1. Data Controller Identification

The data controller responsible for the processing of personal data via this website is Frienddashbreez Media & Hospitality Ltd., registered under company registration ME-94820184, located at Obala Portonovi 14, 85340 Herceg Novi, Montenegro. Inquiries regarding data governance should be directed to our designated Data Protection Officer (DPO) at [email protected].

2. Scope and Information We Collect

We collect personal information solely when voluntarily provided by website visitors or automatically logged through basic server infrastructure:

  • Direct User Inquiries: When completing our concierge advisory form on the Contact page, we collect your full name, email address, topic interest, and any itinerary details provided in your message.
  • Technical Telemetry: Standard web server logs collect technical data including masked IP addresses, browser user agent strings, referring URLs, and timestamps to diagnose technical faults and mitigate malicious cyber attacks.
  • Cookie Preference Tokens: Small identifiers stored locally within your browser localStorage indicating whether you have accepted, rejected, or customized tracking categories.

3. Legal Grounds for Data Processing (GDPR Article 6)

We process your personal information in strict compliance with the European Union General Data Protection Regulation (GDPR) and the Montenegrin Law on Personal Data Protection:

  • Consent (Art. 6(1)(a)): Explicitly obtained prior to storing non-essential analytical cookies or dispatching electronic advisory correspondence.
  • Contractual & Pre-Contractual Measures (Art. 6(1)(b)): Necessary to answer your bespoke luxury hospitality inquiries and itinerary requests.
  • Legitimate Interests (Art. 6(1)(f)): Maintaining network resilience, mitigating unauthorized attempts to inject code, and improving the architectural usability of our editorial platform.

4. Third-Party Service Processors

Frienddashbreez does not sell, lease, or monetize user data under any circumstance. We engage vetted technical processors operating under data processing agreements (DPAs):

  • Cloud Hosting Infrastructure: Secure servers located within the European Economic Area (EEA) configured with end-to-end TLS 1.3 encryption.
  • Privacy-Conscious Analytics: Aggregated analytical metrics collected only after explicit user consent to evaluate which resort articles receive readership.

5. Data Retention Protocols

Personal data gathered through contact inquiries is retained exclusively for the duration necessary to satisfy the advisory engagement—typically no longer than twenty-four (24) months from last contact—unless ongoing regulatory or accounting obligations necessitate longer preservation. Technical server log entries are truncated and automatically overwritten every thirty (30) days.

6. Your Rights Under GDPR and CCPA/CPRA

Regardless of your physical residence, we extend comprehensive privacy rights to all visitors:

  • Right of Access & Portability: You may request a machine-readable export of all personal information held about you.
  • Right to Rectification: You may correct inaccurate or incomplete contact records.
  • Right to Erasure ("Right to Be Forgotten"): You may request total purging of your personal records from our databases.
  • Right to Restrict or Object: You may halt specific processing activities, such as analytical evaluation.
  • Non-Discrimination: California residents exercising CCPA rights will receive identical editorial content and site performance.

To exercise any of these statutory rights, please send an authenticated email to [email protected] with the subject line "Personal Data Request". Responses are delivered within thirty (30) calendar days.

7. Supervisory Authority

If you believe our data processing fails to align with applicable data protection statutes, you maintain the legal right to lodge a formal complaint with the Agency for Personal Data Protection and Free Access to Information of Montenegro (AZLP) or your local European data protection authority.