Privacy Policy

1. Information We Collect

Personal information you voluntarily provide when making a booking or creating an account: full name, email address, phone number, country of residence, and payment-related information (bank transfer references only — we do not store credit card numbers).

Information automatically collected when you visit our website: IP address (used for language detection and approximate geolocation), browser type, device information, pages visited, and cookies for session management.

If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your Google contacts, calendar, or any other Google services.

2. How We Use Your Information

To process and manage your accommodation bookings, including sending booking confirmations, invoices, and check-in instructions.

To communicate with you regarding your reservation via email, phone, or WhatsApp.

To comply with Montenegrin tax regulations, including city tax collection and reporting.

To improve our website and services based on usage patterns.

To detect and prevent fraud or unauthorized access.

3. Legal Basis for Processing (GDPR)

Contract performance: Processing necessary to fulfill your booking and provide accommodation services.

Legal obligation: Processing required by Montenegrin law, including tax reporting and guest registration.

Legitimate interest: Website analytics and security measures to protect our services.

Consent: Marketing communications (only if you explicitly opt in).

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties.

We may share your information with: Supabase (database and authentication provider, EU servers), payment processors for bank transfer verification, Montenegrin authorities as required by law (guest registration, tax reporting).

5. Data Retention

Booking records are retained for 5 years as required by Montenegrin tax law. Account information is retained until you request deletion. Website analytics data is anonymized after 26 months.

6. Your Rights

Under GDPR and applicable law, you have the right to: access your personal data, rectify inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, and object to processing.

To exercise these rights, contact us at info@apartmentsmata.com. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication and session management. We use a language preference cookie to remember your selected language. We do not use advertising or tracking cookies.

8. International Transfers

Your data is primarily stored on servers in the European Union (Supabase EU-Central region). If data is transferred outside the EU, appropriate safeguards are in place.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at: