Last updated: 15 January 2026
Privacy Policy
This Privacy Policy describes how Oryveniq d.o.o. (hereinafter: 'Oryveniq', 'we', 'us') collects, uses and protects the personal data of visitors to the website oryveniq.com and users of our real estate crowdfunding platform in accordance with Regulation (EU) 2016/679 (GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation.
1. Data controller
The controller of personal data is Oryveniq d.o.o., Ulica grada Vukovara 269D, 10000 Zagreb, OIB: 63421875098, registered at the Commercial Court in Zagreb under MBS: 081546923. Contact email for privacy matters: privacy@oryveniq.com.
2. Data we collect
Through the subscription form we collect your first name, last name and email address. When you visit the site we collect technical data: IP address, browser type, device language and time of visit. If you access the investment platform we additionally collect data required for identity verification (KYC) in accordance with anti-money-laundering regulations.
3. Purpose of processing
We process data in order to send notifications about the real estate crowdfunding projects you have expressed interest in, to fulfil legal obligations under Regulation (EU) 2020/1503 and anti-money-laundering rules, for website traffic statistics, and to protect the rights and property of Oryveniq.
4. Legal basis
We base processing on your consent (Art. 6(1)(a) GDPR) for project notifications, on contract performance (point (b)) for platform users, on legal obligation (point (c)) for KYC and tax duties and on legitimate interest (point (f)) for traffic measurement and system protection.
5. Retention period
Subscription form data is kept until you withdraw consent or until we consider it no longer necessary, for a maximum of three years from the last interaction. Investor data is kept for at least ten years after the end of the business relationship in line with anti-money-laundering rules.
6. Recipients of data
We share data with service providers who help us run the business: email infrastructure providers, our accounting service, statutory auditors and the deposit-taking bank. We do not sell personal data to third parties.
7. Transfers outside the EEA
As a rule we process personal data within the European Economic Area. If we exceptionally use providers from third countries, we enter into the European Commission's Standard Contractual Clauses to secure an adequate level of protection.
8. Your rights
At any time you have the right to access, rectification, erasure, restriction of processing, portability and objection. You may withdraw consent by writing to privacy@oryveniq.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr).
9. Security
We apply technical and organisational protection measures: encryption of data in transit and at rest, two-factor authentication, regular access reviews and staff training on personal data handling.