Brković Grupa doo, branch Queen of Zlatibor
Last updated: June 29, 2025

1. Introduction

This Privacy Policy explains how Queen of Zlatibor collects, processes, and protects your personal data in accordance with:

• The Personal Data Protection Law of the Republic of Serbia

• GDPR (for users from the EU)

Personal data refers to any information that can identify you (e.g., name, email, card number, IP address).

2. Data Controller

Name: Brković Grupa doo, branch Queen of Zlatibor
Address: Jovanke Jeftanović 117, Zlatibor
Phone: +381 65/4000-49
Email: info@queenofzlatibor.rs

Data Protection Officer:
Ivana Pantelić (ivana@queenofzlatibor.rs)

3. How We Collect and Use Data

a) Data for Legal Obligations

Purpose: Guest registration with the police (Law on Foreigners).
Data: Name, surname, passport/ID number, nationality, address.
Legal Basis: Legal obligation.

b) Data for Contractual Services

Purpose: Room reservations, payments, parking.
Data:

• Contact details (phone, email)

• Card details (processed by Intesa Bank)

• License plate number

• Preferences (room type, additional packages)
  Legal Basis: Contractual necessity.

c) Marketing (Newsletters, SMS, Surveys)

Purpose: Promotional offers (via Mailchimp).
Data: Name, email, phone number.
Legal Basis: Consent (revocable at any time).

d) Photography at Events

Purpose: Promotion on our website/social media.
Right to Object: You may request removal (info@queenofzlatibor.rs).

e) Video Surveillance

Locations: Reception, entrances, garage, pool, restaurant, hallways.
Retention: 30 days.
Legal Basis: Legitimate interest (security).

4. Data Sharing

We only share your data with:

• Intesa Bank (for payments)

• Mailchimp (email marketing)

• PHOBS booking system (reservations)

• Competent authorities (if required by law)

We do not sell data to third parties!

5. Google Analytics & Cookies

We use Google Analytics (with anonymized IP addresses).
Cookies ensure website functionality and analytics.
You can block them in your browser settings.

6. Data Retention Period

7. Data Security

• Encryption (SSL for payments)

• Restricted access (authorized personnel only)

• Breach protocol (notification within 72h if required)

8. Your Rights

You have the right to:
✅ Request a copy of your data.
✅ Correct inaccurate data.
✅ Request deletion (unless legally required to retain).
✅ Withdraw marketing consent.
✅ File a complaint with the Data Protection Authority.

Submit requests to: milenko@queenofzlatibor.rs

9. Policy Changes

Updates will be posted on our website.

10. Contact

For privacy questions:
Email: ivana@queenofzlatibor.rs
Phone: +381 65/4000-49

Effective date: June 29, 2025.