Privacy Policy

01Data controller

The data controller is [FULL LEGAL NAME], Bulevar Patrijarha Pavla 5s, Belgrade, tax ID (PIB) [XXXXXXXXX], company reg. no. (MB) [XXXXXXXX].

For any data protection question, email [email protected] or call +381 11 3514 700.

02What data we collect

• Contact details you send us: name, phone number, email address and the content of your inquiry.
• Booking details: date of stay or celebration, number of guests and special requests.
• Data we are legally required to collect when registering a guest’s stay.
• Technical data about site use (IP address, device and browser type), only as needed or with your consent.

03Purpose and legal basis

• Answering inquiries and handling bookings: steps prior to entering a contract and performance of a contract.
• Legal obligations: guest registration, accounting and tax rules.
• Security and proper operation of the site: our legitimate interest.
• Visit analytics and external media (YouTube, Google Maps): only with your consent.

04How long we keep data

We keep inquiry data for up to [12 months] after our last contact. Booking and invoice records are kept for the periods required by law. Cookie durations are listed in the Cookie Policy. After that, data is deleted or anonymised.

05Who receives data

We do not sell your data or share it for marketing. Our service providers (hosting, IT support, accounting) may access it while processing it on our behalf, as may Google when you consent to analytics or external media. We disclose data to public authorities only when the law requires it.

06International transfers

Some services (e.g. Google LLC) may process data outside Serbia, including in the USA. Such transfers take place only with appropriate safeguards under the ZZPL, such as standard contractual clauses.

07Your rights

• The right to access your data and receive a copy.
• The right to correct inaccurate data and complete incomplete data.
• The right to erasure and to restriction of processing.
• The right to data portability.
• The right to object to processing based on legitimate interest.
• The right to withdraw consent at any time, without affecting earlier lawful processing.

Send requests to [email protected]. We reply without delay and within 30 days at the latest.

08Complaints to the Commissioner

If you believe your data is not processed lawfully, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, Belgrade, www.poverenik.rs.

09Data security

We apply appropriate technical and organisational measures, including an encrypted connection (HTTPS), restricted access to data and regular system updates.

10Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last change.