Records of Processing Activities (RoPA)

Last updated: 22 May 2026
Maintained under: GDPR Article 30 and Montenegro PDPL Article 28.

This register lists all personal data processing activities carried out by MontenegroHousing.com as data controller.

1. Controller identity

MontenegroHousing.com
Platform operated by independent founder (registration pending with AZLP, Montenegro Data Protection Authority).
Contact: contact@montenegrohousing.com

2. Processing activities

Activity A — Agent account management

• Purpose: Operate the listing platform and verify agent identity.
• Legal basis: Contract (GDPR Art. 6(1)(b)).
• Data categories: Name, email, phone, profile, password hash, session tokens.
• Data subjects: Real estate agents and registered users.
• Recipients: Sub-processors listed at /legal/sub-processors.
• Transfers: Railway (US-West2). Standard Contractual Clauses apply.
• Retention: Until account deletion. See /legal/privacy.
• Security: Bcrypt password hash, session token rotation, HTTPS, encrypted backups.

Activity B — Property listing management

• Purpose: Publish listings; verify against state cadastre.
• Legal basis: Contract + legitimate interest (Art. 6(1)(b)(f)).
• Data categories: Listing content, agent contact, cadastre verification cache.
• Data subjects: Agents (controller); cadastre owners (incidental, see DPIA).
• Recipients: Public website visitors (listing fields only — never owner names).
• Transfers: Railway US, Cloudinary global CDN for images.
• Retention: Active + 12 months after expiry (then anonymized).
• Security: Owner-name UI ban, access logging, rate limits.

Activity C — Lead capture (buyer contact requests)

• Purpose: Connect buyers to listing agents.
• Legal basis: Consent (Art. 6(1)(a)) + contract.
• Data categories: Buyer name, email, phone, message text.
• Data subjects: Prospective buyers.
• Recipients: Listing agent only.
• Transfers: Railway US, Resend EU/US for email delivery.
• Retention: 12 months, then anonymized (see /api/cron/anonymize-pii).
• Security: Per-form rate limits, captcha where applicable.

Activity D — Analytics and product improvement

• Purpose: Understand site usage to improve the product.
• Legal basis: Consent (Art. 6(1)(a)) — explicit opt-in via cookie banner.
• Data categories: Anonymized device, page views, click events.
• Data subjects: Site visitors.
• Recipients: Google Analytics 4 (with Consent Mode v2).
• Transfers: Google global infrastructure.
• Retention: GA4 default 14 months, then deleted.
• Security: Consent Mode v2 denial by default; granted only after user accepts.

Activity E — Error monitoring

• Purpose: Detect and fix production errors.
• Legal basis: Legitimate interest (Art. 6(1)(f)).
• Data categories: Stack traces, user agent, anonymized IP.
• Data subjects: Site visitors and agents.
• Recipients: Sentry (EU region).
• Transfers: None outside EU.
• Retention: Sentry 30-day default.
• Security: Standard Sentry DPA.

Activity F — Marketing communications (newsletter, alerts)

• Purpose: Send property alerts and platform updates.
• Legal basis: Consent (Art. 6(1)(a)) — explicit subscription.
• Data categories: Email, preferences.
• Data subjects: Subscribers.
• Recipients: Resend (delivery).
• Transfers: Resend EU/US.
• Retention: Until unsubscribe; opt-out proof kept 24 months.
• Security: One-click unsubscribe; opt-out registry.

Activity G — Cadastre verification (state register lookup)

Fully documented in standalone DPIA.

• Purpose: Verify property authenticity.
• Legal basis: Legitimate interest (Art. 6(1)(f)).
• Data categories: Parcel IDs (sent); parcel boundaries + owner reference (received).
• Data subjects: Cadastre register owners (incidental).
• Recipients: Internal only; owner names never displayed in UI.
• Transfers: Montenegro state services (Geoportal, eKatastar).
• Retention: 180-day cache TTL.
• Security: UI-level owner-name ban; agent access logging.

3. International transfers summary

4. Data subject rights

Access, rectification, erasure, restriction, portability, objection — all available via contact@montenegrohousing.com. Response within 30 days (extendable to 90 days for complex requests under GDPR Art. 12(3)).

5. Review and update

This register is reviewed annually and whenever a new processing activity is added. Material changes are reflected in this page within 30 days.

6. Related documents

• Privacy Policy
• Sub-Processors
• DPIA — Cadastre Verification
• Cookie Policy
• GDPR Rights

Disclaimer: This document is provided for informational purposes only and does not constitute legal advice. MN Housing is not a law firm. For legal advice, please consult a qualified attorney.