User Rights (GDPR)

Perqon processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act of Montenegro. As a user, you have the following rights regarding your data.

1. Right of access (Art. 15 GDPR)

You can request confirmation of whether we process your personal data and, if so, obtain a copy of that data together with information about: the purpose of processing, categories of data, the recipient of the data, the retention period, and the source of the data.

2. Right to rectification (Art. 16 GDPR)

If the data we hold is inaccurate or incomplete, you can request rectification without undue delay. You can correct most data (name, email) directly in your account settings in the app.

3. Right to erasure ("right to be forgotten", Art. 17 GDPR)

You can request the erasure of all personal data when:

the data is no longer necessary for the purpose for which it was collected;
you withdraw the consent on which the processing is based;
you object to the processing and there are no overriding legitimate grounds;
the data was processed unlawfully.

You can start account deletion yourself on the page /account-delete. You will need access to the email address linked to the account. After confirmation, personal data is deleted within 30 days. Please note that certain anonymized transaction data may be retained for tax obligations in accordance with statutory retention periods.

4. Right to restriction of processing (Art. 18 GDPR)

In certain cases (e.g. while the accuracy of the data or the lawfulness of the processing is being examined) you can request that we temporarily restrict the processing of your data. During that period we keep the data but do not use it.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format (JSON or CSV) and to transfer it to another controller. This right applies to data we process on the basis of consent or a contract and by automated means.

6. Right to object (Art. 21 GDPR)

You can object to the processing of your data when the processing is based on a legitimate interest. After an objection, we stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

7. Right to withdraw consent

Wherever processing is based on consent, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Agency for Personal Data Protection of Montenegro (AZLP) or the supervisory authority in the country where you live or work.

How to exercise your rights

Send your request to perqon@gmail.com. In the request, state which right you are exercising and, for identification, the email address of your account. We respond to requests within 30 days. If the request is complex or several requests are submitted at the same time, the deadline may be extended by a further 60 days — we will notify you of that extension.

You can also start an account deletion request yourself without contacting support — by visiting the page perqon.me/account-delete.

Data controller

The controller of personal data within the meaning of the GDPR is Perqon, Podgorica, Montenegro. For any questions about data protection: perqon@gmail.com.