Table of Contents

Privacy Policy

Last updated: 15 November 2025

Short version. This Privacy Policy explains in plain terms how we handle personal data when you visit and use immorenta.me and the services connected to this platform – what we collect, why we use it, with whom we share it and how we protect it.

Introduction

This Privacy Policy applies to the website and online services of the immorenta.me real estate platform (the “Platform”). It outlines our data protection practices in line with the EU/EEA GDPR, UK GDPR, relevant US state privacy laws (such as CCPA/CPRA), and applicable Montenegrin regulations. If you have a separate written agreement with us that contains specific privacy provisions, that agreement will prevail in case of contradiction.

Shared listings database. All real-estate information displayed on this site comes from a shared property database operated by ekosphere doo. The same database is used, in adapted form, across the following affiliated websites:

…and any subdomain under https://(subname).ekosphere.me. Property content can therefore appear across several of these domains, with minor technical differences.

More about us: General corporate information and an overview of our services are available at ekosphere.me.

Who We Are (Controller)

Controller: ekosphere doo, Bulevar Teuta bb, 85360 Ulcinj, Montenegro. Email: office@immorenta.me

EU/UK Representative: If and to the extent Art. 27 GDPR/UK GDPR requires us to appoint a representative, we will name this party in an updated version of this Policy. Until then, please contact us directly using the details above.

DPO: We currently have not appointed a dedicated Data Protection Officer. All privacy-related requests and questions can be addressed to the contact provided above.

What Data We Collect

Contact & lead data (for example: name, email address, phone or messenger contact, the content of your message, and preferences such as property type, budget range and preferred locations).
Account data (login details, user role, saved searches or favorites, chosen language and other profile settings).
Transactional & brokerage data (information on engagements, appointments, viewings, offers, and – where required by law – identifiers for KYC/AML checks).
Usage & device data (IP address, timestamps, visited pages, referrer URL, device and browser information, and approximate geolocation derived from technical data).
Cookies & similar technologies (see section 5 for details).
Public/third-party sources (data from land registries, developers, partner agents or similar sources, but only where lawful, proportionate and relevant to the specific case).

We do not intentionally collect special categories of personal data (such as health information or religious beliefs) and we do not deliberately target children with our services (see section 12).

How We Use Data & Legal Bases (GDPR)

Provision of the Platform & services (enabling you to browse listings, respond to offers, request information and schedule viewings) — based on performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interests in operating a functional real-estate platform (Art. 6(1)(f) GDPR).
Brokerage, regulatory checks & compliance (including KYC/AML checks where relevant) — based on our legal obligations (Art. 6(1)(c) GDPR).
Communication with you (email, telephone and, if you provide the number, messaging services such as WhatsApp) — based on your consent (Art. 6(1)(a) GDPR) or our legitimate interests in responding to requests and coordinating transactions (Art. 6(1)(f) GDPR).
Personalised features & saved searches — based on performance of a contract or legitimate interests, depending on the specific feature.
Analytics, security & abuse prevention — based on our legitimate interests in improving, safeguarding and auditing the Platform.
Marketing & newsletters (where you actively opt in) — based on your consent, which you may withdraw at any time.

If our processing is based on consent, you can revoke that consent at any time with effect for the future, for example via the cookie settings on the site or by contacting us directly (see contact details above).

Cookies & Tracking

We use cookies and comparable technologies for different purposes. Some are technically necessary, while others are only set with your consent.

Essential cookies — required for the basic operation of the site (for example, security-related functions, logins, or storing minimal user preferences).
Analytics cookies — help us understand how the Platform is used, which pages are visited and where we can improve usability and performance.
Functional cookies — support features such as language selection, saved searches or user convenience settings.
Advertising or marketing cookies (if used) — enable the measurement or display of targeted ads and campaigns.

Managing cookies: You can configure your browser to block or delete cookies and you can adjust or withdraw your consent via the cookie banner or preferences provided on the site. Essential cookies may still be required for the site to function correctly.

Sharing & Processors

We only share personal data where this is necessary, proportionate and backed by an appropriate legal basis and contractual safeguards:

Service providers (processors) — such as hosting providers, security and monitoring tools, CRM and email systems, analytics services or technical framework providers. These parties process data strictly on our behalf and according to contracts that limit their use.
Partner agents, property owners & developers — if you explicitly ask us to arrange a viewing, request more information or move forward with a property, we may share relevant contact and interest data to coordinate the process.
Authorities, courts & legal advisors — where required to comply with legal obligations, enforce our rights, protect our operations or respond to lawful requests.

We do not trade or sell personal data as a business model. If certain advertising tools were to qualify as a “sale” or “sharing” under specific US state laws, you can use your cookie settings and the options described in section 11 to opt out.

International Transfers

We operate from Montenegro and may use service providers or infrastructure in other countries. Where personal data is transferred from the EEA or the UK to a country without an EU/UK adequacy decision, we implement appropriate safeguards (such as the EU Standard Contractual Clauses and, where relevant, the UK’s IDTA/IDTA Addendum) and, where necessary, additional measures in line with regulatory guidance.

Retention

Leads & correspondence: usually up to 36 months after the last interaction, unless we are required to keep the data longer for legal reasons.
Contract and brokerage records: retained for statutory periods (typically between 5 and 10 years, depending on document type and legal obligations).
Account data: retained for as long as your account is active. If you request deletion, we remove or anonymise data unless a longer retention period is required or permitted by law.
Cookies & analytics data: stored according to the respective cookie lifetime or until you delete them or withdraw consent.

Security

We apply a combination of technical and organisational security measures that are appropriate to the respective risk level, including access controls, encryption in transit, role-based permissions, backups and system monitoring. No system is completely immune to attacks, so we also recommend that you keep your own devices and credentials secure and up to date.

Your Rights (EEA/UK)

Where the GDPR or UK GDPR applies, you have – subject to legal conditions – the following rights with respect to your personal data:

Right of access to the data we hold about you.
Right to rectification of incorrect or incomplete data.
Right to erasure (“right to be forgotten”) where legal grounds exist.
Right to restriction of processing in defined situations.
Right to data portability, where technically feasible and applicable.
Right to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with a competent data protection authority, especially in the EEA/UK country where you live, work or where the alleged infringement occurred.

US State Privacy Rights (incl. California)

California (CCPA/CPRA) and comparable state laws: you may have rights to request access to specific pieces of personal information, to request correction or deletion of certain data and to be free from discriminatory treatment for exercising your rights. If we engage in activities that qualify as “selling” or “sharing” personal information (for instance via advertising cookies), you have the right to opt out.
Opt-out options: you can limit tracking and certain ad-related processing by adjusting cookie preferences on the site and/or by emailing us at office@immorenta.me with the subject line “Do Not Sell/Share”.
Authorized agents: you may use an authorised agent to submit requests on your behalf, provided the agent can demonstrate appropriate authority and we can reasonably verify your identity.