Privacy Policy
Your privacy matters to us. This policy explains how we process your data when you use Kvadratko and send property enquiries. We do not sell your personal data.
Last updated: October 25, 2026
1. Controller
Service provider: Yurgi One d.o.o., Pavlenski put 5O, 10000 Zagreb, Croatia, OIB 95994153122. Contact: [email protected].
2. What we process
You can browse listings without an account. When you send an enquiry, we process the contact details and message you enter, whether or not you are signed in. For registered users, we also process data needed to provide the service, such as account email and listing content. We process technical security data to protect the service.
We do not sell personal data to third parties.
2.1. Delivering and handling enquiries
When you send an enquiry or request a callback, we send your message and contact details directly to the property owner or the agency representing them.
If the agency uses the software through which the listing was supplied to Kvadratko, your enquiry and contact details may also reach the agency in that same software so they can handle your enquiry about that property.
Your data is used solely for communication about that property. We do not sell it or use it for marketing.
2.2. Market analysis notifications
If you leave your email address on Insights to be notified about new market analyses, we process that address, the language and page you subscribed from, the time of subscription and the version of the consent text you saw. The legal basis is your consent (Article 6(1)(a) GDPR).
We use the address only to send those notifications, a few times a year. Messages contain no open-tracking pixel and no tracked links. They are sent through Postmark, an email delivery service acting as our processor.
You can withdraw consent at any time via the unsubscribe link in every message or by writing to [email protected]. After you unsubscribe we keep the address and the date as a record not to email you again; you can request deletion of that record at the same address.
3. Cookies
We use only necessary cookies for authentication and platform security.
| Cookie | Purpose | Duration |
|---|---|---|
| .kvadratko.auth | User sign-in session | Session / remember-me |
| .AspNetCore.Antiforgery.* | CSRF protection | Session |
| .AspNetCore.Mvc.CookieTempDataProvider | Temporary UI messages (e.g. post-action notices) | Session |
| cf_clearance | Cloudflare anti-bot and DDoS protection | Up to 1 year |
4. Retention and your rights
Account and listing data are retained while your account or listings are active, unless legal obligations require longer storage.
Deleting your account does not recall enquiries already delivered to the property owner, the agency representing them or the software they use to handle enquiries. To request deletion of enquiry data, contact us at [email protected].
You may request access, correction, deletion, or objection by emailing [email protected].