Introduction
The purpose of this Privacy Policy is to inform you about how and for what purposes the company collects, processes and uses your personal data, as well as what rights you have regarding the processing of that data. Personal data refers to any information that can identify you, such as your first name, surname, date of birth, contact details, card number, IP address and other similar information.
Data Controller
The controller of your personal data is Bristol d.o.o., with its registered office at Radnička cesta 43, 10 000 Zagreb, email: [email protected]
Collection and processing of personal data
Your privacy is extremely important to us. Your personal data will only be processed to the extent required by law or when necessary to achieve specific purposes, such as: guest registration, providing services, sending promotional materials (such as newsletters), conducting SMS campaigns and other similar activities.
a) Data collected for the fulfilment of legal obligations
For the purpose of legal obligations, such as the registration of guests with the competent authorities of the Republic of Croatia, we collect the following data:
- First name and surname
- Date of birth
- Place of birth
- Residential address (city, country, postcode)
- Nationality
- Sex
- Duration of stay
- Details of identification document (identity card or passport)
This information is used exclusively for guest registration in accordance with the laws of the Republic of Croatia.
b) Data collected for the fulfilment of contractual obligations
In order to fulfil contractual obligations and provide services, we collect the following data:
- First name and surname
- Gender
- Address
- Data from an identification document
- Email address
- Telephone number
- Credit card number and payment details
- Any service preferences (room type, additional packages, etc.)
- Vehicle registration number (for parking purposes)
This information is used to properly provide services and for billing in accordance with your reservations
c) Data for personalised offers and promotions
In order to offer you personalised services and inform you about our special offers, we collect the following data:
- First name and surname
- Nationality
- Address
- Telephone number
- Email address
We process this data on the basis of our legitimate interest in providing information about services, promotions and events, as well as for conducting surveys and improving our services. You can unsubscribe from receiving these notifications at any time by sending an email to [email protected]
d) Data collected for event promotion
As part of promotional activities related to events at our hotel, we may use photographs of participants which we publish on our website. If you do not wish to be in the photographs, you can object to the processing and publication of such photographs at reception or by email to [email protected]
e) Data for security purposes
In view of our security responsibilities, the premises may be under video surveillance. Data from these systems is stored for a maximum of 30 days.
Sharing your data
We will not share your personal data with third parties, except in the following cases:
- To fulfil legal obligations (e.g. cooperation with the police or other authorities)
- To provide additional services at your request (e.g. transport, restaurant reservations, etc.)
- In emergency situations, to protect your vital interests (e.g. sharing data with medical personnel)
- Based on your consent
- With partner companies that provide technical support for our marketing activities (e.g. sending newsletters, SMS campaigns)
Analytics and cookies
Our website uses tools to analyse site usage. This service uses cookies, small text files that enable the collection of data about your online behaviour. The tools we use may anonymise your IP address, meaning that your full IP address will be shortened within the European Union. You can disable cookies in your browser settings or download a browser add-on that prevents data collection.
For more information about how Google uses data, visit the Google Privacy Policy.
