Last updated: 17.04.2026.
This Privacy Policy explains how Montenegro Real Estate Hub (“MREH”, “we”, “us”, “our”) as a trading name/brand used by Old Shatterhand DOO Podgorica collects, uses, stores, shares, and protects personal data when you use our website, submit an inquiry, communicate with our team, subscribe to updates, or otherwise interact with us online or offline in connection with our website, real-estate inquiry flows, partner coordination, or related communications.
We process personal data in accordance with applicable data protection law, including the General Data Protection Regulation (“GDPR”) where it applies to our processing activities, as well as applicable Montenegrin personal data protection rules and rules governing cookies and similar technologies, where applicable.
This Privacy Policy should be read together with our Cookies Policy and any specific privacy notice, consent interface, or data collection notice made available at the point of collection.
The data controller responsible for the processing described in this Privacy Policy is:
Old Shatterhand DOO Podgorica, trading as Montenegro Real Estate Hub (“MREH”)
Address: Ulica 15 Račice broj 1, 81000 Podgorica, Montenegro
Email: office@realestatehub.me
PIB: 03594513
Unless expressly stated otherwise in this Privacy Policy or at the relevant point of interaction, MREH acts as the controller of the personal data processed in connection with the website, inquiries, lead handling, and related communications.
Where third-party providers, embedded services, partner agencies, affiliate platforms, or other external parties independently determine the purposes and means of processing, they may act as separate controllers for their own processing activities. In such cases, their own privacy notices may also apply.
We may collect the following categories of personal data:
When you fill out forms, contact us, or communicate with our team, we may collect:
When you contact us, we may process:
When you use the website, we may collect:
Subject to your choices and the applicable consent rules, we may process:
Detailed information about cookies and similar technologies is provided in the Cookies Policy.
Where relevant to the website's actual setup, this may also include consent records, cookie preference choices, pixel events, local storage identifiers, or similar technical identifiers associated with analytics, partner attribution, embedded media, or performance measurement tools.
If you arrive through a promoter, advisor, referral source, or partner link, we may process limited tracking data such as:
This type of data is used primarily for attribution, reporting, and internal business tracking, not to publicly identify referral sources for end users.
Where an affiliate, referral, or partner platform is used, this data may also include partner code, sub-ID, campaign parameters, conversion event reference, or related lead attribution data, subject to the website's technical setup and the applicable legal basis.
Where our website includes, or later includes, embedded or connected third-party services, such as YouTube content, partner content, lead-routing tools, communication widgets, or affiliate integrations, we may process technical interaction data related to such features. Depending on the integration, this may include device/browser information, IP address, timestamp, interaction with the embedded content, referral parameters, and consent status.
Some of these data elements may be collected directly by the relevant third-party provider once the feature is activated, loaded, or interacted with, depending on the technical configuration and your consent choices where consent is required.
We use personal data for the following purposes:
Where consent is required for analytics or similar tools, we rely on consent rather than legitimate interests.
Depending on the context, we rely on one or more of the following legal bases:
We rely on consent where required, for example:
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
We process data where necessary:
We may process data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include:
We may process data where necessary to comply with legal obligations, including accounting, record-keeping, compliance, sanctions, anti-money laundering-related checks where applicable, and responding to lawful authority requests.
This may also include retaining records, responding to data protection requests, handling consumer or regulatory complaints, and maintaining legally required documentation.
Where necessary, we may also process personal data in connection with the establishment, exercise, or defense of legal claims, disputes, complaint handling, enforcement, or similar legal processes, to the extent permitted by applicable law.
We do not sell your personal data. We may share personal data only where necessary and proportionate with the following categories of recipients:
Authorized MREH staff, agents, advisors, or contractors who need access to the data for the relevant purpose.
This access is limited to persons who need the data for inquiry handling, communications, business administration, technical support, compliance, or related operational purposes.
Where relevant to your request, we may share necessary information with:
We share only the information reasonably necessary for the relevant purpose.
Depending on the context, these recipients may act either as our processors/service providers or as independent controllers of the data they process for their own professional, legal, or business purposes.
Where a partner, agency, developer, owner, or professional adviser receives your data to communicate with you directly, assess your request, provide their own services, or manage their own legal obligations, that recipient will usually act as a separate controller for its own processing activities.
We may use external providers for:
These providers act under contract and only as needed for the relevant service.
Where required by applicable law, such providers will be engaged under data processing terms, confidentiality obligations, security commitments, and other appropriate contractual safeguards.
Depending on the website setup, this category may also include providers that support embedded content, video delivery, affiliate attribution, partner tracking, communication widgets, consent management, or similar website functions.
Where referral tracking exists, limited technical or event-based data may be shared with the relevant system or provider to record traffic source, lead attribution, or conversion events.
This may include affiliate platforms, referral partners, campaign providers, tracking systems, or similar tools used to document how a visitor or inquiry reached us.
Where such systems involve non-essential cookies, pixels, or similar tracking technologies, the relevant processing will be subject to the applicable consent rules.
We may disclose data where required by law, to protect our legal rights, to enforce agreements, or in response to lawful requests, court orders, or regulatory obligations.
We may also share data with external legal counsel, compliance advisers, auditors, insurers, or other professional advisers where reasonably necessary for legal, regulatory, risk management, or dispute-related purposes.
Where our website includes embedded media, partner widgets, video tools, affiliate tools, lead-routing integrations, communication widgets, or similar features, certain personal data may be made available to the relevant provider once the feature is loaded, activated, or interacted with, depending on the technical setup and your consent choices where consent is required.
