Privatnost
Obrađujemo podatke koje nam date kako bismo vodili vaš korisnički račun: ime, poslovnu e-adresu, tvrtku, zemlju i postavke tržišta, stavke koje spremite i vaše poruke podršci, kao i tehničke podatke koji štite sigurnost korisničkih računa (prijave, IP adresa). Ne koristimo oglašivačke alate za praćenje ni analitiku trećih strana; naše stranice postavljaju samo kolačiće potrebne da ostanete prijavljeni i za zaštitu obrazaca. Podaci o nabavi na stranici potječu iz javnih obavijesti (TED); ne izrađujemo profile pojedinih zaposlenika javnog sektora. U bilo kojem trenutku možete zatražiti kopiju ili brisanje podataka svojeg korisničkog računa — kontakt: support@govtorch.com.
Last updated: 27 October 2026 · Ovaj je dokument dostupan na engleskom jeziku; mjerodavan je engleski tekst.
1. Who is responsible
Controller: [LEGAL_ENTITY_NAME], [REGISTERED_ADDRESS], Montenegro (CRPS [CRPS_NUMBER] · PIB [PIB] · PDV/VAT [VAT_NUMBER_IF_APPLICABLE]). Privacy and data-protection requests: [LEGAL_CONTACT_EMAIL]; any other question: support@govtorch.com.
2. What we process
- Account data — name, work e-mail, organisation, country, market preferences (countries, categories), role in your organisation, interface language and notification choices. Passwords are stored only as a one-way hash.
- Billing data you give for an invoice — company name, billing e-mail and address, VAT number, purchase-order reference, message.
- Service usage — items you watch, alert rules, settings, exports, data-problem reports, and counts of the features your organisation used per day.
- Support communications — what you send through the support form or by e-mail, with your e-mail, organisation and the page you were on.
- Technical and security data — IP address and browser type of your sessions, sign-in times, failed sign-in attempts, request counters used for rate limits, and server error logs.
- Cookies — only the cookies the service needs: a session cookie that keeps you signed in and a short-lived security cookie for forms. No advertising trackers, no third-party analytics.
3. Why
- to provide the service and your account, alerts and digests you switch on (performance of the contract);
- to issue invoices and keep accounting records (contract; legal obligation);
- to keep the service secure and fair — sign-in protection, one session per user, request limits against scraping and credential sharing (legitimate interest);
- to answer your support requests (contract; legitimate interest).
4. Public procurement data
The procurement information in GovTorch comes from public notices (TED). Notices can contain names or contact details of contact persons as published by buyers or suppliers; we show them as published and do not build profiles of individuals.
5. Who else receives data
- Hosting and backup storage: Hetzner Online GmbH (Germany); the application server is located in Helsinki, Finland (EU).
- Transactional e-mail delivery (account, invitation, password and billing e-mails): Zoho CPaaS (ZeptoMail), Zoho Corporation.
We do not sell personal data and do not share it for advertising.
6. How long
Account and usage data for as long as the account exists, then as long as legal retention duties require (e.g. invoices). Sessions end after 14 days without use; request counters are deleted after two days; backups are overwritten in a short rotation.
7. Your rights
You can ask for access to, correction, deletion or restriction of your data, for a copy in a portable format, and object to processing based on legitimate interest. Write to [LEGAL_CONTACT_EMAIL] (or support@govtorch.com). You can also complain to a data-protection supervisory authority.
8. Changes
We update this notice when our processing changes; the date above shows the current version.