Privacy Policy

Last updated: 10/01/2026

Illyria Hotel (“we”, “our”, “us”) is committed to protecting your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), as applied in Montenegro.

1. Data Controller

Illyria Hotel
Address: Rr. Nënë Tereza, 85360 Ulcinj, Ulcinj, Montenegro
Phone: +382 69 648 921
Website: https://illyriahotel.com/

2. Personal Data We Collect

We may collect and process the following personal data:

  • Name and surname
  • Email address
  • Phone number
  • Reservation and stay details
  • Payment-related data (processed securely by third-party providers)
  • IP address, device, browser, and usage data
  • Any information submitted via contact or booking forms

3. How We Collect Data

Data is collected when you:

  • Make a reservation
  • Contact us via forms or email
  • Browse our website
  • Interact with analytics or booking tools

4. Purpose of Processing

We process your data to:

  • Manage reservations and accommodation services
  • Communicate with guests
  • Fulfill contractual and legal obligations
  • Improve website performance and user experience
  • Prevent fraud and ensure security

5. Legal Basis

Processing is based on:

  • Contract performance (reservations and services)
  • Legal obligations (accounting, tourism regulations)
  • Legitimate interest (service improvement, security)
  • Consent (contact forms, analytics where applicable)

6. Booking Engine and Payments

Online reservations may be processed through third-party booking engines and payment providers. These providers process data according to their own privacy policies and GDPR requirements. We do not store full payment card details on our servers.

7. Google Analytics

Our website uses Google Analytics to analyze website traffic and usage. Google Analytics collects anonymized data such as IP address (with IP anonymization enabled), device type, and visited pages. This data helps us improve our services.

You can opt out of Google Analytics by adjusting your browser settings or using Google’s opt-out tools.

8. Data Sharing

We do not sell personal data. Data may be shared only with:

  • Booking and payment service providers
  • Website hosting and IT providers
  • Public authorities when required by law

All partners are required to protect your data.

9. Data Retention

Personal data is retained only for the period necessary to fulfill its purpose or as required by Montenegrin law.

10. Your Rights

You have the right to:

  • Access your personal data
  • Request correction or deletion
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

Requests can be sent using the contact details above.

11. Data Security

We apply technical and organizational security measures to protect personal data from unauthorized access, loss, or misuse.

12. Changes to This Policy

This Privacy Policy may be updated periodically. Updates will be published on this page.