Privacy Policy

1. Data Controller

The data controller within the meaning of the GDPR is:

• Name: Hamam Kozarice (private rental host)
• Address: Tromeđa bb, 77240 Bosanska Krupa, Bosnia and Herzegovina
• Email: info@hamamkozarice.ba
• Phone / WhatsApp: +43 677 64843783

2. Data We Collect

We collect only data that you voluntarily provide to us for the purpose of booking or enquiry:

• First and last name
• Email address
• Phone number (optional)
• Stay dates and number of guests
• Content of your message or enquiry

The website does not automatically collect data via analytics tools, advertising cookies or tracking pixels. We do not log visitor IP addresses and do not use Google Analytics.

3. Purpose and Legal Basis

• Processing bookings and enquiries — legal basis: contract performance (GDPR Art. 6(1)(b))
• Responding to messages — legal basis: legitimate interest (GDPR Art. 6(1)(f))
• Compliance with legal obligations (e.g. guest registration under Bosnian tourism law) — legal basis: legal obligation (GDPR Art. 6(1)(c))

4. Cookies

This website uses only strictly necessary functional cookies required for its operation. These do not require your consent under the ePrivacy Directive.

Cookies used:

• hk_consent_v1 — stores your cookie decision in the browser's localStorage (not a traditional cookie; not transmitted to any server). Automatically deleted after 365 days.

We do not use any third-party cookies, advertising cookies or analytics cookies.

5. Google Search Console

This website is verified in Google Search Console solely to monitor its indexing in Google Search. Google Search Console does not place cookies on visitors' devices and does not collect visitor data — it operates only when Googlebot crawls the website.

6. Third-Party Sharing

Your data is not shared, sold or transferred to third parties for commercial purposes. Data may be shared only where required by law (e.g. in response to an official request).

Communication via WhatsApp is conducted through Meta Platforms Inc. The WhatsApp Privacy Policy applies to that communication.

7. Data Retention

• Booking data: up to 7 years (tax and accounting obligations)
• Correspondence (email, WhatsApp): up to 2 years from last contact
• Guest registration data: as required by Bosnian tourism law

8. Your Rights

Under the GDPR you have the following rights:

• Right of access — request a copy of data held about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data, to the extent permitted by legal obligations
• Right to restriction — request temporary suspension of processing
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest

To exercise any of these rights: info@hamamkozarice.ba

You also have the right to lodge a complaint with a supervisory authority. For UK residents: the Information Commissioner's Office (ICO), ico.org.uk. For other EU residents: the supervisory authority of your country of residence.

9. Data Security

The website uses HTTPS encryption for all communication. Guest data is stored on secure devices with restricted access. We do not use third-party cloud services for storing sensitive guest data.

10. External Links

This website contains links to external platforms (Google Maps, WhatsApp, Instagram, Facebook). We are not responsible for their privacy practices and recommend reviewing their respective privacy policies.

11. Changes to This Policy

We reserve the right to update this policy. Guests in active communication with us will be notified of material changes. The date of last update is shown at the top of this page.