Privacy policy

Last updated: 7 October 2026

When you send us an enquiry or book a room, you trust us with your personal data. This policy explains what we collect, why we need it, how long we keep it and what rights you have.

1. Who is the controller

As a micro business we are not required to appoint a data protection officer. For any privacy question, please write to the address above.

2. What data we collect

Data you give us

• Enquiry form: name, e-mail address, phone number, preferred date, number of guests, type of event and your message.
• E-mail or phone: whatever you tell us when enquiring or booking.
• Room booking: the details required for the legally mandated guest registration — name, date of birth, nationality, type and number of identity document, and dates of arrival and departure.

Data collected automatically

• Server logs kept by the hosting provider: IP address, date and time of the request, page requested, browser type. They exist for the operation and security of the site.
• Cookies and similar technologies — described in detail in our Cookie policy.

This website is not intended for children under 16 and we do not knowingly collect their personal data.

3. Why we process data and on what legal basis

We do not profile you and we do not make automated decisions about you.

4. How long we keep data

• Enquiries that do not lead to a booking: 1 year from the last contact.
• Booking and guest records: 5 years, or as long as guest-registration law requires.
• Invoices and accounting records: 10 years, as required by tax law.
• Your cookie choice: 12 months.
• Server logs: per the hosting provider’s policy, normally up to 12 months.

Once the period expires we delete the data or anonymise it irreversibly.

5. Who we share data with

We do not sell personal data and do not pass it on for third-party marketing. It may be accessed by:

• our hosting provider and website maintainer (as processors),
• the e-mail provider through which your enquiry reaches us (Google Ireland Limited – Gmail),
• Google Ireland Limited, when you load the embedded Google Maps map,
• our accounting service,
• competent authorities, where the law requires it (for example guest registration).

Some of these providers may process data outside the European Economic Area. In that case the transfer relies on the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

If you book through Booking.com, Booking.com B.V. processes your data as an independent controller under its own privacy policy.

6. Your rights

In relation to your personal data you have the right to:

• access — to learn what data we hold about you and receive a copy,
• rectification of inaccurate or incomplete data,
• erasure (the “right to be forgotten”) where there is no longer a basis for processing,
• restriction of processing,
• portability of the data you provided to us,
• objection to processing based on legitimate interest,
• withdrawal of consent at any time, without affecting the lawfulness of processing before the withdrawal.

Send your request to gostisce.jelka@gmail.com. We will reply within one month at the latest, free of charge.

If you believe we are breaching data protection law, you may complain to the supervisory authority:

You may also contact the supervisory authority in your own country of residence.

7. Security

The site is served over an encrypted HTTPS connection. Enquiries and bookings are accessible only to the people who need them for their work. We keep data no longer than necessary and never publish it.

8. Changes to this policy

We update this policy from time to time, for instance when a new tool is added. The version published on this page, with the date shown at the top, is the one that applies.