Privacy Policy

1. Introduction

This Privacy Policy (the "Policy") describes which personal data we collect through the ezgrada.me website, how we process, store and protect it, and visitors' rights under the General Data Protection Regulation (EU GDPR) and applicable personal-data protection law. By using our site, you confirm that you are familiar with this Policy.

2. Data controller

The data controller is: DomaPay, Ankarski bulevar, Building Elite Residents A38, V/28, Podgorica, Montenegro domapaymontenegro@gmail.com

3. What data we collect

4. Purposes of processing personal data

We process data for the following purposes:

• responding to user inquiries
• enabling site functionality
• improving user experience and website performance
• sending notifications or newsletters (with user consent)
• fulfilling legal obligations
• protecting legitimate interests (without infringing users' rights)

5. Legal basis for processing (GDPR, Article 6)

We process data on the basis of:

• User consent (e.g. newsletter, marketing cookies)
• The controller's legitimate interest (e.g. site security, statistics)
• Performance of a contract or pre-contractual steps (e.g. user account registration)
• Legal obligations (e.g. accounting records, system protection)

6. Who has access to the data

Access to personal data may be granted to:

• authorized employees or associates
• service providers (e.g. hosting, IT maintenance, email services, analytics platforms)
• government authorities where required by law

With every third party that processes data on our behalf, we conclude data processing agreements (DPAs) in line with the GDPR.

7. Data retention period

We keep data only as long as necessary to fulfil the purpose of processing, namely:

• contact messages: 12 months
• newsletter email: until consent is withdrawn
• technical cookies: per the duration defined in the cookie banner
• data from a contractual relationship: in line with legal obligations

Once the period expires, the data is deleted or anonymized.

8. User rights

Under the GDPR, the user has the right to:

• request access to their data
• request correction of inaccurate data
• request erasure of data ("the right to be forgotten")
• restrict processing
• transfer their data (the right to portability)
• object to processing
• withdraw consent at any time
• lodge a complaint with the competent data protection authority

To exercise these rights, the user can contact us via the email listed in this Policy.

9. Data protection

We apply appropriate technical and organizational protection measures, including:

• encryption (HTTPS)
• access control and authentication
• backups
• limiting access to authorized persons only
• regular maintenance and system upgrades

10. Data transfers outside the EU

If data is transferred to countries outside the EU/EEA, we ensure the transfer complies with the GDPR through:

• European Commission adequacy decisions
• standard contractual clauses (SCCs)
• other appropriate safeguards

11. Cookies

The site uses cookies for the purposes of:

• essential functionality
• statistics
• marketing (where applicable)

Visitors can accept or reject categories of cookies through the cookie banner.