Privacy Policy

GoMontenegroGuide is operated by Lytheron OÜ, an Estonian company. Lytheron OÜ acts as controller for personal data processed through gomontenegroguide.com, its localized pages, business dashboard and related services.

This Policy applies to visitors, registered users, business representatives and people who contact us. Listed businesses remain independently responsible for data they collect directly through their own websites, telephone numbers, WhatsApp accounts or other channels.

The categories of data depend on how you use the platform.

• Account and profile data, such as name, email address, role, business details and login information.
• Content and communications you submit, including profile text, images, reviews, enquiries and support messages.
• Technical and usage data, such as IP address, device type, browser, language, pages viewed, timestamps, referrer and interaction events.
• Lead and engagement signals, such as clicks on WhatsApp, maps, social links or other partner contact actions.
• Transaction and subscription records where paid services are purchased. Payment-card data is handled by the relevant payment provider and is not stored by us unless expressly stated.

We receive data directly from you, automatically from your device, from authorized business representatives and, where lawful, from public sources or service providers used to maintain accurate listings.

We process personal data only where a valid legal basis applies.

• Contract: to create accounts, publish and manage profiles, provide requested services and administer subscriptions.
• Legitimate interests: to secure the platform, prevent abuse, measure performance, improve content, understand aggregate engagement and develop our services.
• Consent: for optional cookies, certain marketing communications or other activities where consent is required.
• Legal obligation: to comply with accounting, tax, regulatory, fraud-prevention and lawful authority requests.
• Vital or public interests only where exceptional circumstances and applicable law require it.

Business profile information may be publicly visible and indexed by search engines or other third-party services. Business representatives must avoid publishing personal information that is not necessary for the listing.

When you contact a listed business through an external channel, that business receives and processes the information you choose to send. Its own privacy practices apply to that interaction.

We may use essential technologies required for security, authentication, language preferences and core functionality. Optional analytics or marketing technologies are used only where permitted and, when required, after your consent.

You can manage browser settings and any consent controls available on the platform. Blocking essential storage may affect some functions.

We may share limited data with vetted providers supporting hosting, databases, authentication, email, analytics, security, payments, customer support, translation or content-processing functions. They may process data only for agreed purposes and under applicable safeguards.

We may also disclose data where required by law, to protect users or the platform, during a corporate transaction, or with your instruction or consent. We do not sell personal data.

We may use automated or AI-assisted tools to translate, classify, moderate, summarize or improve content and support platform operations. We seek to limit the personal data submitted to such tools and apply provider controls and contractual safeguards where appropriate.

We do not use solely automated decision-making that produces legal or similarly significant effects on individuals unless we provide the notices and safeguards required by law.

Some providers may process data outside the European Economic Area. Where required, we use recognized safeguards such as adequacy decisions, Standard Contractual Clauses and supplementary technical or organizational measures.

We retain personal data only for as long as necessary for the purposes described in this Policy, including account operation, dispute resolution, security, legal compliance and record-keeping. Retention periods vary by data type and context.

When data is no longer required, it is deleted, anonymized or securely restricted, subject to backups and mandatory retention duties.

We use reasonable technical and organizational measures designed to protect data, including access controls, authentication, encrypted connections, logging, backups and supplier reviews where appropriate. No internet service can guarantee absolute security, so users should also protect their credentials and devices.

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection to processing. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.

• You may object to direct marketing at any time.
• You may complain to the Estonian Data Protection Inspectorate or your local supervisory authority.
• Rights may be limited where legal exemptions, the rights of others or mandatory retention duties apply.

The platform is not directed to children and we do not knowingly request personal data from children who cannot lawfully provide it. A parent or guardian who believes a child has submitted data may contact us.

We may update this Policy when our services, providers or legal obligations change. The current version and revision date will be published on this page. Material changes may also be communicated through the platform or account channels where appropriate.