Essential
| Name | Provider | Purpose | Category | Duration |
| bid-consent-cookie | The Bristol the-bristol.com | Saves the user's cookie decision (accepted with settings / rejected). | Necessary | 1 year (accepted) 7 days (rejected) |
| bid-country | The Bristol the-bristol.com | Visitor's country (from IP address) for the automatic dialling code in forms. | Required | Session |
| initial_referrer | The Bristol the-bristol.com | Saves which external site the user came from (or "direct") for booking attribution | Necessary | Session |
| referrer_synced | The Bristol the-bristol.com | A tag indicating that the source of the visit has already been recorded (prevents overwriting). | Required | Session |
| bid-checkin-checkout | The Bristol the-bristol.com | Selected arrival and departure dates during the booking process. | Required | Session |
| amadeus-access-token | The Bristol the-bristol.com | Access token for the reservation system (Amadeus) – to retrieve availability and rates. Server-only (httpOnly). | Required | up to 1 hour |
| bid-member-cookie | The Bristol the-bristol.com | Logged-in loyalty programme member session (Club 1912). Server-side only (httpOnly). | Required | 15 minutes |
| bid-member-info-cookie | The Bristol the-bristol.com | Basic member information (name, level) for display in the interface and to apply the member price. | Required | 1 day (login) Session (anonymous loyalty discount) |
| NEXT_LOCALE | The Bristol the-bristol.com | Selected page language; set when changing language. | Required | Session |
| __cf_bm | Cloudflare *.hubspot.com, *.hsforms.com, *.hs-scripts.com, *.hs-analytics.net, *.hs-banner.com | Bot protection on HubSpot servers that the site loads | Necessary | 30 minutes |
Analytics
| Name | Provider | Purpose | Category | Duration |
| _ga | Google Analytics .the-bristol.com | Unique visitor ID to distinguish users. | Analytics | 2 years |
| _ga_W841LRVTFX | Google Analytics .the-bristol.com | Session state for GA4 property pages. | Analytics | 2 years |
| _cs_id | Google Analytics .the-bristol.com | Visitor ID for behaviour analysis and session recordings. | Analytics | 13 months |
| _cs_s | Google Analytics .the-bristol.com | Number of page views in the current session and recording status. | Analytics | 30 minutes |
| _cs_c | Google Analytics .the-bristol.com | Saves the user's consent for Contentsquare tracking. | Analytics | 13 months |
| hubspotutk | HubSpot .the-bristol.com | Visitor identity; links submitted forms (contact, events, Club 1912) to a CRM contact. | Analytics | 6 months |
| __hstc | HubSpot .the-bristol.com | Main session tracking cookie: domain, utm, time of first/last visit, number of sessions. | Analytics | 6 months |
| __hssc | HubSpot .the-bristol.com | Session tracking: number of page views in a session. | Analytics | 30 minutes |
| __hssrc | HubSpot .the-bristol.com | Indicates that the user has reloaded the browser (new session). | Analytics | Session |
Marketing
| Name | Provider | Purpose | Category | Duration |
| _gcl_au | Google Ads .the-bristol.com | Measuring conversions for Google Ads campaigns (Conversion Linker). | Marketing | 3 months |
| IDE | Google (DoubleClick) .doubleclick.net | Display and measurement of ads based on visits; remarketing. | Marketing | 13 months |
| _fbp | Meta (Facebook Pixel) .the-bristol.com | Tracks visits for advertising and conversion measurement on Facebook/Instagram | Marketing | 3 months |
Data retention period
We only keep your data for as long as is legally required or as long as is necessary to fulfil the purpose for which it was collected.
Data security
We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, loss or destruction.
Transfers of data outside the Republic of Croatia
All your data is stored on servers within the Republic of Croatia and we do not transfer it outside the borders of the Republic of Croatia
Your rights
In relation to the processing of your data, you have the following rights:
- Right of access: To find out whether we are processing your data and to access it.
- Right to rectification: To request the correction of inaccurate data.
- Right to erasure: To request the erasure of your data if there is a legitimate reason.
- Right to restriction of processing: To request the restriction of processing of your data in certain circumstances.
- Right to data portability: To receive your data in an electronic format and transfer it to another data controller.
- Right to object: To object to the processing of your data in certain situations.
- Right to withdraw consent: If the processing is based on your consent, you have the right to withdraw it at any time.
- Right to lodge a complaint: If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Commissioner for Access to Public Information and Personal Data Protection.
How to exercise your rights
To exercise any of your rights, you can contact us by email at [email protected]. If we are unable to identify you based on the information we hold, we may ask you to provide additional information.
Changes to the Privacy Policy
If any changes are made to this Privacy Policy, all changes will be posted on this page. If the changes involve new processing of your data that requires your consent, we will seek your consent before continuing the processing.