Privacy policy

1. Who we are

Zakosi Smiljanić, Smiljanića Zakosi, 31315 Zlatibor, Srbija, email contact@zakosi.org, phone +381 64 368 08 08, is responsible for the processing of your personal data on this website.

We process personal data in accordance with the Serbian Law on Personal Data Protection and – for guests from the European Union – the General Data Protection Regulation (GDPR).

2. What we collect and why

Booking requests: name, email, phone (optional), chosen accommodation, dates, number of guests and your message. We use them to answer your request, confirm the booking and prepare your stay (Art. 6(1)(b) GDPR – steps prior to and performance of a contract). You receive confirmation emails about your request.

Contact form: name, email and message. They are sent to our mailbox and are not stored on the website. We use them only to reply to you (Art. 6(1)(f) GDPR – legitimate interest in answering enquiries).

Protection against spam: to limit abuse of the forms we store an irreversibly encrypted (hashed) form of your IP address for at most 24 hours (Art. 6(1)(f) GDPR).

Server logs: our hosting provider automatically records technical data (IP address, time, requested page, browser) to keep the website secure and running.

Satisfaction survey: the day after your departure we send you one email with a link to a short survey about your stay (Art. 6(1)(f) GDPR – legitimate interest in improving our service). Your answers are linked to your stay; we publish your comment on the website only if you explicitly allow it, and then only with your first name and initial.

News and offers (newsletter): only if you sign up yourself in the survey (Art. 6(1)(a) GDPR – consent). We keep your name, email, language and the time you signed up, and you receive a personal discount code. You can unsubscribe at any time via the link in every message; we keep these details until you unsubscribe.

3. How long we keep it

Personal details from declined or cancelled requests are deleted automatically after 6 months. Details of confirmed stays are deleted automatically 24 months after departure, unless the law requires us to keep them longer. Emails are deleted from our mailbox when they are no longer needed.

Details of guests who have not signed up for our news are deleted at the latest 24 months after their last stay; survey comments we were not allowed to publish are deleted after the same period.

4. Who receives your data

Our hosting provider stores the website and handles our email on our behalf. On arrival we register guests with the competent authorities, as required by Serbian law. We do not sell your data or share it for advertising.

If you book through Booking.com or Airbnb, their own privacy policies apply to that booking.

5. Cookies, fonts and maps

We do not use analytics or advertising cookies. The website stores only your language choice (cookie "lang", 1 year) and, if you choose to show the map, a note of that choice in your browser.

Fonts are served from our own server, so loading the page does not contact Google.

The Google map is loaded only after you click "Show map" (Art. 6(1)(a) GDPR – consent). Google then receives your IP address and other technical data (see the Google privacy policy: https://policies.google.com/privacy). Links to Instagram, Facebook, Booking.com and Airbnb transmit data to those services only when you click them.

6. Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, and to data portability. Where processing is based on your consent (showing the map), you can withdraw it at any time. Just write to contact@zakosi.org.

You can also lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs) or with the data protection authority in your country of residence.