Privacy Policy
Last updated:
Your data stays yours - we collect only what we need to answer your inquiry.
1. Data controller
The data controller for personal data processed through letovanje-grcka.com is Đorđe Švabić PR Računarsko programiranje Aranđelovac, registration number (MB) 68491126, tax ID (PIB) 115602581, Aranđelovac, Serbia. Contact: info@letovanje-grcka.com.
2. Data we collect
We process the following categories of personal data:
- Inquiry and contact forms - name, email address, phone number, destination, travel dates, message text.
- Owner accounts - name, email, company details (if applicable), billing information, property listings.
- Usage data - IP address (anonymised), device type, browser language, pages visited, referrer URL, approximate country (derived from IP). Collected via Google Analytics 4 (through Google Tag Manager) and our own analytics system.
- Cookies - see our Cookie Policy.
3. Legal basis and purpose
| Data | Purpose | Legal basis |
|---|---|---|
| Inquiry form data | Forwarding inquiry to property owner, responding to traveler | Consent (form submission) |
| Owner account data | Service provision, invoicing, subscription management | Contract performance |
| Analytics data | Site performance, improving user experience | Legitimate interest / consent (cookie) |
| Log data | Security, abuse prevention | Legitimate interest |
4. Sharing with third parties
We do not sell personal data. We share data only with:
- Property owners - inquiry data is forwarded to the owner of the property you enquired about.
- Infrastructure providers - Supabase (database, EU region), Vercel (hosting, EU edge), Resend (transactional email), Cloudflare (CDN). These providers act as processors under data processing agreements.
- Google - analytics data via Google Analytics 4 / Google Tag Manager.
All infrastructure providers are located in or process data within the European Economic Area or under Standard Contractual Clauses.
5. Retention
- Inquiry and contact form data: up to 24 months.
- Owner account data: for the duration of the account plus 3 years after termination (for legal and tax purposes).
- Analytics data: 14 months (Google Analytics default).
- Server logs: up to 30 days.
6. Your rights
Under Serbian law (Law on Personal Data Protection, "ZZPL") and the GDPR, you have the right to:
- access your personal data;
- request correction of inaccurate data;
- request erasure ("right to be forgotten");
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time (where processing is based on consent).
To exercise any of these rights, write to info@letovanje-grcka.com. We will respond within 30 days. You also have the right to lodge a complaint with the Serbian supervisory authority: Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti, Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs.
7. Cookies
We use cookies and similar technologies. For details see our Cookie Policy.
8. Changes to this policy
We may update this policy. The "Last updated" date at the top reflects the most recent revision. For material changes we will make reasonable efforts to notify registered owners by email.