1. Data Controller
DFP Trade d.o.o.
Bulevar Džordža Vašingtona 12/3, 81000 Podgorica, Montenegro
VAT ID: PDV 02908876 · Company registration: CRPS 5-0123456
For any privacy-related request, use the inquiry form on this site.
2. Data we process
Contact form. When you submit an inquiry or product request, we process the data you enter: name, email address, laboratory/company, country, furnace brand and model, part needed, quantity and message text.
Usage data. If you consent to analytics, we process pseudonymised usage data (pages visited, device type, approximate region) through Google Analytics to improve the website.
3. Purposes and legal bases
Handling inquiries and order requests (Art. 6(1)(b) GDPR). We process contact-form data to answer your request and — if you place an order — to perform the contract.
Legitimate interest (Art. 6(1)(f) GDPR). We process usage data without analytics consent solely where necessary to ensure the security and technical operation of the site.
Analytics only with consent (Art. 6(1)(a) GDPR). Google Analytics data is only collected after you give consent via the cookie banner. You may withdraw consent at any time.
4. Cookies and consent
The site only sets analytics cookies (Google Analytics) after you give consent in the cookie banner. Without your consent, no tracking cookies are set and analytics remain disabled. We use Google Consent Mode v2 with all storage types set to denied by default; nothing is loaded or stored until you accept.
You can change your choice at any time using the “Cookie settings” link in the footer.
5. Processors and recipients
We use the following processors, each bound by a data processing agreement:
Web3Forms — forwards contact-form submissions to us; processes the data you enter in the form.
Google LLC / Google Ireland Ltd. — Google Analytics 4, only with your consent.
Cloudflare, Inc. — CDN, DNS and Pages hosting; processes only technical data.
We do not sell personal data to third parties.
6. International transfers
Data may be transferred to servers outside the EEA (e.g. the United States) by processors such as Google and Cloudflare. Where required, these transfers are subject to the EU Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework as recognised transfer mechanisms under Chapter V GDPR.
7. Retention
Contact-form data is retained only as long as needed to handle your inquiry and — if you become a customer — for the duration of the business relationship plus the statutory retention periods (including warranty and tax records). Analytics data is retained according to the retention settings you choose in Google Analytics. You may request deletion at any time.
8. Your rights
Under the GDPR you have the right to:
• access the personal data we hold about you (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (“right to be forgotten”) (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these rights, contact us via the inquiry form. We respond within one month as required by Art. 12 GDPR.
9. Contact and complaints
For any data-protection question, please contact us via the inquiry form.
You also have the right to lodge a complaint with a supervisory authority — in Montenegro the Agency for Personal Data Protection and Free Access to Information, in an EU member state the authority of your place of residence, especially the German Federal Commissioner for Data Protection and Freedom of Information (BfDI), the French CNIL or the Spanish AEPD.