Privacy Policy
Contents
1. Data controller
The data controller within the meaning of the GDPR for the processing of personal data on this website is:
Szabo Immobilien d.o.o.
Mletačka ulica 12
52100 Pula, Croatia
Email: support@estatehome.app
2. Data we collect
We collect and process the following personal data:
- Contact form: Name, email address, property region, number of units, message text (all fields optional except name and email)
- Registration data (dashboard): First name, last name, email address, hashed password (the plaintext password is never stored)
- Profile data: Language preference, marketing opt-in
- Usage data: Time and type of sign-in, session information
- Technical data: IP address (when accessing the page, processed by the hosting provider), browser type (in server logs only)
- WhatsApp messages: Phone number and message content, only when you actively contact us via WhatsApp
- Property data: Information you enter into the dashboard about properties, revenue and bookings
3. Purposes and legal bases
- Pre-contractual measures (Art. 6(1)(b) GDPR): Handling your contact form inquiry, sending the potential analysis
- Performance of a contract (Art. 6(1)(b) GDPR): Providing the dashboard, user authentication, sending transactional emails
- Legitimate interest (Art. 6(1)(f) GDPR): Platform security, fraud prevention, technical operation of the infrastructure
- Consent (Art. 6(1)(a) GDPR): Sending marketing emails (only with explicit opt-in; revocable at any time)
4. HubSpot Forms & CRM
We use HubSpot Forms to embed the contact form on this website and to manage incoming inquiries. The provider is HubSpot, Inc. The form is embedded into the page via a HubSpot JavaScript snippet.
Consent & cookies: The HubSpot embed script and its cookies are only loaded after you have actively consented via the cookie banner at the bottom of the page ("Accept cookies"). Until then, a placeholder is shown in place of the form and no data is transferred to HubSpot. Your consent is stored locally in your browser (LocalStorage entry eh.consent) and is valid for 12 months. You can withdraw your consent at any time via the footer link "Cookie settings".
HubSpot cookies set after consent: hubspotutk (visitor identification, 13 months), __hssc (session tracking, 30 minutes), __hssrc (session restart, browser session), __hstc (visitor history, 13 months), messagesUtk (HubSpot chat, if enabled, 13 months).
2 Canal Park, Cambridge, MA 02141, USA
Purpose: Embedding the contact form for handling inquiries and CRM management of incoming leads
Data processed: Form inputs (including name, email, message and any additional form fields), technical connection data, HubSpot cookies
Legal basis: Art. 6(1)(a) GDPR (consent via the cookie banner) in combination with Art. 6(1)(b) GDPR (pre-contractual measures) for processing the form content
Data transfer: USA – Standard Contractual Clauses (SCC) under Art. 46(2)(c) GDPR
Privacy: legal.hubspot.com/privacy-policy
5. Calendly
We use the Calendly popup widget for direct appointment booking. The provider is Calendly LLC. The widget is only loaded when you click the corresponding button.
271 17th Street NW, Atlanta, GA 30363, USA
Purpose: Direct appointment booking via the Calendly popup widget
Data processed: Name, email address, time zone, technical connection data (including IP address) when the widget is opened
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) in combination with Art. 6(1)(a) GDPR (consent by opening the widget)
Data transfer: USA – Standard Contractual Clauses (SCC) under Art. 46(2)(c) GDPR
Privacy: calendly.com/privacy
6. WhatsApp (Meta)
For direct customer communication we offer a WhatsApp contact button (wa.me click-to-chat). When you send us a message via WhatsApp, the conversation is handled through Meta’s WhatsApp Business platform.
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (jointly with Meta Platforms Ireland Ltd.)
Purpose: Customer communication and support via the WhatsApp Business platform / Cloud API
Data processed: Phone number, profile name (if set by you), message content, timestamps, technical connection data
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract) in combination with Art. 6(1)(a) GDPR (consent by actively initiating contact via the button)
Data transfer: Primarily EU (Ireland) – as part of the Meta group headquartered in the USA, a third-country transfer based on Standard Contractual Clauses (SCC) under Art. 46 GDPR and supplementary measures may occur
Privacy: whatsapp.com/legal/privacy-policy
Note: Please refrain from sending particularly sensitive personal data (e.g. health or banking information) via WhatsApp. For confidential matters please use the contact form or email instead.
7. Hosting (Vercel)
This landing page and the portal (portal.estatehome.app) are hosted by Vercel. With every request, Vercel automatically collects technical connection data (server logs), in particular the IP address, request timestamp, browser type and the URL accessed. This data is processed solely for security and stability purposes.
340 S Lemon Ave #4133, Walnut, CA 91789, USA
Purpose: Delivering the website and the portal, abuse protection
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation)
Data transfer: USA – Standard Contractual Clauses (SCC) under Art. 46(2)(c) GDPR; edge delivery from EU regions where possible
Privacy: vercel.com/legal/privacy-policy
8. Supabase (database & authentication)
We use Supabase for database operations, user authentication and server-side functions of the dashboard. Supabase is an Irish company with EU-based infrastructure.
Purpose: Storage of user data, authentication, database operations
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
Storage location: EU (Frankfurt, Germany)
Contractual basis: Data Processing Agreement (DPA) under Art. 28 GDPR
Privacy: supabase.com/privacy
9. Cookies
This landing page does not set tracking or analytics cookies. The portal (portal.estatehome.app) uses strictly necessary session cookies for authentication.
- Strictly necessary cookies: Session token for user authentication – no consent required
- Tracking cookies: Not used
- Analytics / advertising cookies: Not used
10. Your rights as a data subject
Under Articles 15–22 GDPR you have the following rights. To exercise them, contact support@estatehome.app:
Information about the personal data we hold about you
Correction of inaccurate or incomplete data
Deletion of your data unless retention is required
Restriction of processing under specific conditions
Receiving your data in a machine-readable format
Objection to processing based on legitimate interests
Where processing is based on consent (e.g. marketing emails), you may withdraw it at any time without giving reasons (Art. 7(3) GDPR). Withdrawal does not affect the lawfulness of processing prior to withdrawal.
11. Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority. Since our company is based in Croatia, the competent authority is:
(Croatian Personal Data Protection Agency)
Selska cesta 136, 10 000 Zagreb, Croatia
Web: azop.hr
Email: azop@azop.hr
You may alternatively contact the supervisory authority of your habitual residence within the EU.
12. Privacy contact
For questions about privacy, exercising your rights or data processing, please contact us at:
We aim to respond to your requests within 30 days, as required by the GDPR.