Privacy Policy

Last updated: 1 January 2026 · Compliant with GDPR (EU) 2016/679

1. Data Controller

The data controller for personal data collected through this website is:

We are committed to protecting your personal data and processing it in accordance with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

2. What Personal Data We Collect

When you submit a loan application through our website, we collect the following personal data:

  • Identity data: Full name
  • Contact data: Email address, telephone number
  • Financial data: Requested loan amount, monthly income, employment status
  • Bank data: IBAN (International Bank Account Number)
  • Application data: Loan purpose, submission date and time
  • Technical data: IP address, browser type, operating system (collected automatically for security and fraud prevention)

3. How We Collect Your Data

We collect personal data through:

  • The online loan application form on our website;
  • Automatic technical data collection when you access our website (cookies, server logs);
  • Communications you send to us directly (e.g. emails to info@solvya.org).

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

4.1 Processing Your Loan Application

Purpose: To assess your loan enquiry, contact you with the outcome, and forward your application to our financing partner network.

Legal basis: Your explicit consent (Article 6(1)(a) GDPR), given when you tick the consent checkbox and submit the application form. You may withdraw this consent at any time.

4.2 Fraud Prevention and Security

Purpose: To detect and prevent fraudulent applications, spam, and abuse of our Service.

Legal basis: Our legitimate interests (Article 6(1)(f) GDPR) in protecting our Service and users from fraud.

4.3 Legal Compliance

Purpose: To comply with our legal and regulatory obligations.

Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

5. Data Sharing and Recipients

We may share your personal data with:

  • Financing partners: Third-party financial advisors and institutions to whom we forward your loan enquiry for assessment. These partners are contractually bound to process your data securely and only for the purpose of assessing your application;
  • Technical service providers: Web hosting, email, and analytics providers who process data on our behalf under data processing agreements;
  • Legal authorities: Where required by law or to protect the rights and safety of our users and ourselves.

We do not sell your personal data to third parties for marketing purposes.

6. Data Retention

We retain your personal data for the following periods:

  • Loan application data: 2 years from the date of submission, or longer if required by applicable law;
  • Technical/security logs: 90 days;
  • Email communications: 2 years.

After the retention period expires, your data will be securely deleted or anonymised.

7. International Data Transfers

Your data is primarily stored within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8. Cookies and Tracking Technologies

Our website uses the following types of cookies:

  • Strictly necessary cookies: Required for the website to function (session management, security);
  • Analytics cookies: Help us understand how visitors interact with the website (used only with your consent).

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the website.

9. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you;
  • Right to rectification: Request correction of inaccurate or incomplete data;
  • Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to our legal obligations;
  • Right to restriction of processing: Request that we limit how we use your data;
  • Right to data portability: Receive your data in a structured, machine-readable format;
  • Right to object: Object to processing based on legitimate interests;
  • Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@solvya.org. We will respond within 30 days.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. In Croatia, this is the Agencija za zaštitu osobnih podataka (AZOP). In your country of residence, please contact your national data protection authority.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

  • SSL/TLS encryption for all data transmitted via our website;
  • Access controls limiting data access to authorised personnel only;
  • Regular security reviews of our systems and processes.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

12. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

14. Contact for Data Protection Requests

For all data protection enquiries, requests to exercise your rights, or concerns about how we handle your data:

  • Email: info@solvya.org
  • Subject line: "Data Protection Request"
  • Response time: Within 30 calendar days