Privacy Policy
Last updated: [date of approval]
This policy explains how Regency Comfort d.o.o. Beograd collects and uses your personal data when you visit regency-comfort.com, book a stay or contact us. We process personal data in line with the Serbian Law on Personal Data Protection and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The controller of your personal data is:
Regency Comfort d.o.o. Beograd
Koste Abrasevica 33/1, 11050 Belgrade (Zvezdara), Serbia
Company registration no. (MB): 21179540, Tax ID (PIB): 109423828
Email: info@regency-comfort.com, Phone: +381 62 475233
Data protection contact: [name of the person responsible for data protection], [email].
2. What data we collect
- Booking details: your name, email address, phone number, country, address (if you give it), the dates and property you booked, number of guests, expected arrival time and any message you send with the booking.
- Guest registration data: when you arrive, the identity document details of every guest (name, date of birth, nationality, document number), which Serbian law requires us to record and report to the authorities.
- Payment details: card payments are handled by our payment provider, AllSecure, and our acquiring bank. We do not see or store your full card number. We receive only the payment result, a transaction reference and limited card information (such as the card type and last four digits).
- Enquiries: the name, email, phone number and message you send us through the contact form or by email.
- Technical data: when you visit the website, our hosting provider’s servers record your IP address, browser type and the pages you request, as standard server logs used for security and troubleshooting.
3. Why we use your data and our legal basis
| Purpose | Legal basis |
|---|---|
| Taking and managing your booking, taking payment, communicating with you about your stay | Performance of a contract with you |
| Registering guests with the authorities, keeping accounting and tax records | Legal obligation |
| Answering your enquiries | Our legitimate interest in responding to you (or steps before entering a contract) |
| Keeping the website secure, preventing fraud and handling complaints or legal claims | Our legitimate interests |
We do not use your data for automated decision-making, and we do not send marketing emails [unless you have agreed to receive them — delete if you never send marketing].
4. Who we share your data with
We share your data only where needed for the purposes above, with:
- Beds24, the booking and property-management system that stores our bookings and availability;
- AllSecure and our acquiring bank [OTP Bank / bank name], to process card payments, including 3-D Secure checks by your card issuer;
- our website hosting provider [GoDaddy — confirm entity and server location] and our email provider [name];
- online booking platforms, if you booked through one of them;
- public authorities, where the law requires it (for example guest registration with the police, or tax authorities).
These service providers process data on our behalf and under our instructions, or as independent controllers where the law makes them responsible (for example banks). We never sell your personal data.
5. Transfers outside Serbia
Some of our providers may store or process data outside Serbia [list where, e.g. the EU or the USA]. Where data is transferred to a country that does not provide an adequate level of protection, we rely on appropriate safeguards such as standard contractual clauses approved for that purpose.
6. How long we keep your data
- Booking, payment and guest registration records: for as long as required by Serbian accounting, tax and guest-registration laws [confirm periods with your accountant].
- Enquiries that do not lead to a booking: [12 months] after our last contact.
- Server logs: [up to 30 days], unless needed to investigate a security incident.
7. Cookies
Our main website pages do not set cookies for visitors and we do not use analytics or advertising cookies. Some pages that show the Beds24 booking form set a session cookie (PHPSESSID), which is necessary to remember your search while you book and is deleted when you close your browser. The Beds24 booking page itself may set its own cookies, which are needed for the booking process. If you log in to the website administration area, WordPress sets the cookies needed to keep you logged in.
Property pages may show a map provided by OpenStreetMap, which receives your IP address when the map loads.
8. Your rights
You have the right to:
- access the personal data we hold about you and receive a copy;
- ask us to correct inaccurate data;
- ask us to delete your data, where we are not legally required to keep it;
- ask us to restrict processing, or object to processing based on our legitimate interests;
- receive data you gave us in a portable format;
- withdraw any consent you have given, at any time.
To exercise these rights, email info@regency-comfort.com. We will reply within 30 days. You also have the right to complain to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (www.poverenik.rs), or to the data protection authority in your own country.
9. Security
The website uses an encrypted (HTTPS) connection. Access to booking and guest data is limited to the people who need it to look after your stay, and payments are processed by a certified payment provider.
10. Changes to this policy
We may update this policy from time to time. The latest version is always published on this page, with the date of the last update at the top.