Legal

Privatlivspolitik

In force from 12. august 2026. It explains what we collect, why, and how long we keep it.

Dette dokument findes på kroatisk og engelsk. Teksten nedenfor er på engelsk — den kroatiske version er gældende.

1. Data controller

MARGO NOVA d.o.o., Ulica Frane Cote 10, 10360 Sesvete, Croatia, VAT ID (OIB) 33335653053, registration number 081171370. For any question about your data: info@crodrive.com.

2. What we collect

When you send an enquiry to an agency

your name, email address and phone number;
the dates you asked about and the vehicle concerned;
any message you write;
technical details: the page the enquiry came from, the referring source, device type and the time it was sent.

When you register an agency

company name, VAT ID and registered address;
contact person’s name, email and phone;
details of published vehicles and subscriptions.

When you use the site

We use strictly necessary cookies to run the platform — sign-in and security would not work without them, and no consent is required for these. If we ever add analytics or other non-essential cookies, we will ask for your consent before setting them.

If you allow location access, we use the coordinates only at that moment to show you the nearest offer. We do not store them.

3. Why we process data, and on what basis

Passing your enquiry to the agency	Performing the service you asked for — Art. 6(1)(b) GDPR. Without these details the agency cannot get back to you.
Running agency accounts, billing, accounting	Performance of a contract and legal obligations — Art. 6(1)(b) and (c).
Enquiry statistics	Legitimate interest in showing agencies what the platform brings them and in improving the service — Art. 6(1)(f). For this we use counts, not the content of your messages.
Security and abuse prevention	Legitimate interest — Art. 6(1)(f).

4. Who we share data with

The details in your enquiry go only to the agency you chose. We do not sell them, trade them, or send them to other agencies.

From the moment the agency receives your enquiry, it is an independent data controller for that data and is itself responsible for how it uses and stores it.

We use the following service providers, who process data on our behalf:

Supabase — database and file storage, servers in the EU (Frankfurt);
Vercel — application hosting;
Resend — email delivery, servers in the EU (Ireland);
Cloudflare — network protection and content delivery.

We have data processing agreements with each of them. Where processing takes place outside the European Economic Area, it is based on the European Commission’s standard contractual clauses.

5. How long we keep it

Enquiry details	12 months from sending, then deleted automatically
Enquiry statistics	Indefinitely, but without personal data — counts only
Agency and billing records	For the duration of the relationship; accounting records for the statutory periods
Sign-in logs	Up to 12 months, for security

6. Your rights

At any time you have the right to:

request access to your data and a copy of it;
have inaccurate data corrected;
request erasure;
restrict or object to processing;
receive your data in a machine-readable format;
withdraw consent where processing is based on it — withdrawal does not affect the lawfulness of processing before it.

Send your request to info@crodrive.com. We respond without delay, and at the latest within one month.

If you have already sent an enquiry to an agency, note that they hold their own copy of your details — for erasure there, contact the agency directly. We are glad to help you get in touch.

You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or with the supervisory authority in your own country.

7. Security

Data is transmitted over an encrypted connection (HTTPS) and stored in a database with row-level access rules, so an agency can only ever see its own enquiries. Access is limited to people who need it to run the platform.

8. Children

The platform is not intended for anyone under 16, and we do not knowingly collect their data.

9. Changes

We may amend this policy. The version in force is always published here, with the date of the last change. We notify agencies by email of any significant change.

Last updated: 12. august 2026 · Handelsbetingelser