Privacy policy

Last updated 2026-09-29.

Who is responsible

The controller of personal data on rafting-montenegro.me is Asenvirocon d.o.o., Montenegro. Contact: teodor.sljukic@asenvirocon.me.

What we collect and why

• Enquiry form: your name, phone number or email address, the trip, date and group size you choose, and any message you write. We use it only to pass your enquiry to the operator who runs the trip and to answer you. Legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b)).
• WhatsApp: if you click a WhatsApp button, WhatsApp opens with a prepared message to the operator (+382 69 202 254). What you send there is handled by WhatsApp (Meta) and the operator under their own terms.
• Analytics: only if you click Accept in the cookie banner, Google Analytics 4 sets cookies (_ga, _ga_*) to measure visits in aggregate. Legal basis: your consent (Art. 6(1)(a)). You can withdraw it at any time through Cookie settings in the footer.
• Server logs: our host keeps standard access logs (IP address, time, page requested) for security, for a limited period. Legal basis: legitimate interest (Art. 6(1)(f)).

Where the data goes

• Supabase (database provider) stores enquiries on our behalf as a processor.
• The operator you enquire about receives your enquiry so it can reply and run the trip: Tara Kula Raft (Durmitor Tours), Narodnih heroja bb, Žabljak, +382 69 202 254, tarakularaft@gmail.com.
• Google Ireland Ltd / Google LLC processes analytics data if you consent. This may involve transfer to the United States under the EU–US Data Privacy Framework.
• Hostinger hosts the website.

We do not sell personal data and we do not use it for advertising profiles.

How long we keep it

Enquiries are kept for up to 24 months after your last contact, then deleted, unless the law requires longer (for example for invoicing between us and the operator). Analytics data is kept for 14 months.

Your rights

Under the Montenegrin Law on Personal Data Protection and the GDPR you can ask for access to your data, correction, deletion, restriction, portability, and object to processing; where processing is based on consent you can withdraw it. Write to teodor.sljukic@asenvirocon.me. You can also complain to the Agency for Personal Data Protection and Free Access to Information of Montenegro (AZLP), or to the supervisory authority in your EU country.

Cookies

Without consent the site sets no cookies. It stores your cookie choice in your browser's local storage (key rm-consent) so it does not ask again.