Privacy Policy

Mediteran Company DOO (“Mediteran Company”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect when you visit our website mediterancompany.com or contact us, why we collect it, how long we keep it and which rights you have.

1. Data controller

The controller responsible for processing your personal data is:

We have not appointed a data protection officer. If you have any questions about this Privacy Policy or about how we process your personal data, please contact us directly using the details above.

2. Personal data we collect

Data you provide to us

When you send us a message through the contact form on our website, we collect:

• your full name,
• your email address,
• your phone number, including the country you select,
• your preferred contact method (email, SMS or phone call),
• the content of your message and any other information you choose to include in it.

When you contact us directly by email or phone, we process your contact details and the content of our communication. Please do not include sensitive information (for example, data about your health) in your messages – we do not need it to answer your inquiry.

Data collected automatically

When you visit our website, the web server automatically records technical information sent by your browser, such as your IP address, the date and time of your visit, the pages you open, the referring website and the type of browser and operating system you use. We use this information only to deliver the website, to keep it secure and to detect and fix technical problems.

Our website also uses cookies. Strictly necessary cookies are always active, while statistics cookies are used only with your consent. More information is available in our Cookie Policy.

3. Why we process your data and on what legal basis

We process personal data in accordance with the Law on Personal Data Protection of Montenegro and, where it applies to visitors from the European Union, the General Data Protection Regulation (EU) 2016/679 (GDPR). We process your data for the following purposes:

• Responding to your inquiry – on the basis of the consent you give when you send us a message and, where your inquiry concerns our services, because processing is necessary to take steps at your request before entering into a contract.
• Preparing offers and carrying out agreed work – because processing is necessary for entering into and performing a contract with you.
• Operating and protecting the website (server logs) – on the basis of our legitimate interest in a secure and properly functioning website.
• Protecting the contact form against spam and abuse (Google reCAPTCHA) – on the basis of our legitimate interest in keeping our website and communication channels secure.
• Website statistics – only if you accept statistics cookies; you can withdraw this consent at any time.
• Complying with legal obligations – for example, keeping accounting records when we do business together.

We do not sell your personal data and we do not use it for marketing purposes without your explicit consent. We do not make decisions about you based solely on automated processing, including profiling.

4. Who has access to your data

Your personal data is available only to authorised persons at Mediteran Company who need it to handle your inquiry or our cooperation. We share data only with:

• our hosting provider Hetzner Online GmbH (Germany), on whose servers our website is hosted,
• Web Center, which develops and maintains our website, and the providers of our email services,
• Google, which provides spam protection for our contact form (reCAPTCHA) and, if you choose so, the map on our Contact page and website statistics (see sections 6 and 7),
• competent public authorities, when we are required to do so by law.

Our hosting, maintenance and email providers process personal data only on our behalf and according to our instructions.

5. How long we keep your data

• Inquiries (contact form, email, phone): only as long as necessary to resolve your inquiry, and no longer than 12 months from our last contact. If your inquiry leads to a contract, we keep the data for the duration of the contract and afterwards for as long as required by law (for example, accounting regulations).
• Server logs: up to 30 days, after which they are deleted – unless they are needed for longer to investigate a specific security incident.
• Cookies: as described in the Cookie Policy – the cookie that remembers your consent choice is stored for 6 months.

6. Third-party services and links

Google reCAPTCHA. To protect our contact form against spam and automated abuse, our Contact page uses Google reCAPTCHA. reCAPTCHA collects information such as your IP address, information about your browser and device and your interaction with the page, and sends it to Google, which uses it to check whether the form is being filled in by a person. Google’s Privacy Policy and Terms of Service apply.

Google Maps. The map on our Contact page is not loaded automatically. Only when you click “Show map” does your browser connect to Google’s servers; Google then receives your IP address and may set its own cookies. Google’s privacy policy applies to this processing: policies.google.com/privacy.

Google Analytics. If you accept statistics cookies, we use Google Analytics to understand how visitors use our website. Details are available in our Cookie Policy.

Links to other websites. Our website contains links to other websites, such as our Instagram profile. Once you leave our website, the privacy policy of that website applies.

7. Transfers outside Montenegro

Some of the service providers mentioned above, in particular Google, may process data outside Montenegro and the European Economic Area, including in the United States. In such cases, the transfer is based on appropriate safeguards, such as the EU–U.S. Data Privacy Framework or standard contractual clauses approved by the European Commission.

8. Your rights

Under applicable data protection law, you have the right to:

• access the personal data we hold about you,
• request the correction of inaccurate or incomplete data,
• request the deletion of your data,
• request the restriction of processing,
• object to processing based on our legitimate interest,
• receive your data in a structured, commonly used format (data portability),
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal,
• lodge a complaint with the Agency for Personal Data Protection and Free Access to Information of Montenegro (azlp.me) or with the data protection authority in your country of residence.

To exercise your rights, send a request to milivojer@t-com.me. We will reply without undue delay and within the deadlines prescribed by law. Before acting on your request, we may ask you to confirm your identity.

9. Data security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access – for example, our website uses an encrypted (HTTPS) connection and access to your messages is limited to authorised persons. However, no transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Children

Our website is intended for business clients and adults. We do not knowingly collect personal data from children under 16. If you believe that a child has sent us personal data, please contact us and we will delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when we introduce new features on the website or when the law changes. The current version is always available on this page, and the date of the last update is shown at the top.