This document explains what personal data we receive through the website, correspondence and contract work, why we need it, who we share it with and how you can control it.
1. Who processes the data
The data controller is PRO WEB STUDIO DOO (DRUŠTVO SA OGRANIČENOM ODGOVORNOŠĆU "PRO WEB STUDIO" BAR), Montenegro, POSLOVNI CENTAR KULA A, BSC BAR, registration number 5-1345773/001, PIB (tax ID) 03797694. Raddev is a brand of this company.
For any questions about personal data, write to info@raddevelopment.me. We reply within one month, usually sooner.
2. What data we receive
Data you provide yourself
- Website request: name, contact (email, Telegram or WhatsApp), task description.
- Detailed request (brief): additionally — information about your company and customers, website address, timeline, budget estimate, details of your current platform and contractor, attached files.
- Correspondence by email and in messengers.
- Contract work: company details, contact persons' data, access to websites and services, project materials.
Please do not send us special categories of data (about health, political opinions, etc.) or data of third parties without their knowledge. If such data ends up in project materials, we process it only to the extent needed for the work and under our contract with you.
Data collected automatically
- Server logs: IP address, date and time of the request, page address, browser information. They are kept by the hosting provider to run and protect the website.
- Analytics (Google Analytics) — only if you have given consent in the cookie banner. More in the Cookie Policy.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| To respond to your request, clarify the task, and prepare possible solutions and an approximate price | Request, brief, correspondence | Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) |
| To perform the contract: development, support, marketing | Contact persons' data, access details, project materials | Performance of a contract (GDPR Art. 6(1)(b)) |
| To issue invoices and keep accounting and tax records | Company details, payment data | Legal obligations under Montenegrin law (GDPR Art. 6(1)(c)) |
| To keep the website running and secure | Server logs | Legitimate interest — protecting the website from failures and attacks (GDPR Art. 6(1)(f)) |
| To understand how visitors use the website and improve it | Analytics data | Your consent (GDPR Art. 6(1)(a)); you can withdraw it at any time |
| To protect our rights in a dispute | Correspondence and contract materials | Legitimate interest (GDPR Art. 6(1)(f)) |
We do not sell personal data, do not use it for third-party advertising and do not make decisions about you based solely on automated processing. We do not send newsletters; if we start, it will only be with your separate consent.
4. Who we share data with
Only those without whom we cannot provide the service or meet legal requirements, and only to the extent necessary:
- Hosting provider — hosting the website and server logs; the server is in Montenegro.
- Email service — processing emails and requests; the server is in Montenegro.
- Request service — Bitrix24 CRM; the server is in Serbia.
- Google Analytics (Google Ireland Limited / Google LLC) — only with your consent.
- Project contractors — developers, designers and marketing specialists who work with us under contract. They receive only the data needed for their part of the work and are obliged to keep it confidential and use it only on our instructions.
- Accountant and bank — for payments and bookkeeping.
- Public authorities — where required by law.
Messengers. If you write to us on Telegram or Viber, these services also process the correspondence under their own rules (Telegram — Telegram Messenger Inc., Viber — Viber Media S.à r.l.). We do not control how they process data.
5. Transfers outside Montenegro
Some recipients are located outside Montenegro, including outside the European Economic Area (EEA):
- Google LLC — USA. The transfer is based on the EU–US Data Privacy Framework, in which Google participates.
- Bitrix24 (request service) — server in Serbia.
We transfer data outside the EEA only where there is a legal basis for it: an adequacy decision, contractual safeguards with the recipient, authorisation from the supervisory authority or your explicit consent. On request to info@raddevelopment.me we will tell you which safeguards apply to a specific transfer.
6. How long we keep data
| Data | Period |
|---|---|
| Request and correspondence, if no contract is concluded | 12 months from the last contact |
| Correspondence and contract materials | The term of the contract plus 5 years after it ends |
| Accounting documents | At least 5 years; the general ledger and annual financial statements — at least 10 years (Montenegrin Accounting Law, Art. 14) |
| Access to the client's websites and services | Until the work is finished; afterwards we delete it and recommend changing passwords |
| Analytics data | 14 months |
| Server logs | According to the hosting provider's rules |
When the period expires, the data is deleted or anonymised.
7. Your rights
You can:
- find out what data we hold about you and get a copy;
- correct inaccurate data;
- ask us to delete data if there is no legal basis for keeping it;
- restrict processing — for example, while the accuracy of the data is being checked;
- receive the data you provided in a machine-readable format;
- object to processing based on legitimate interest;
- withdraw your consent at any time — this does not affect the lawfulness of processing before withdrawal.
Write to info@raddevelopment.me. We will reply within one month; if the request is complex, this can be extended by two more months — in that case we'll let you know. We may ask you to confirm that the request comes from you.
If you believe we are violating your rights, you can lodge a complaint with the Agency for Personal Data Protection and Free Access to Information of Montenegro (Agencija za zaštitu ličnih podataka i slobodan pristup informacijama), Bulevar Revolucije 11, Podgorica, azlp.me, azlp@azlp.me. Residents of the EU and the UK may also contact the supervisory authority in their own country.
8. How we protect data
- The website uses the secure HTTPS protocol.
- Only the people working on your task have access to requests and project materials.
- We store client access details in a password manager and only transfer them in encrypted form.
- Changes to client websites are tested on a copy first, and we make a backup before deployment.
If a data breach occurs that may affect your rights, we will notify the supervisory authority and, where the risk is high, you — within the time limits set by law.
9. Other
Children. The website and services are intended for companies and entrepreneurs. We do not knowingly collect data from persons under 16.
Changes. If this policy changes, the new version will appear on this page with a new date. We will notify clients separately about significant changes.
Governing law. Data processing is governed by the laws of Montenegro and, for residents of the EU, the UK and Serbia, also by the data protection rules of those jurisdictions to the extent they apply to us.