Privacy Policy (Latest update April 2026)

Apr 15, 2026

Ekonomik Accountants d.o.o. (“Ekonomik”) is officially registered in the Register of Personal Data Files maintained by the Agency for Personal Data Protection and Free Access to Information of Montenegro (AZLP), the competent Montenegrin Supervisory Authority for Personal Data Protection. This registration reflects Ekonomik’s formal compliance framework in relation to applicable personal data processing activities under Montenegrin law.

Depending on the nature of the engagement, Ekonomik may act as:

A controller of personal data, where it determines the purposes and means of processing; or
A processor of personal data, where it processes personal data on behalf of a client and in accordance with the applicable contract, written instructions and legal requirements.

In line with applicable Montenegrin data protection rules, Ekonomik has implemented the internal policies, procedures and mandatory documentation required for its business operations, including, as applicable:

An Internal Rule on the Protection of Personal Data.
Mandatory records of personal data files / data collections, including, where relevant, records relating to employees, candidates and third parties.
A Data Processing Agreement (DPA) framework for relationships in which Ekonomik processes personal data on behalf of clients.
A Privacy Policy for external communications and website use, where required; and
Other supporting documentation and internal measures reasonably required to support compliance with applicable personal data protection rules.

Where required by law and depending on the structure of the relevant processing activities, Ekonomik also maintains or supports the relevant internal records, access restrictions, confidentiality obligations, organizational measures and regulatory filings or notifications applicable to the processing of personal data in Montenegro.

What personal data do we collect about you?

The personal data we may process includes:
Basic identification data, such as your name, surname, title, position, employer and relationship to a legal or natural person.
Contact details, such as email address, telephone number and correspondence details.
Invoicing and payment data.
Corporate, compliance and onboarding data.
Employment, payroll, permit and engagement-related data where relevant to the services.
Personal data contained in documents, records and correspondence provided to us in the course of service delivery; and
Any other personal data that you voluntarily provide to us or that is lawfully provided to us in connection with our services.
In limited cases, and only where legally permitted or required, we may also process special categories of personal data where this is necessary for the performance of services, compliance with law, the establishment or defense of legal claims, or another valid legal basis.

How do we obtain your personal data?

We may obtain personal data:

Directly from you.
From your employer, representatives, group entities or authorized contact persons.
When you communicate with us by email, telephone, online meeting tools, contact forms or in person.
During onboarding, contracting and service delivery.
From public registers, competent authorities and other lawful public sources; and
From counterparties, advisers, software providers or service partners where relevant to the engagement and legally permissible.

For what purposes do we process your personal data?

We may process personal data for the following purposes:

To respond to enquiries, requests and communications.
To onboard clients and perform acceptance, compliance and administrative procedures.
To provide accounting, tax, payroll, advisory, legal-support, corporate administration and related professional services.
To manage and administer our relationship with you.
To comply with legal, regulatory, contractual and internal policy obligations.
To prepare invoices and administer payments.
To maintain the security, integrity and continuity of our systems and records.
To establish, exercise or defend legal rights and claims; and
To communicate with you regarding our services were permitted by law.

On what basis do we process personal data?

We process personal data only where we have an appropriate legal basis, including:

Where processing is necessary to take steps prior to entering a contract or for the performance of a contract.
Where processing is necessary to comply with a legal obligation.
Where processing is based on your consent, where consent is required.
Where processing is necessary for the protection of legitimate interests, to the extent permitted by applicable law; or
On another lawful basis recognized under applicable Montenegrin data protection rules.

How long do we keep personal data?

Ekonomik retains personal data only for as long as necessary for the purposes for which it was collected and processed, including for the duration of the relevant engagement, applicable statutory retention periods, compliance requirements, limitation periods and the protection of legal rights and interests.

Who do we share personal data with?

Where necessary and lawful, we may share personal data with:

Our personnel and authorized internal team members.
Clients and their authorized representatives.
Affiliated entities and professional partners involved in the relevant engagement.
IT, software, hosting, payroll, archiving and administrative service providers acting under appropriate obligations.
Competent authorities, courts, regulators and public bodies where disclosure is required or permitted by law; and
Other third parties where this is necessary for the provision of services or the protection of legal rights.

Any transfer of personal data outside Montenegro, where applicable, will be carried out in accordance with the applicable legal requirements and appropriate safeguards.

How do we protect personal data?

Ekonomik applies appropriate technical, organizational and personnel-related measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, misuse or access. Access to personal data is restricted to authorized persons on a need-to-know basis and subject to confidentiality and internal control measures. This reflects the protection-measures framework required under Montenegrin law.

Your rights

Subject to the conditions and limitations under applicable law, data subjects may have the right to:

Request access to their personal data.
Request correction or updating of inaccurate or incomplete data.
Request deletion where processing is unlawful or no longer justified.
Object to or request restriction of certain processing.
Withdraw consent where processing is based on consent; and
Lodge a complaint with the competent supervisory authority in Montenegro.

Montenegrin law also requires data subjects to be informed about the controller, the purpose and legal basis of processing, the type of data processed, recipients, and rights of access and correction.

Changes to this Privacy Policy

Ekonomik may update this Privacy Policy from time to time to reflect legal, regulatory, operational or service-related changes. The latest version will be published on the relevant page or otherwise made available.

Contact

For questions relating to this Privacy Policy or the processing of personal data by Ekonomik, please contact us through our official contact details published on our website or engagement documentation.

Last updated: April 2026