Privacy Policy
Last updated: 24 August 2026
This policy explains what personal data we process, why, on what legal basis, for how long, and what your rights are. It follows the General Data Protection Regulation (GDPR) and Montenegro’s Personal Data Protection Act.
1. Controller
The controller is QQRIQ Consulting DOO, Podgorica, Montenegro, tax ID 03787222. Privacy contact and rights requests: info@samoruke.me.
We have not appointed a data protection officer as the statutory conditions are not met; privacy matters are handled by the responsible person at the address above.
When we begin actively offering services on the European Union market, we will appoint an EU representative under Art. 27 GDPR and publish the details on this page.
2. Data we process
- Tradesperson and advertiser data: name or company name, trade, city, phone, Viber/WhatsApp, email, service description, work photos, working hours, team size.
- Enquiry data: name, phone, email (if provided), job description, city, preferred timeline.
- Review data: name or initials, rating, text, and a phone number used solely for authenticity checks.
- Technical data: IP address, browser and device type, pages visited, referral source, cookie identifiers — only to the extent your consent allows.
3. Purposes and legal bases
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Publishing tradesperson profiles | Contact and business data | Contract / legitimate interest (Art. 6(1)(b), (f)) | Until deletion request or end of publication |
| Forwarding enquiries to a tradesperson or advertiser | Name, phone, email, job description | Legitimate interest and performance of your request (Art. 6(1)(f), (b)) | 24 months from the enquiry |
| Verifying and publishing reviews | Name, rating, text, phone | Legitimate interest — preventing fake reviews (Art. 6(1)(f)) | Phone 12 months; review while the profile is published |
| Visit statistics (GA4, Mixpanel) | Technical data and identifiers | Consent (Art. 6(1)(a)) | Up to 14 months |
| Advertising measurement (Meta Pixel) | Technical data and identifiers | Consent (Art. 6(1)(a)) | Up to 12 months |
| Invoicing and accounting | Advertiser and payment data | Legal obligation (Art. 6(1)(c)) | Statutory tax and accounting periods |
4. Enquiry forwarding — how it works
When you send an enquiry through a form or contact us about a job, we forward your details to the tradesperson or advertiser matching your request so they can contact you directly.
We forward only what is needed for contact and understanding the job. From that point the tradesperson or advertiser is an independent controller responsible for further processing.
If you do not want forwarding, contact the tradesperson directly using the published number instead of using the form.
5. Processors and recipients
We have Art. 28 GDPR data processing agreements with our processors.
- Vercel Inc. (US/EU) — platform and API hosting.
- Railway Corporation (USA) — application server (API) and database.
- Resend, Inc. (USA) — sending emails (application and inquiry notifications, application confirmations).
- Google Ireland Ltd. — Google Analytics 4 (statistics consent only).
- Meta Platforms Ireland Ltd. — Meta Pixel (marketing consent only).
- Mixpanel Inc. — analytics and session replay (statistics consent only).
- Tradespeople and advertisers — as independent controllers for forwarded enquiries.
- Public authorities — where legally required.
6. Transfers outside the EU
Some processors (Vercel, Mixpanel, Google, Meta) may process data in the USA. Transfers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, with additional technical and organisational safeguards.
7. Session recordings
With statistics consent we use Mixpanel Session Replay, which records navigation through the page. Password fields are masked. Recordings are used only for debugging and usability improvements, never for marketing profiling of individuals.
8. Automated decision-making
We do not carry out automated decision-making or profiling with legal effects on individuals. Result ordering is explained on the How We Rank Results page.
9. Your rights
Send requests to info@samoruke.me. We reply without delay and at the latest within 30 days. You may also complain to the Agency for Personal Data Protection and Free Access to Information of Montenegro or, if you are in the EU, to your national supervisory authority.
- access and a copy of your data;
- rectification and completion;
- erasure (“right to be forgotten”);
- restriction of processing;
- data portability;
- objection to processing based on legitimate interest;
- withdrawal of consent at any time, without affecting the lawfulness of prior processing.
10. Security and minors
We use HTTPS, access control for the admin panel and data minimisation. The platform is not intended for people under 16 and we do not knowingly collect their data.
11. Cookies and your choice
A full cookie list is in the Cookie Policy. You can change your category choices at any time.