Examples may include YouTube or similar embedded media providers, affiliate or referral systems, embedded map or content providers, or external communication and form-related tools, if and when such integrations are implemented on the website.
Where those providers determine the purposes and means of their own processing, they may act as separate controllers and their own privacy notices may also apply.
Some service providers may process personal data outside the European Economic Area. Where this happens, we will use appropriate safeguards required by applicable law, such as:
Some third-party providers used in connection with website hosting, analytics, embedded content, communications, CRM, consent management, referral attribution, or affiliate tracking may be located in, access data from, or otherwise process data in jurisdictions outside Montenegro and/or outside the European Economic Area.
Where personal data is transferred internationally, we will assess the legal basis and transfer mechanism applicable to the relevant transfer and, where required, implement appropriate safeguards, supplementary measures, or contractual protections.
Where a provider participates in a legally recognized transfer framework or benefits from an adequacy decision, we may rely on that mechanism where applicable. Where no adequacy decision applies, we may rely on Standard Contractual Clauses or another valid transfer mechanism recognized under the applicable legal framework.
You may contact us using the details in this Privacy Policy for more information about the safeguards we rely on for relevant international transfers, subject to confidentiality, legal, and practical limitations.
We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, security, and business needs.
The exact retention period may vary depending on the nature of the data, the purpose of processing, the sensitivity of the information, whether an inquiry develops into an active business relationship, and whether legal, regulatory, evidentiary, or dispute-related requirements apply.
Typical retention periods may include:
Where personal data is relevant to an actual or anticipated dispute, complaint, regulatory matter, security incident, fraud review, or legal claim, we may retain the data for longer where reasonably necessary to establish, exercise, or defend legal claims or to comply with applicable obligations.
When data is no longer needed, we delete it, anonymize it, or securely restrict access to it.
Subject to applicable law, you may have the right to:
Where the GDPR applies, you may also have the right to lodge a complaint with the supervisory authority in the EU/EEA Member State of your habitual residence, place of work, or the place of the alleged infringement, subject to the applicable rules.
To exercise your rights, contact us at:
office@realestatehub.me
We may need to verify your identity before responding.
We may also ask you for information necessary to clarify the scope of your request and to confirm that the request is being made by the data subject or an authorized person.
Where permitted by applicable law, certain rights may be subject to limitations, exceptions, or conditions. If we cannot fully satisfy a request, we will explain the relevant reason to the extent required by law.
If you subscribe to our newsletter or otherwise lawfully receive marketing communications from us, we may send you:
You can unsubscribe at any time using the unsubscribe link in the message or by contacting us directly.
Where required by applicable law, we will send direct marketing communications only on the basis of valid consent or another lawful basis recognized under the applicable rules.
If you unsubscribe, withdraw consent, or object to direct marketing, we will stop sending you further marketing communications, although we may retain limited information necessary to record and respect your opt-out request.
We will not rely on silence, pre-ticked boxes, or bundled acceptance as valid consent where consent is required.
We use cookies and similar technologies for necessary website functions and, where permitted, for analytics, preferences, and other supported functions.
We may also use or later implement similar technologies, such as pixels, tags, scripts, embedded media tools, local storage, consent tools, referral attribution tools, and affiliate tools, depending on the website's actual configuration.
Where required by applicable law, non-essential cookies and similar technologies will be used only after your consent.
Where third-party integrations such as embedded videos, partner tools, affiliate tools, or similar features are implemented, the activation or loading of those features may involve processing personal data, subject to the applicable legal basis and your consent choices, where consent is required.
For full details on the categories of cookies and similar technologies, legal bases, retention periods, third-party providers, and how to manage your choices, please see our Cookies Policy.
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include:
No internet-based system is completely risk-free, but we take data security seriously and work to protect the data we handle.
If we become aware of a personal data breach, we will assess and respond to it in accordance with applicable law, including any notification obligations.
Our website and services are not directed to children, and we do not knowingly collect personal data from children for our business purposes. If you believe a child has provided personal data to us, contact us, and we will review the request and, where appropriate, delete the data.
In some cases, an adult user may voluntarily provide limited information relating to a child, family member, or dependent in connection with a relocation, residence, or property-related inquiry. In such cases, we expect the person providing the information to be authorized to do so, and we will process such data only to the extent reasonably necessary for the relevant purpose.
Our website may contain links to third-party websites, external services, embedded content, partner pages, or third-party integrations. We are not responsible for the privacy, security, availability, or content practices of those third parties.
Where you follow a link to a third-party website, or where a third-party feature, integration, or embedded service is activated on our website, your personal data may be processed by that third party under its own terms, policies, and legal responsibilities.
You should review the privacy notices, cookie notices, and terms of the relevant third party separately.
We may update this Privacy Policy from time to time. The latest version will be published on the website with the updated effective date. Where required, we will provide additional notice of material changes.
We may update this Privacy Policy to reflect legal, regulatory, operational, or technical changes, including changes to our website features, forms, integrations, service providers, referral tools, affiliate tools, or embedded third-party content.
Where required by applicable law, we will obtain renewed consent or provide additional notice before relevant changes take effect.
If you have questions about this Privacy Policy or want to exercise your rights, contact:
Old Shatterhand DOO Podgorica, trading as Montenegro Real Estate Hub (“MREH”)
Email: office@realestatehub.me
Address: Ulica 15 Račice broj 1, 81000 Podgorica, Montenegro
PIB: 03594513
You also have the right to lodge a complaint with the competent data protection supervisory authority.
If your request concerns a specific inquiry, communication, or data protection issue, please provide sufficient detail so we can identify and handle it efficiently.
