Summit Invest Group ("we", "us", or "our") is committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services.

This policy is compliant with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Croatian data protection legislation. If you have any questions or concerns, please contact us at privacy@summitinvestgroup.com.

1. Data Controller

The data controller responsible for your personal data is:

  • Company: Summit Invest Group d.o.o.
  • Registered in: Republic of Croatia
  • Email: privacy@summitinvestgroup.com
  • Website: https://summitinvestgroup.eu

2. Information We Collect

We collect information that you voluntarily provide to us, and information that is automatically collected when you visit our website.

2.1 Information You Provide Directly

  • Full name and contact details (email address, phone number)
  • Country of residence and nationality
  • Investment interests, budget ranges, and preferences
  • Messages and correspondence you send to us
  • Any other information you choose to provide via our contact forms

2.2 Information Collected Automatically

  • IP address and approximate geographic location
  • Browser type and version, operating system
  • Pages visited, time spent, referral source
  • Cookie and tracking data (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your enquiries and schedule consultations
  • To provide personalised investment advisory services
  • To send relevant updates on investment opportunities (where consent is given)
  • To improve our website and user experience
  • To comply with legal obligations and regulatory requirements
  • To protect the safety and security of our platform and users

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: Processing necessary to fulfil our advisory services agreement with you.
  • Legitimate Interests: Improving our services, preventing fraud, and communicating relevant opportunities.
  • Consent: Where you have explicitly agreed to receive marketing communications.
  • Legal Obligation: Where processing is required by EU or Croatian law.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information in the following limited circumstances:

  • Service Providers: Trusted third-party processors who assist us in operating our website and services (e.g., hosting, CRM, email) — bound by data processing agreements.
  • Professional Partners: With your explicit consent, we may share relevant information with vetted legal, financial, or technical partners in connection with your investment enquiry.
  • Legal Authorities: Where required by law, court order, or regulatory obligation.
  • Business Transfer: In connection with any merger, acquisition, or sale of assets, subject to confidentiality obligations.

6. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your personal data.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Contact enquiry data is typically retained for 3 years following our last interaction, unless a longer retention period is required or permitted by law.

8. Your Rights Under GDPR

As a data subject within the EU/EEA, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data under certain conditions.
  • Right to Restriction: Request that we restrict processing of your data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Withdraw any previously given consent at any time.

To exercise any of these rights, contact us at privacy@summitinvestgroup.com. We will respond within 30 days. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local supervisory authority.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments. However, no transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Your continued use of our website after any changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer at: