Search for your property in Croatia
Search for your
property in Croatia

PRIVACY POLICY

Last updated: October 2026

1. CONTROLLER

The controller responsible for processing your personal data is:

Panorama Scouting GmbH
Friedrich-Ritter-Str. 19a
83064 Raubling
Rosenheim office: Kirchenweg 41, 83026 Rosenheim
Phone: +49 8031 234 1280
Email: info@panorama-scouting.de

Managing directors: Kevin Jan Kürschner and Dr. Rainer Kürschner, each with sole power of representation.

We have not appointed a data protection officer, as we are not legally required to do so. Please send any questions about data protection to the address above.

2. YOUR RIGHTS

You have the following rights in relation to us:

  • Access to the data we hold about you, Art. 15 GDPR
  • Rectification of inaccurate data, Art. 16 GDPR
  • Erasure of your data, Art. 17 GDPR
  • Restriction of processing, Art. 18 GDPR
  • Receipt of your data in a common format, Art. 20 GDPR
  • Objection to processing, Art. 21 GDPR
  • Withdrawal of consent with effect for the future, Art. 7 (3) GDPR

An informal message to info@panorama-scouting.de is sufficient.

Right to object: If we process your data on the basis of our legitimate interest under Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data, unless there are compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims. You may object at any time and without giving reasons to the use of your data for property suggestions and advertising.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
www.lda.bayern.de

3. HOSTING AND SERVER LOG FILES

Our website and our customer management system are hosted on servers of ALL-INKL.COM Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, in Germany. We have concluded a data processing agreement with this provider.

Each time you visit our website, your browser automatically sends data to the server. The following is stored:

  • date and time of the request
  • page or file requested
  • page you came from
  • status code and amount of data transferred
  • browser and operating system
  • IP address

We need this data to deliver the website and to defend against attacks. It is deleted after 90 days at the latest, unless a specific suspicion of misuse has to be investigated. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in secure and stable operation.

The connection to our website is encrypted with TLS. You can recognise this by the lock symbol in the address bar of your browser.

4. COOKIES AND CONSENT

On your first visit, a notice window asks which services you agree to. We use technically necessary storage without consent. The legal basis is Section 25 (2) No. 2 TDDDG. This includes storing your choice in the notice window and your favourites.

We only load statistics and advertising services after you have given your consent. The legal basis is then Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can change or withdraw your choice at any time via the "Cookie-Settings" link at the bottom of every page.

The notice window runs on our own server. No data is transferred to third parties in the process.

5. ANALYTICS AND ADVERTISING WITH GOOGLE

We only use the following services with your consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also transfer data to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework, so an adequacy decision of the EU Commission applies to the USA.

Google Tag Manager

The Tag Manager loads the two services below. It does not store any profiles itself, but when it loads, your browser sends your IP address to Google. It is not loaded without your consent.

Google Analytics

We use Google Analytics to evaluate how visitors use our website, for example which pages are viewed, how long a visit lasts and how visitors find their way to us. For this purpose, Google stores cookies in your browser. Google shortens IP addresses within the EU and does not store them. Google deletes individual events after 2 months and user data after 14 months without a new visit.

Google Ads conversion tracking

We place ads with Google. If you reach us via an ad and send us an enquiry, Google learns that the ad led to an enquiry. Google does not receive your name or contact details. This shows us which ads are worthwhile.

Further information: https://policies.google.com/privacy?hl=en

6. CONTACT AND ENQUIRIES

Contact form, email and phone

If you write to us or call us, we process the information you provide. This usually includes your name, email address, phone number, the property you are interested in and your requirements. We use the data to answer your enquiry, to suggest suitable properties and to support a purchase. The legal basis is Art. 6 (1) (b) GDPR, because your enquiry is aimed at a brokerage contract or a purchase, and otherwise Art. 6 (1) (f) GDPR.

For phone calls we use the service of sipgate GmbH, Gladbacher Straße 74, 40219 Düsseldorf. We have a data processing agreement with sipgate.

Contact via WhatsApp

Our website offers buttons that open a chat with us in WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. No data is transferred to WhatsApp before you click. If you use the chat, WhatsApp transfers your phone number, your message and metadata to Meta, possibly also to the USA. Meta is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6 (1) (b) GDPR for enquiries relating to a contract, and otherwise Art. 6 (1) (f) GDPR, our legitimate interest in simple contact. We transfer the content of the chat to our customer management system to the extent necessary for your enquiry. Further information: https://www.whatsapp.com/legal/privacy-policy-eea

Source of your enquiry

If you send us an enquiry via a form or via WhatsApp, we also transmit information on how you found us. This includes the page through which you entered our website, the properties you viewed or saved during this visit, the search filters used, the duration of the visit, and the language setting and time zone of your browser. If you reach us via an ad, this also includes the booked search term, the campaign, the device type and the approximate location from the ad. This information only arises during your visit and is held in the session storage of your browser. We do not use cookies for this and do not recognise you on a later visit. Storage in the browser is based on Section 25 (2) No. 2 TDDDG. The use is based on Art. 6 (1) (b) and (f) GDPR. Our legitimate interest is advice that matches your search.

Enquiries via property portals and advertising platforms

We also publish our properties on property portals and advertising platforms, for example ImmobilienScout24, willhaben, Kleinanzeigen, Immozentral, JamesEdition, Mer et Demeures, Yourseahome, Clever-Immobilien.de, Herando, immo4trans, Indomio and 1001 Rives, as well as on other portals in Germany and abroad. If you send an enquiry there, the operator forwards your details to us. The respective operator is responsible for processing on the portal, and its privacy policy applies. Once your enquiry reaches us, this privacy policy applies. In our first reply, we tell you the portal through which your enquiry came.

7. CUSTOMER MANAGEMENT

We store enquiries, contact details, search requirements, correspondence and appointments in our customer management system. It runs on the servers of our hosting provider ALL-INKL.COM in Germany, see section 3, and is only accessible to our employees with their own login.

For a transitional period, we also still use the brokerage software of onOffice GmbH, Charlottenburger Allee 5, 52068 Aachen. onOffice stores the data on servers in Germany. We have a data processing agreement with onOffice.

We also store documents on properties and purchases, such as exposés, contracts and copies of identity documents, with Dropbox. The provider is Dropbox International Unlimited Company, One Park Place, Hatch Street Upper, Dublin 2, Ireland. Dropbox may transfer data to Dropbox, Inc. in the USA. Dropbox is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Dropbox.

The legal basis is Art. 6 (1) (b) GDPR, and otherwise Art. 6 (1) (f) GDPR, our legitimate interest in orderly processing.

Property suggestions by email

If you tell us your search requirements, we send you matching properties by email. The legal basis is Art. 6 (1) (b) GDPR, because you have asked us to do so. You may object to this at any time. A short reply to one of our emails is sufficient. After that you will no longer receive suggestions.

Digital signature of forms

You can sign viewing confirmations and similar forms on your device via a personal link. The link is valid for 14 days. As proof, we store the time, your IP address and a checksum together with the signed document. The legal basis is Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR, our legitimate interest in proving our claim to commission.

Use of artificial intelligence

We use an AI assistant that helps us evaluate enquiries and correspondence and prepare replies. For this purpose, we transfer the content of your enquiry, our correspondence with you, related documents and information on the properties to Anthropic Ireland, Limited, Dublin, Ireland. Anthropic processes the data on our behalf, does not use it to train its models and usually deletes it after 30 days. Data may be transferred to Anthropic PBC in the USA in the process. This is based on the standard contractual clauses of the EU Commission, which are part of our data processing agreement with Anthropic.

The AI does not make any decisions. Every reply to you is checked and sent by an employee. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in handling your enquiry quickly and carefully.

Identification under the Money Laundering Act

As real estate agents, we are obliged under the German Money Laundering Act to identify the contracting parties to a purchase. For this purpose, we record information from your identity document. The legal basis is Art. 6 (1) (c) GDPR in conjunction with Sections 10 to 12 GwG (German Money Laundering Act). We keep the documents for five years.

8. DISCLOSURE TO THIRD PARTIES

We only pass on your data if this is necessary for your property search or a purchase, if you have given your consent or if we are legally obliged to do so. Recipients may be:

  • our partner offices in Croatia, which handle viewings and local processing
  • owners, sellers and developers of the properties you are interested in
  • notaries, lawyers, translators, surveyors, banks and authorities, to the extent they are needed for the purchase
  • our tax advisor
  • authorities and courts, if we are legally obliged to do so

The legal basis is Art. 6 (1) (b) GDPR, and for legal obligations Art. 6 (1) (c) GDPR. Croatia is part of the EU, where the same data protection law applies. We do not sell data.

We also work with service providers who process data only on our instructions. These are processors under Art. 28 GDPR, for example our hosting provider, our brokerage software and our telephone service. They are named in the sections above.

9. WEBSITE FEATURES

Favourites

On our website you can save properties as favourites without logging in. For this purpose, we store the property numbers and key data such as title, purchase price and preview image in the local storage of your browser. We also store the property numbers in a cookie named psfav, which is valid for 180 days. This keeps your favourites available on your next visit. Only information on the properties is stored, no information about you. The legal basis is Section 25 (2) No. 2 TDDDG, because you actively use this feature. You can remove your favourites yourself at any time or delete the data in your browser.

Visitor counting

With each page view, your browser transmits the page viewed, the entry page, the referring website, the device type and, where applicable, advertising identifiers to our own server. We do not use cookies for this and do not store your IP address. To distinguish visitors, we generate a check value from the IP address and browser identifier using a key that is deleted daily. After that, it is not possible to identify you. The data is not passed on to third parties and is deleted after 30 days. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in evaluating the use of our website.

Maps from OpenStreetMap

On our property pages, on the contact page and on some region pages, we show maps from the OpenStreetMap service. The provider is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom. The maps are only loaded when you scroll to them. Your browser then retrieves map data from servers of the OpenStreetMap Foundation and transmits your IP address and technical information such as browser type and page viewed. An adequacy decision of the EU Commission applies to the United Kingdom. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in a clear presentation of the location. Further information: https://osmfoundation.org/wiki/Privacy_Policy

Links to social networks

Our website links to our pages on Facebook, Instagram, YouTube and X. These are simple links. Only when you click on them are you forwarded to the respective network. No data is transferred before that. The respective operator is responsible for processing there.

Image credits

The images on this website come from three sources: licensed photos from iStock, a service of Getty Images, our own photos taken by Panorama Scouting GmbH, and photos provided to us by owners and partners for marketing the respective property. All images are stored on our own server and delivered from there. Therefore no data is transferred to iStock, Getty Images or our partners when you visit our pages.

10. STORAGE PERIOD

We store your data for as long as we need it for your property search, the brokerage and the completion of a purchase, or for as long as claims under the brokerage contract can be asserted. After that we delete it. We only keep data longer if required by law:

  • invoices and accounting records: 8 years under commercial and tax law
  • business letters and contracts: 6 years
  • documents under the Money Laundering Act: 5 years

For individual services, we state the storage period in the sections above.

11. OTHER INFORMATION

You are not obliged to provide us with data. However, without your contact details we cannot answer your enquiry. There is no automated decision-making under Art. 22 GDPR.

We update this privacy policy when our services or the legal situation change. The current version on this page applies.