Pravila privatnosti
Ovaj dokument dostupan je samo na engleskom jeziku. Engleski tekst je mjerodavna verzija; svaki prijevod služi samo kao pomoć i nije obvezujući.
Version 2026-08-14
This policy explains what personal data MontagemHub processes, why, on what legal basis, and how long it is kept. MontagemHub is a data processor for the business data each company stores in it, and a data controller for the account and security data described below.
Record of processing (lawful-basis register)
| Data category | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account (email, display name, password hash) | Authenticate you and provide the service | Performance of a contract | Life of the account; on deletion, soft-deleted then purged after 30 days |
| Company & portfolio data (properties, leases, invoices, partners) | Deliver the real-estate features the company uses | Performance of a contract (company is the controller) | While the company is active. Invoices are kept ~11 years under Croatian law and are NOT removed by an erasure request |
| Consent record (Terms version + timestamp) | Demonstrate acceptance of the Terms | Legal obligation / consent | Life of the account |
| Security metadata (last login, failed attempts, MFA settings) | Protect your account from unauthorised access | Legitimate interest | Life of the account |
| Audit log (who changed what, when) | Security, accountability, dispute resolution | Legitimate interest | 24 months, then pseudonymised |
Your rights
- Access & portability - download your personal data as JSON from your account.
- Rectification - correct your profile and company details in the app.
- Erasure - request deletion of your account from your account settings (invoices are retained where the law requires, as noted above).
- Complaint - you may lodge a complaint with the Croatian supervisory authority (AZOP, Agencija za zaštitu osobnih podataka).
Sub-processors and transfers
Data is hosted within the EU. Where sub-processors (for example an email delivery provider) are engaged, they are bound by a data-processing agreement. No decision here is final until the deployment platform is confirmed.
Cookies
The service uses only strictly-necessary cookies - an authentication cookie to keep you signed in and a preference cookie for your chosen theme and language. No advertising or third-party tracking cookies are set.
Data security
We apply technical and organisational measures appropriate to the risk: tenant isolation, password hashing, optional two-factor authentication, encryption of secrets, audit logging, and regular backups. Access to personal data is limited to what each role and subscription tier requires.
Changes to this policy
We may update this policy; the version identifier above changes when we do.
Contact
For any data-protection question or to exercise a right that is not yet self-service, contact the account owner or your MontagemHub administrator.