01 What cookies are
Cookies (cookies) are small text files that a website stores on your computer, mobile device or tablet when you visit it. A cookie contains a short string of data (usually the page name, expiry time and a unique identifier) which allows the website to "recognise" your browser on subsequent visits.
Similar mechanisms (local storage, session storage, pixels and other network identifiers) used for the same purpose are also covered by this Policy, regardless of whether we refer to them explicitly as "cookies" in this document.
02 Why we use cookies
We use cookies on the Propertico platform (hereinafter: the Platform) to:
- provide core functionality of the site (sign-in, basket, security checks);
- remember your settings and choices (language, display, currency, search filters);
- understand how the Platform is used and which content users find useful;
- detect technical issues and speed up secondary parts of the site;
- show relevant content and offers, only with your consent.
03 Cookie categories
We divide cookies into four categories. On your first visit to the Platform, a consent banner appears in which you can accept all, reject all, or individually choose particular categories. We remember and respect your choice until you change it.
Necessary
Cookies that are technically essential for the Platform to operate: maintaining a signed-in user session, security, abuse protection, and remembering your consent choice. These cookies are set automatically and cannot be switched off. Without them, the Platform simply does not work. We do not use them for tracking, profiling or advertising.
Preferences
Cookies that remember your choice of language, search-results display, last-used filters, map display and similar. They help the Platform look and behave the way you last left it. We set these only if you give consent for this category.
Statistics (analytics)
Cookies that show us how many users visit the Platform, which pages they view, how they reach us and where they encounter difficulties. The data is processed in aggregate form; we do not link it to your name or contact details. We currently use Google Analytics 4 (see the next section).
Marketing
Cookies that allow us to measure the effectiveness of our advertising campaigns and display ads that are more relevant to you, both on the Platform and on other websites. If you do not give consent for this category, you will still see ads, but they will not be personalised.
04 Third-party cookies
Some cookies are set by external service providers we use. They act as independent controllers and have their own privacy policies. These are the providers whose cookies we may currently set on the Platform:
- Google Analytics 4 (Google Ireland Limited), category Statistics. We use it to measure traffic and understand user behaviour in aggregate form. The user identifier in GA4 is not directly linked to your name or email address. Further information: policies.google.com/technologies/cookies.
- Embedded content (e.g. videos, maps, social-media sharing), categories Preferences, Marketing or Statistics, depending on the provider. These are set only on pages where such content is embedded and only if you have given consent for the corresponding category.
We regularly update the list of specific cookies and their providers. We track and record the version of the list with each of your consents (see "Our consent system").
05 Cookie duration
By duration, we group cookies into two categories:
- Session: exist only while the browser is open. They are deleted automatically when you close the browser or the Platform tab.
- Persistent: remain on your device until the expiry date defined in the cookie itself or until you delete them via your browser settings. The lifetime of individual cookies can range from a few minutes up to a maximum of 24 months.
We keep the record of your consent (status, categories, timestamps) in our database for as long as needed to respect your choice and to demonstrate that consent was given, no less than 12 months and at most for the duration of your user relationship with the Platform.
06 Our consent system
Consent is collected via a banner shown on your first visit to the Platform. The banner is aligned with the General Data Protection Regulation (GDPR) and the ePrivacy Directive. All categories other than Necessary are initially switched off and are activated only by your explicit action.
Actions you can take
- Accept all: enables all four categories.
- Reject all: enables only the Necessary category; all other categories remain switched off.
- Save preferences: enables only the categories you have selected.
- Withdraw consent: you may withdraw previously given consent at any time via the cookie settings. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
What we record with each consent
Each time you take one of the actions above, we create or update a record of your consent in our database. In line with the accountability principle of the GDPR, this record serves as proof that consent was given and contains:
- an anonymous consent-subject identifier (
consentSubjectId); - a link to your user account, if you are signed in;
- consent status: accepted, rejected, customized or withdrawn;
- the selected categories and, where relevant, a list of individually approved or rejected providers;
- a cryptographic hash of your IP address; we do not store the original IP address;
- the browser identifier (user agent) and the domain on which the consent was given;
- the version of the Policy, the version of the banner and the version of the cookie list at the moment consent was given, the language and the jurisdiction (default: Croatian, EEA);
- the full history of actions with timestamps, so that every "accept", "reject", "save preferences" or "withdraw" action can be reconstructed.
This data is kept solely to demonstrate and uphold your consent. We do not use it for marketing, profiling or any other purpose outside cookie management.
07 Your rights
In relation to cookies and the data they collect, you have the following rights:
- Right to choose: to switch each non-Necessary category on or off.
- Right to withdraw: to withdraw consent at any time, as easily as it was given.
- Right of access: to request to see the record of your consent (including the action history).
- Right to erasure: to request deletion of the record, except for the portion we must retain to demonstrate lawful processing.
- Right to lodge a complaint: to file a complaint with the competent supervisory authority (in the Republic of Croatia: the Personal Data Protection Agency, azop.hr).
All rights are exercised free of charge. You can send your request to [email protected]. We will respond within 30 days.
08 Managing cookies in your browser
Independently of our banner, you can review, block or delete cookies at any time directly in your browser settings. Please note that blocking Necessary cookies may prevent the Platform from working correctly. Some features (e.g. sign-in, basket, security checks) may then become unavailable.
Browser-vendor guides:
General information about cookies and how to manage them is available at www.allaboutcookies.org.
09 Legal basis for processing
The legal basis for setting cookies depends on the category:
- Necessary cookies: set on the basis of legitimate interest (Art. 6(1)(f) GDPR) and the technical necessity of providing the information-society service you have explicitly requested.
- Preferences, Statistics, Marketing: set exclusively on the basis of your consent (Art. 6(1)(a) GDPR, Art. 5(3) of the ePrivacy Directive).
- Keeping the consent record: based on compliance with a legal obligation (Art. 6(1)(c) GDPR) and the legitimate interest of demonstrating lawful processing (Art. 7(1) GDPR).
10 Changes to this Policy
We may amend the Cookies Policy due to changes in our services, the technologies we use or the legal framework. We will inform you of significant changes via the Platform and, where necessary, ask for your consent again. The date of the last change and the version of the Policy are shown in the header of this page.
We store the version of the Policy that was in force at the moment you gave your consent in the consent record (see "Our consent system"), so you can always check which version you accepted.
11 Contact
The personal-data controller and operator of the Platform is Croator d.o.o. (hereinafter: CROATOR).
All questions related to cookies, this Policy or your consent record can be sent to the listed email address. We will respond in the shortest possible time.