Introduction
The purpose of this Privacy Policy is to inform you how and for what purposes the company collects, processes and uses your personal data, as well as what rights you have regarding the processing of that data. Personal data refers to any information that can identify you, such as your first name, surname, date of birth, contact details, card number, IP address and other similar information.
Data
Controller
The Data Controller of your personal data is BNV BRISTOL DOO
, with its registered office at Karađorđeva 50, 11000 Belgrade, e-mail: [email protected]
Collection and processing of personal data
Your privacy is extremely important to us. Your personal data will be processed only to the extent permitted by law or when necessary to achieve specific purposes, such as guest registration, providing services, sending promotional materials (such as newsletters), conducting SMS campaigns and other similar activities.
a) Data collected for legal obligations
For legal obligations, such as guest registration with the competent authorities of the Republic of Serbia, we collect the following data:
- First name and surname
- Date of birth
- Place of birth
- Residential address (city, country, postcode)
- Nationality
- Sex
- Length of stay
- Details of identification document (identity card or passport)
This data is used exclusively for guest registration in accordance with the laws of the Republic of Serbia.
b) Data collected for the performance of contractual obligations
For the fulfilment of contractual obligations and the provision of services, we collect the following data:
- First name and surname
- Gender
- Address
- Identification document details
- Email address
- Telephone number
- Credit card number and payment details
- All service preferences (room type, additional packages, etc.)
- Vehicle registration number (for parking purposes)
This information is used to properly provide services and to bill you for your reservations
c) Data for personalised offers and promotions
In order to offer you personalised services and inform you about our special offers, we collect the following data:
- First name and surname
- Nationality
- Address
- Telephone number
- Email address
We process this data on the basis of our legitimate interest in providing you with information about our services, promotions and events, as well as for conducting surveys and improving our services. You can unsubscribe from these communications at any time by sending an email to [email protected].
d) Data collected for event promotion
As part of promotional activities related to events at our hotel, we may use photographs of participants, which we publish on our website. If you do not wish to be featured in photographs, you can object to the processing and publication of such photographs at reception or by email to [email protected]
e) Data for security purposes
In view of our security responsibilities, the premises may be under video surveillance. Data from these systems is retained for a maximum of 30 days.
Sharing your data
We will not share your personal data with third parties, except in the following cases:
- To fulfil legal obligations (e.g. cooperation with the police or other authorities)
- To provide additional services at your request (e.g. transport, restaurant reservations, etc.)
- In emergency situations, to protect your vital interests (e.g. sharing data with medical personnel)
- Based on your consent
- With partner companies that provide technical support for our marketing activities (e.g. sending newsletters, SMS campaigns)
Analytics and cookies
Our website uses tools to analyse site usage. This service uses cookies, small text files that enable the collection of data about your online behaviour. The tools we use may anonymise your IP address, which means that your full IP address will be shortened within the European Union. You can disable cookies in your browser settings or download a browser extension that prevents data collection.
For more information about how Google uses data, visit Google's Privacy Policy.
