Privacy policy

1. Controller and contact

HORIZON GROUP DOO, represented by director Vladimir Drakula, is responsible for handling property enquiries. Registration number: 5 - 0928708 / 006; PIB: 03310736.
XVIII St, 85310 Budva, Montenegro
info@horizon-properties.me
+382 68 111 702

2. Website visits and hosting

This draft is hosted through OpenAI’s ChatGPT Sites. Delivering the website involves technically necessary connection data, including IP address, request time and URL, browser and device information and technical error data. The purposes are delivery, security and troubleshooting. Private access may also require a ChatGPT login, covered by the platform provider’s privacy information. Hosting contract details, processing locations and log retention periods must be completed from the operator’s actual agreements before public use.

3. Property catalogue and images

Your browser requests the public catalogue from www.horizon-group.me. Property images load from image.onoffice.de and landscape images from www.horizon-group.me. Those servers receive technically necessary connection data, including IP address and browser information, to display current listings and images. CRM credentials are not sent to visitors. This connection does not request unpublished CRM records. Opening a property takes you to the existing website, whose own privacy and cookie information applies.

4. Email and telephone enquiries

When you contact us, we process the contact details, property requirements and messages you provide to respond and, where relevant, prepare or perform a contract. Alongside email and telephone links, the website offers an enquiry form once enabled. We store your name, email address, optional phone number, message, language, any property reference, receipt time and delivery status in the website database. The protected enquiry inbox is accessible only to authorised editors. Messages are sent to info@horizon-properties.me, with copies to vladimir@horizon-properties.me and christian@horizon-properties.me. We use Resend (Plus Five Five, Inc., USA) for email delivery. Form data and the sender and recipient details needed for delivery are transmitted to this service. The sending region is EU-West (Ireland); processing by the US provider and its subprocessors outside the European Economic Area may nevertheless occur. Provider privacy information, data processing terms and Standard Contractual Clauses: https://resend.com/legal/privacy-policy and https://resend.com/legal/dpa. Open and click tracking are disabled. If email submission fails, the enquiry remains stored; an authorised team member can retry a definite failure or delete the enquiry. To limit automated submissions, we use a short-lived form token and a connection-address key hashed with a secret random value. Expired tokens are removed after one hour on the next token request. The form feature does not store a raw IP address. Acknowledging the privacy notice does not consent to advertising. Recipients may include staff handling your request and email/IT providers. Information may be shared with owners or other parties where necessary for the requested service or at your request.

5. Legal bases

Where GDPR applies, pre-contractual and contractual enquiries are processed under Article 6(1)(b), technically necessary delivery and other enquiries under Article 6(1)(f), and statutory retention under Article 6(1)(c). Where consent is required, Article 6(1)(a) applies and consent may be withdrawn prospectively. Applicable Montenegrin data protection provisions must also be observed.

6. Cookies, analytics and external services

The new website itself sets no analytics or marketing cookies, uses no tracking, embeds no Google Maps or YouTube videos and loads no Google Fonts. Language selection is encoded in the URL rather than a cookie. Necessary hosting and login functions are covered by the platform’s information. Instagram and Facebook are ordinary links; a connection is made only when you follow them.

7. Retention and international processing

Enquiries are retained as needed to handle your request, perform a contract or meet statutory retention duties, then deleted unless another lawful basis applies. The provider is in Montenegro, and hosting or IT providers may process data in other countries. Where European requirements apply, necessary international transfer safeguards and agreements must be documented against the actual providers and contracts. Those contractual details are still pending for this draft.

8. Your rights

Where provided by applicable law, you may request access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests on grounds relating to your situation, and withdraw consent prospectively. You may complain to a competent data protection authority; in Montenegro this is the Agency for Personal Data Protection and Free Access to Information (AZLP). Contact info@horizon-properties.me to exercise your rights.

9. Security and updates

The website is delivered over encrypted HTTPS. This information will be updated when services change. Last updated: 30 September 2026. Pending company and hosting information must be completed before public use.

Draft for review: the Montenegrin company’s full legal name, legal form, registration and tax details still need to be supplied. The address is taken from the existing English legal notice and needs confirmation by the company.