Privacy Policy

This Privacy Policy explains how Hotel Novitas ("we", "us", "Data Controller") collects, uses, stores and protects your personal data when you visit https://hotel-novitas.com or use our online services (reservation enquiry, catering enquiry, contact).

We act in accordance with the Law on Personal Data Protection of Bosnia and Herzegovina and the Law on Personal Data Protection of the Federation of BiH, as well as other applicable regulations.

Data controller: Hotel Novitas

Address: HVO br. 8, 80101 Livno, Federacija Bosne i Hercegovine, Bosna i Hercegovina

Email: info@hotel-novitas.com

Phone: +387 63 720 181

Depending on how you use the website, we may process:

• Identification and contact data: name, email, phone number, company name (if provided).
• Reservation or enquiry data: stay dates, number of guests, room type, special requests, event details (catering).
• Technical data: IP address, browser type, operating system, language, access time, referrer URL.
• Cookie data – see our Cookie Policy.
• Communication content sent via forms or email.

We process your data only for the following purposes:

• Processing accommodation and catering enquiries – pre-contractual measures and contract performance at your request.
• Communication regarding your enquiry – legitimate interest or pre-contractual measures.
• Compliance with legal obligations (accounting, tourism records).
• Website analytics – only with your consent via the cookie banner.
• Security and technical operation of the website – legitimate interest.

We do not sell your data. We may share data only with:

• IT service providers (hosting, maintenance, email) acting as processors under contractual safeguards.
• Analytics providers (e.g. Google Analytics) – only with cookie consent.
• Public authorities when required by law.

We retain data only as long as necessary:

• Reservation and catering enquiries: up to 3 years from the end of communication or as required by business records legislation.
• Confirmed bookings: as required by accounting and hospitality laws.
• Server logs: up to 12 months.
• Cookie consent data: until withdrawal or cookie expiry.

Under applicable data protection law you have the right to:

• Information about processing.
• Access your personal data.
• Rectification of inaccurate data.
• Erasure where legal conditions are met.
• Restriction of processing.
• Object to processing based on legitimate interest.
• Withdraw consent at any time.
• Lodge a complaint with the supervisory authority.

You may lodge a complaint with Agencija za zaštitu ličnih podataka Bosne i Hercegovine (AZLP), Bana Milosavljevića 2, 78000 Banja Luka, email: office@azlp.ba, website: https://www.azlp.ba.

Please contact us first so we can try to resolve your request.

We apply appropriate technical and organisational measures to protect data, including HTTPS, access controls for the admin area and secure storage with trusted providers.

We may update this policy from time to time. The date of the last update is shown at the top of this page.