1. Who we are

Hotel Uma Premium, Ulcinjsko polje bb, 85360 Ulcinj, Montenegro (“we”, “the hotel”) operates the website umapremium.me and is the controller of the personal data described in this policy. Contact: umapremiumul@gmail.com, +382 68 188 816.

2. What data we collect

• Booking data: name, e-mail, phone, address, nationality, dates of stay, number of guests, special requests and payment details processed by our channel manager Beds24 or at reception.
• Registration data required by Montenegrin law: passport or ID card details, date of birth and citizenship, which we report to the tourist registration system.
• Communication data: messages you send us by e-mail, contact form, WhatsApp or the website chat.
• Website usage data: IP address, browser, pages visited and approximate location, collected through cookies and analytics tools when enabled (see Cookie Policy).
• Guest preferences and stay history so we can personalise your next visit.

3. Why we use your data and the legal basis

To conclude and perform your accommodation contract (Art. 6(1)(b) GDPR); to comply with legal obligations such as guest registration, tourist tax and invoicing/fiscalisation (Art. 6(1)(c)); to reply to your enquiries and send service messages about your stay — pre-arrival information, invoices, feedback requests — based on our legitimate interest (Art. 6(1)(f)); and to send occasional offers to past guests, from which you can unsubscribe at any time (Art. 6(1)(a)/(f)).

4. Who receives your data

Beds24 (channel manager and booking engine), online travel agencies you booked through, payment providers, our e-mail provider, the Montenegrin authorities where required by law, and IT providers hosting this website. Google Maps, Google Analytics (if enabled) and social-media embeds may process data under their own policies. We never sell personal data.

5. How long we keep it

Booking and invoicing records are kept for the period required by Montenegrin tax and accounting law (generally 5–10 years). Guest registration data is kept as required by the tourism registration rules. Enquiries are deleted within 24 months unless a booking follows. Marketing data is kept until you unsubscribe.

6. Your rights

You may request access to, correction or deletion of your data, restriction of processing and data portability, and you may object to processing based on legitimate interest or to direct marketing. Consent can be withdrawn at any time without affecting earlier processing. To exercise these rights write to umapremiumul@gmail.com. You may also lodge a complaint with the Montenegrin Agency for Personal Data Protection (AZLP) or your local data protection authority.

7. Security and international transfers

Data is transmitted over encrypted connections (HTTPS) and stored on access-controlled systems. Some providers (e.g. Google, Meta) may process data outside the EU/EEA and Montenegro under standard contractual clauses or equivalent safeguards.

8. Children

Our services are aimed at adults. We process children’s data only as part of a family booking made by a parent or guardian.

9. Changes to this policy

We may update this policy from time to time; the current version is always published on this page with the date of the last update.