Strictly necessary cookies
| Name | Provider | Purpose | Category | Duration |
| bid-consent-cookie | The Bristol the-bristol.com | Saves the user's cookie decision (accepted with settings / rejected). | Necessary | 1 year (accepted) 7 days (rejected) |
| bid-country | The Bristol the-bristol.com | Visitor's country (from IP address) for automatic country code in forms. | Required | Session |
| initial_referrer | The Bristol the-bristol.com | Saves which external site the user came from (or "direct") for booking attribution | Necessary | Session |
| referrer_synced | The Bristol the-bristol.com | A tag indicating that the source of the visit has already been recorded (prevents overwriting). | Required | Session |
| bid-checkin-checkout | The Bristol the-bristol.com | Selected arrival and departure dates during the booking process. | Required | Session |
| amadeus-access-token | The Bristol the-bristol.com | Access token for the reservation system (Amadeus) – to retrieve availability and prices. Server-only (httpOnly). | Required | up to 1 hour |
| bid-member-cookie | The Bristol the-bristol.com | Logged-in loyalty programme member session (Club 1912). Server-side only (httpOnly). | Required | 15 minutes |
| bid-member-info-cookie | The Bristol the-bristol.com | Basic member information (name, level) for display in the interface and to apply the member price. | Required | 1 day (login) Session (anonymous loyalty discount) |
| NEXT_LOCALE | The Bristol the-bristol.com | Selected page language; set when changing language. | Required | Session |
| __cf_bm | Cloudflare *.hubspot.com, *.hsforms.com, *.hs-scripts.com, *.hs-analytics.net, *.hs-banner.com | Bot protection on HubSpot servers that the site loads | Necessary | 30 minutes |
Analytics
| Name | Provider | Purpose | Category | Duration |
| _ga | Google Analytics .the-bristol.com | Unique visitor ID to distinguish users. | Analytics | 2 years |
| _ga_W841LRVTFX | Google Analytics .the-bristol.com | Session state for GA4 property pages. | Analytics | 2 years |
| _cs_id | Google Analytics .the-bristol.com | Visitor ID for behaviour analysis and session recordings. | Analytics | 13 months |
| _cs_s | Google Analytics .the-bristol.com | Number of page views in the current session and recording status. | Analytics | 30 minutes |
| _cs_c | Google Analytics .the-bristol.com | Saves the user's consent for Contentsquare tracking. | Analytics | 13 months |
| hubspotutk | HubSpot .the-bristol.com | Visitor identity; links submitted forms (contact, events, Club 1912) to a CRM contact. | Analytics | 6 months |
| __hstc | HubSpot .the-bristol.com | Main session tracking cookie: domain, utm, time of first/last visit, number of sessions. | Analytics | 6 months |
| __hssc | HubSpot .the-bristol.com | Session tracking: number of page views in a session. | Analytics | 30 minutes |
| __hssrc | HubSpot .the-bristol.com | Indicates that the user has reloaded the browser (new session). | Analytics | Session |
Marketing
| Name | Provider | Purpose | Category | Duration |
| _gcl_au | Google Ads .the-bristol.com | Measuring conversions for Google Ads campaigns (Conversion Linker). | Marketing | 3 months |
| IDE | Google (DoubleClick) .doubleclick.net | Display and measurement of ads based on visits; remarketing. | Marketing | 13 months |
| _fbp | Meta (Facebook Pixel) .the-bristol.com | Tracks visits for advertising and conversion measurement on Facebook/Instagram | Marketing | 3 months |
Data retention period
We only keep your data for as long as is legally required or as long as is necessary to fulfil the purpose for which it was collected.
Data security
We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, loss or destruction.
Transfer of data outside the Republic of Serbia
All your data is stored on servers within Serbia and we do not transfer it outside the borders of the Republic of Serbia.
Your rights
You have the following rights regarding the processing of your data:
- Right of access: To find out if we are processing your data and to access it.
- Right to rectification: To request the correction of inaccurate data.
- Right to erasure: To request the erasure of your data if there is a legitimate reason.
- Right to restriction of processing: To request the restriction of processing of your data in certain circumstances.
- Right to data portability: To receive your data in an electronic format and to transfer it to another controller.
- Right to object: To object to the processing of your data in certain situations.
- Right to lodge a complaint: If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office.
- Right to withdraw consent: If the processing is based on your consent, you have the right to withdraw it at any time.
How to exercise your rights
To exercise any of your rights, you can contact the person responsible, Boris Mitrić, by email at [email protected]. If we cannot identify you with the data we hold, we may ask you to provide us with additional information.
Changes to the Privacy Policy
If any changes are made to this Privacy Policy, all changes will be posted on this page. If the changes involve new processing of your data that requires your consent, we will seek your consent before we proceed with the processing.