Privacy policy

1. Data controller

The controller of personal data is Deco Group d.o.o., Ul. Radoja Dakića 21/A, City kvart, 81000 Podgorica, Montenegro (tax ID 03390616, VAT no. 30/31-23719-9). For any questions regarding the processing of data, you can reach us at office@decoworlds.com and +382 67 443 999.

2. What data we collect

We collect only the data you provide to us yourself and the data that is technically necessary for the website to work:

Contact form data — first and last name, email address, phone number, name of the organization or company, type of inquiry and message content.
Data from direct communication — the content of emails and phone conversations you have with us.
Technical data — IP address, browser type and time of access, which the server records in standard access logs.

We do not collect special categories of personal data and do not carry out automated decision-making or profiling.

3. Purpose and legal basis for processing

Responding to inquiries and preparing quotes — the legal basis is your consent, which you give by ticking the box in the contact form, or taking steps at your request prior to entering into a contract.
Delivering and monitoring the project — the legal basis is the performance of a contract.
Compliance with legal obligations — accounting and tax obligations prescribed by the laws of Montenegro.
Website security — our legitimate interest in preventing misuse and resolving technical issues.

4. Retention period

We keep data from inquiries that do not lead to cooperation for a maximum of two years from the last communication, after which we delete it. We keep documentation on completed projects and the related accounting records for the periods prescribed by applicable regulations. Server access logs are kept for a maximum of 12 months.

5. Data sharing

We do not sell your data or pass it on to third parties for marketing purposes. We may share data only with:

the hosting and email service provider, to the extent necessary for the website to work and for communication;
equipment manufacturers and suppliers, when this is necessary to prepare a quote or deliver a project, and only to the extent required for that purpose;
the competent state authorities, when there is a legal obligation to provide the data.

If data is transferred outside Montenegro, the transfer is carried out with the appropriate safeguards prescribed by the Law on Personal Data Protection.

6. Cookies and similar technologies

The website does not use marketing or advertising cookies. To remember whether the intro screen has already been shown, we use the browser's sessionStorage — this record is deleted when you close the tab, is not sent to the server and does not allow identification.

The website's server sets only one cookie — a strictly necessary session cookie (SSGSID) that remembers the page language during your visit. It contains only a random session identifier, is not used for tracking and is deleted when you close your browser.

The location map is loaded from Google's servers only after you click the “Show map” button yourself. Until then, no request is sent to Google. By clicking that button, you accept Google's terms and privacy policy.

7. Your rights

With regard to your personal data, you have the right to:

access the data and information on how we process it;
have inaccurate data corrected and incomplete data completed;
have the data erased when there is no longer a basis for processing it;
restrict processing and object to processing;
receive your data in a structured, commonly used format (data portability);
withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

You can send your request to office@decoworlds.com. We respond within 30 days at the latest. If you believe your rights have been violated, you have the right to lodge a complaint with the Agency for Personal Data Protection and Free Access to Information of Montenegro.

8. Data security

The website uses an encrypted HTTPS connection. Access to inquiry data is limited to employees who need it to do their work. We apply technical and organizational security measures appropriate to the risk, including regular system updates and access control.

9. Changes to this policy

We may amend this privacy policy from time to time to reflect changes in our business or in regulations. The current version is always published on this page, together with the date of the last update.

Contents