Privacy policy
What personal data we process, why, how long we keep it, and what rights you have.
This policy explains what personal data we process when you visit this site or write to us through one of its forms, why we process it, and what rights you have.
Who processes your data
The controller is Placeholder Company s. r. o., Placeholder street 12, 811 01 Bratislava, Slovakia, Reg. no. 00 000 000 · VAT no. 0000000000. For anything concerning your personal data, write to info@investbysea.com or use the contact form. We have not appointed a data protection officer — the scale and nature of our processing does not require one.
What we process
Almost all the personal data we hold about you, you gave us yourself, by filling in one of the three forms on this site: the contact form, the enquiry form on a listing, and the booking form for the free fifteen-minute consultation.
- Your name and e-mail address — the only two required fields. Without them we cannot reply.
- Your phone number, the language you would like a reply in, and when we may call — if you fill them in.
- What your enquiry is about — a listing number or link, or else the country, budget, intended use of the property, and whether you are considering a mortgage.
- Your message, if you write one — the field is optional.
- The name of whoever referred you to us, if you give it. That means processing data about a third person, so please only name someone who would expect it.
- A record of your consent — the date and time you ticked the box, the site language you submitted in, and whether the related e-mail was delivered.
What we do not collect
This site runs no analytics, advertising or tracking tools, embeds no maps, videos or social media buttons, and serves its fonts and its property photographs from its own server. While you browse, your browser asks nothing of any third party.
We do not store your IP address in the database when you send a form. It is held in the server's memory for at most ten minutes, to limit how many submissions come from one address and keep the form from being abused, and then it is gone.
The web server through which this site is reachable keeps ordinary operational logs (IP address, time of request, page requested, browser type). They serve operation and security only, are kept for a short period, and are not linked to what you send through the forms.
Why, and on what legal basis
- To handle your enquiry and reply to it — on your consent, which you confirm by ticking the box when you submit the form (Art. 6(1)(a) GDPR). If matters go further, we process your data to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- To protect the form from abuse and keep the site secure — our legitimate interest (Art. 6(1)(f) GDPR).
- Accounting and tax duties, if you order a paid service from us — compliance with a legal obligation (Art. 6(1)(c) GDPR).
We send no newsletter and no marketing e-mail. If we ever start, we will ask for separate consent first.
How long we keep it
- Enquiries and consultation bookings — three years from the day you sent the form, after which we delete them.
- The consent record — as long as the enquiry it belongs to; it is the evidence of what you consented to.
- Accounting documents, where any arise — for as long as tax and accounting law requires (usually ten years).
If you withdraw your consent sooner, we delete your data without undue delay — except anything we are required to keep by law.
Who else sees it
We do not sell your data and we give it to nobody for marketing.
- Our hosting and e-mail providers, on whose server the site runs and through whose mailbox the mail goes. They act as processors and handle the data solely for us.
- The partner estate agency — if you ask us to put you in touch about a particular property. We pass on only what that takes, and you will know beforehand who it goes to.
- Public authorities, where the law requires it.
Listing texts are translated by an automated service (Anthropic Claude). We send it property descriptions from the partner agency's data and never anything from the forms.
Transfers outside the EU
The properties we list are in Montenegro. It is not part of the European Economic Area, and the European Commission has issued no adequacy decision for it. If you ask us to connect you with the partner agency there, passing on your contact details is a transfer to a third country. We make it under Art. 49(1)(b) GDPR — it is necessary for steps taken at your request prior to a contract — and only when you ask us to. If you would rather we did not, tell us and we will not pass your details on.
Automated decision-making
We use no profiling and no automated decision-making that produces legal effects for you. The properties we put in front of you are chosen by a person.
Cookies
This site uses no analytics or advertising cookies. The details are on the separate Cookies page.
Your rights
In relation to your data, the GDPR gives you these rights:
- The right of access — to know whether we process data about you, and to receive a copy of it.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure, the “right to be forgotten”.
- The right to restriction of processing.
- The right to portability — to receive your data in a structured, commonly used format.
- The right to object to processing we base on our legitimate interest.
- The right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
Write to info@investbysea.com. We will answer within one month at the latest, and we charge nothing for it.
Complaining to the supervisory authority
If you believe we process your data contrary to the rules, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk. We would appreciate hearing from you first — most things can be put right faster that way.
Changes to this policy
If we change how we process data — by adding an analytics tool, for instance — we will update this page and change the effective date below. We will tell anyone we are in contact with about substantial changes.
This version is effective from 17 August 2026.