Privacy and cookies

01Who the controller is

This site is operated by Ribarsko Selo, part of the Adriatic Catering group. For any question about this policy or about the data we process about you, use the contact form. Your message reaches the house it concerns directly, and we reply within one month at the latest.

02What we receive and why

The contact form asks for your name, email and a message and, if you wish, a phone number, topic, house, date and number of guests. Along with the message we record the page language, the time it was sent and the IP address it came from. We use the data to answer your enquiry, booking or celebration request, because you ask for that before any agreement. We use the IP address only to protect the form from abuse, which is our legitimate interest.

The message is first saved at Cloudflare and only then sent as email, so that an enquiry is not lost if delivery fails. The form is protected by Cloudflare Turnstile, which checks that a person, not a bot, is sending it.

Only if you agree to analytics does Google Analytics measure visits. Like every web server, ours records each request: the IP address, the time, the page asked for and the browser type, only to keep the site running and secure. We do not sell data and send no newsletter.

03Who else sees data

• Our hosting and maintenance provider: the site's server is in Germany, in the EU, and form messages leave it as email.
• Cloudflare delivers and protects the site, receives form messages and keeps a copy of them, and runs the Turnstile check.
• Google: the houses' mailboxes are on Gmail, so every message arrives there. Google also processes visit data, but only if you agree to analytics.
• We give your data to no one for their own purposes.

04Transfers outside Europe

Cloudflare and Google are US companies and may process data there. For that they rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

05How long we keep it

• The copy of a form message at Cloudflare: 12 months from receipt, then it is deleted.
• The counter that protects the form from abuse and holds the IP address: about 1 hour.
• The message in the house's mailbox: for as long as the house keeps its mail. We delete it if you ask.
• Server records: about 14 days, then deleted automatically.

06What cookies are

A cookie is a small text record a site leaves in your browser so that it can recognise the browser on your next visit. Similar technologies, such as browser local storage and security checks, work on the same principle and are treated identically in this policy.

07The cookies we use

This is the complete list for this site. Read the Basis column together with the legal basis section below.

This site uses no marketing or advertising cookies, shares no data with ad networks, and builds no visitor profiles.

08Legal basis for cookies

Strictly necessary cookies are set on the basis of our legitimate interest in the site working correctly and staying protected from abuse. They cannot be switched off, because the site does not work properly without them, but none of them serves to track your behaviour.

Analytics cookies are set solely on the basis of your consent. Until you give it, nothing loads and nothing is sent to third parties. Consent is voluntary, refusing it has no consequence for your use of the site, and you may withdraw it at any time, as easily as you gave it.

09Changing and withdrawing consent

The button below reopens the notice with your current choice loaded, so you can switch any category on or off and save a new choice. The same button sits in the footer of every page on this site.

Change your choice

10Control in your browser

Independently of this site, every browser lets you view, delete or block cookies in advance, usually under privacy settings. Deleting cookies also deletes the record of your choice, so the notice will ask again on your next visit. Blocking all cookies may break the contact form, because the security check on it depends on them.

11Your rights

In relation to the data we process about you, you have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent without affecting the lawfulness of processing carried out before the withdrawal. Send your request through the contact form.

If you believe your rights have been infringed, you can complain to the Montenegrin data protection authority, the Agencija za zaštitu ličnih podataka i slobodan pristup informacijama (azlp.me), and for the house in Belgrade also to the Serbian authority, the Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti (poverenik.rs). If you live in the EU or EEA, you can also complain to the authority in your own country.

12Children

This site is not aimed at children under 16 and we do not knowingly collect their data. If a child has sent a message through the form, a parent can ask us to delete it.

13Security

The site only works over an encrypted connection, and form messages are read only by the people at the house they are addressed to.

14Changes to this policy

If what the site collects or the list of cookies changes, this page changes with it and the cookie notice is shown again so that you can decide about whatever is new. Consent given earlier is never carried over to new purposes.