Privacy Policy

Tuncan Technology & Consulting DOO ("Corvin", "Viaworks", "we"), registered at Cetinjski Put BB, 81000 Podgorica, Montenegro, is the controller of your personal data. Data-protection contact: hello@corvinhub.com.

Because the controller is established outside the EU but offers services to people in the EU, we are in the process of appointing an EU representative under GDPR Article 27. Their name and address will be published here once appointed. A Data Protection Officer has not been appointed, as one is not required for our current processing.

This policy is based on the GDPR (EU 2016/679), applied as our global baseline, and covers personal data processed when you visit corvinhub.com or submit the contact form. The data-protection law of Montenegro, where the controller is established, also applies. People in other regions may have additional rights under local law and can contact us to exercise them.

The enquiry records we store deliberately contain no IP address and no browser information. Abuse of the form is handled before anything is written, so keeping them would mean collecting personal data we have no use for.

Non-essential cookies run only with your consent, collected through the banner shown on your first visit and changeable at any time through the "Cookie preferences" link in the footer of every page. See the Cookie Policy for every cookie and similar technology used.

Your enquiry is stored on Cloudflare infrastructure and emailed to us through Amazon Web Services. Consent records are handled by CookieYes. Analytics, if you consent, is processed by Google. The current list, with locations and transfer safeguards, is on the Sub-processors page.

We do not sell personal data, and we do not share it for advertising.

Transfers outside the EU/EEA are made only with appropriate safeguards under GDPR Art. 44 to 49: an adequacy decision, the EU–US Data Privacy Framework where the provider is certified, or Standard Contractual Clauses.

Enquiries are kept for 12 months and then deleted. This is enforced automatically by a scheduled job that runs weekly, rather than left to be done by hand.

Server logs are kept by our hosting provider for its own short standard periods. Google Analytics data, where you have consented, is retained for up to 14 months. You may ask us to delete your data sooner at any time.

We apply appropriate technical and organisational measures: encryption in transit, least-privilege access to the systems that hold enquiries, bot protection and rate limiting on the public form, and a strict content-security policy on every page. The contact form is validated on the server, not only in the browser.

You have the rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Withdrawing consent does not affect processing carried out before you withdrew it. To exercise any of these, contact hello@corvinhub.com. We answer within one month as a rule.

You have the right to lodge a complaint with a supervisory authority. In Montenegro the competent authority is the Agency for Personal Data Protection (AZLP). If you are in the EU, you may contact your local supervisory authority instead.

This site is aimed at businesses and is not directed to anyone under 16, or the age set by your EU member state. We do not knowingly collect children's data.

We may update this policy. The current version is always published here, and the "Last updated" date reflects the latest revision. Contact: hello@corvinhub.com · Cetinjski Put BB, 81000 Podgorica, Montenegro · +382 68 044 129.