Controller
Asenvirocon d.o.o., Podgorica, Montenegro. Contact: teodor.sljukic@asenvirocon.me.
What we collect and why
- Booking requests: name, e-mail, phone (optional), date, number of people, message. Purpose: to pass your request to the operator and follow up (GDPR Art. 6(1)(b) — steps prior to a contract at your request).
- Technical data: a hashed (non-reversible) form of your IP address with each request, to block spam and abuse; server logs kept by our host. Legal basis: legitimate interest (Art. 6(1)(f)).
- Analytics (only with consent): Google Analytics 4 collects pseudonymous usage data after you click “Accept analytics”. Legal basis: consent (Art. 6(1)(a)). Consent can be withdrawn whenever you like through “Cookie settings” in the footer.
Who receives your data
The operator of the activity you ask about (currently Tara Kula Raft, Žabljak, Montenegro) receives your request by e-mail and, if you send it, by WhatsApp. WhatsApp is run by Meta; when you send the message, WhatsApp’s own privacy policy applies. Our hosting provider (Hostinger) processes data on our behalf. With consent, Google processes analytics data, which may involve transfers outside the EEA under Google’s standard contractual clauses.
How long we keep it
Booking requests are kept for up to 3 years for commission accounting with operators and for handling disputes, then deleted. Hashed IP data is used only for rate limiting.
Your rights
You have the right to see the data we hold on you, fix it, have it erased, limit or move it, and to object where we rely on legitimate interest. Write to teodor.sljukic@asenvirocon.me. You may complain to the Montenegrin Agency for Personal Data Protection and Free Access to Information (AZLP) or to the data protection authority where you live in the EU.
Cookies
- bm_s — session cookie, set only on pages with a form and in the admin area; needed for the security token. Deleted when you close the browser.
- bm_consent — stored in your browser (localStorage) to remember your cookie choice.
- _ga, _ga_* — Google Analytics, only after you accept; up to 2 years.
No advertising or tracking cookies are set before you consent. Change cookie settings.