Privacy Policy

MD Maps is a professional cadastral map of Montenegro: live eKatastar data, market analytics and tools for surveyors, appraisers, real estate agents and investors. The Service is available at mdmaps.me and next.mdmaps.me (hereinafter, the “Service”, “we”).

With respect to the personal data processed in connection with the use of the Service, we act as the data controller within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and the Montenegrin Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti).

For any matters relating to data processing, you may write to us at info@mdbase.me.

We seek to collect the minimum data necessary for the operation of the Service.

• Data you provide yourself — your name, email address and the content of your message, when you write to us, register an account or submit a request.
• Usage data — map search queries, parcels viewed, layers selected and interface settings, necessary to provide the features of the Service.
• Technical data — IP address, browser type and version, operating system, language, date and time of access, and referrer. This data is transmitted automatically by your device upon connection.
• Cookies and analytics — identifiers and metrics described in the section “Cookies and Analytics”.

We do not request special categories of data (concerning health, religion, political opinions, etc.) and ask that you not provide them to us.

We process personal data only where there is a legal basis under Art. 6 GDPR:

• Provision of the Service — displaying the map, searching for parcels and operating the tools. Basis: performance of a contract (Art. 6(1)(b)).
• Responding to inquiries and support — handling your messages and requests. Basis: performance of a contract or our legitimate interest in responding to users (Art. 6(1)(b), 6(1)(f)).
• Security, protection against abuse and debugging — maintaining technical logs. Basis: legitimate interest in ensuring the stability and security of the Service (Art. 6(1)(f)).
• Analytics and product improvement — understanding how the Service is used. Basis: your consent, where required (Art. 6(1)(a)), or legitimate interest for strictly necessary measurements.
• Legal compliance — meeting the requirements of applicable law. Basis: legal obligation (Art. 6(1)(c)).

Cookies are small files that a website stores in your browser. We use:

• Strictly necessary cookies — they ensure the basic operation of the site, security and the retention of your settings. Without them the Service does not function, and therefore they do not require consent.
• Analytics cookies — they help us understand which sections are in demand and improve the product. They are set only with your consent and may be disabled at any time.

You can manage cookies in your browser settings — deleting or blocking them. Please note that disabling strictly necessary cookies may impair the operation of certain features.

We do not sell your personal data. We may disclose it to a limited group of parties only in the following cases:

• Service providers (processors) — hosting, infrastructure, analytics and email delivery. They act on our instructions on the basis of a data processing agreement (Art. 28 GDPR).
• Sources of cadastral data — public real estate information is obtained from official registries (Montenegro’s eKatastar); this is open data, not your personal data.
• Public authorities — where required by law, pursuant to a justified request or for the protection of rights.

Some of our service providers may be located outside the European Economic Area. In such cases, the transfer is carried out with appropriate safeguards under Chapter V GDPR — on the basis of a European Commission adequacy decision or Standard Contractual Clauses. A copy of the applicable safeguards may be requested at info@mdbase.me.

We retain personal data no longer than necessary for the purposes for which it was collected:

• account data — for as long as your account is active and for a reasonable period after its deletion;
• correspondence and inquiries — as a rule, up to 24 months after the inquiry has been concluded;
• technical logs — generally up to 12 months for security purposes;
• data processed on the basis of consent — until such consent is withdrawn.

Upon expiry of the retention period, the data is deleted or anonymized, unless otherwise required by law.

In accordance with the GDPR (Art. 15–22), you have the right to:

• obtain access to your data and a copy thereof;
• rectify inaccurate or incomplete data;
• erase your data (the “right to be forgotten”);
• restrict processing;
• data portability — to receive your data in a structured, machine-readable format;
• object to processing carried out on the basis of legitimate interest, including objecting to direct marketing;
• withdraw your consent at any time — this does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise your rights, please write to info@mdbase.me. We will respond within the period prescribed by law (as a rule, within one month).

If you believe that your rights have been infringed, you are entitled to lodge a complaint with a supervisory authority — in Montenegro this is the Agency for Personal Data Protection and Free Access to Information (Agencija za zaštitu ličnih podataka), or with the authority in your place of residence in the EU.

We apply technical and organizational measures to protect data: encryption of the connection (HTTPS), restriction of access on a need-to-know basis, regular updating of the infrastructure and monitoring. However, no method of transmitting data over the internet guarantees absolute security.

The Service is intended for professional use and is not directed at children under 16 years of age. We do not knowingly collect the data of minors. If you believe that a child has provided us with data, please contact us — we will delete it.

We may update this policy as the Service evolves or the law changes. The current version is always available on this page, indicating the date of the last update. We will provide additional notice of any material changes.

For any questions about privacy and data processing, please write to info@mdbase.me.