GDPR Privacy Notice
How GAYA Advisory processes personal data under the EU General Data Protection Regulation.
Effective Date
18 May 2026
1. Controller
The data controller is:
GAYA Company D.O.O.
Brand / Service: GAYA Advisory
Address: Vaka Đurovića BB Ulaz B 8/11, Podgorica, Montenegro
VAT / Tax No: 03689638 · Registration: 5 – 1254723 / 002
Founded: 09.09.2024
E-mail:
analysis@gayaadvisory.com · Web: gayaadvisory.com
2. Purpose of this Notice
This GDPR Privacy Notice explains how GAYA Company D.O.O., operating under the GAYA Advisory brand, collects, uses, stores and protects personal data of users located in the European Economic Area, the United Kingdom or other regions where GDPR-like rules may apply.
3. Personal Data We May Collect
We may collect name, email address, phone number, country/city, investment budget, property details, property links, payment proof, invoice information, IP address, device/browser data, cookie preferences, contract approval logs, report number and report delivery records.
4. Purposes of Processing
We process personal data to receive service requests, prepare digital property analysis reports, communicate with clients, issue invoices, track payments, keep legal approval records, comply with legal obligations, manage disputes, ensure website security, provide customer support and, where consent is given, send marketing communications.
5. Legal Bases
The legal bases may include performance of a contract, pre-contractual steps, legal obligation, legitimate interests, consent and establishment, exercise or defence of legal claims.
6. Recipients
Data may be shared with hosting providers, email providers, CRM/form tools, legal advisers, accountants, banks, IT service providers and competent public authorities where required.
7. International Transfers
If personal data is transferred outside the user’s country or outside the EEA/UK, GAYA Company D.O.O. will rely on appropriate legal mechanisms where required.
8. Retention
Personal data is retained for as long as necessary for the purposes described in this notice and for applicable statutory limitation periods.
9. User Rights
Users may have the right of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a supervisory authority.