.
Cookie and technical data are kept according to our Cookie Policy and cookie settings.
10. Security
We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse, alteration or disclosure.
These measures may include controlled access, password protection, secure service providers, internal access restrictions, backups, user authentication and appropriate data-handling procedures.
No website, email system or online service can be guaranteed to be completely secure. Users should also protect their own devices, passwords and accounts.
11. Your Rights
Subject to applicable law, you may have the right to request access to your personal data, correction of inaccurate or incomplete data, deletion of your data, restriction of processing, objection to processing based on legitimate interest, data portability and withdrawal of consent where processing is based on consent.
You may also have the right to lodge a complaint with the competent data protection authority.
In Croatia, the competent authority is the Croatian Personal Data Protection Agency, known as AZOP.
To exercise your rights, contact us at:
We may need to verify your identity before responding to a request.
12. Cookies
Our website uses cookies and similar technologies for essential website functions, analytics, security, user experience, performance and, where applicable, marketing.
Some cookies are necessary for the website to function. Others may require your consent.
More information is available in our Cookie Policy and cookie consent banner.
13. Children and Minors
Our services are mainly intended for adults.
If a user is under 18, a parent or legal guardian should be involved in the booking and rental process.
We do not knowingly collect personal data from minors without appropriate involvement of a parent, guardian or responsible adult where required.
14. Links to Other Websites
Our website may contain links to third-party websites, public authorities, universities, service providers or other external sources.
We are not responsible for the privacy practices, content or security of third-party websites.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical or business changes.
The updated version will be published on our website with a new “Last updated” date.
If you continue using our website or services after changes take effect, you are considered to have accepted the updated Privacy Policy.