Privacy Policy

1. Who is the Data Controller?

The data controller responsible for your personal data is listed below.

• Name: Ljubisa Obradovic (private individual)
• Address: Ustanicka 10, Apt 15, 11010 Belgrade, Serbia
• Email: house.of.mirrors.belgrade@gmail.com
• Phone: +381 64 175 2332

2. What Data We Collect

We collect only the personal data that is necessary to respond to your inquiries and manage reservations.

• Full name
• Email address
• Phone number
• Message content submitted through the contact form or via WhatsApp, Viber, or email
• Reservation details such as dates of stay and number of guests when you book through our booking partner
• If you consent to analytics cookies: limited website usage data such as pages viewed, on-site interactions, and basic device and browser information processed through Google Analytics

3. How We Use Your Data

Your personal data is used exclusively for the following purposes.

We do not use your data for marketing purposes, and we will never sell or share your personal data with third parties for commercial gain.

• To respond to your inquiries and questions submitted via the contact form, email, WhatsApp, or Viber
• To manage and confirm reservation requests
• To send booking confirmations or relevant information about your stay
• To comply with legal obligations applicable to short-term rental hosts in the Republic of Serbia
• To measure website traffic and understand how the website is used, but only if you consent to analytics cookies

4. Legal Basis for Processing

We process your personal data on the following legal grounds.

• Contract performance: processing necessary to fulfill a reservation or to take steps at your request prior to booking
• Legitimate interest: responding to general inquiries submitted through the contact form
• Legal obligation: where required by Serbian law, including guest registration obligations
• Consent: for non-essential analytics cookies and Google Analytics measurement

5. Data Sharing

Your personal data may be shared only in limited circumstances and only when necessary.

We do not share your data with any other third parties beyond those circumstances.

• Booking platform: when you complete a reservation through our external booking service, that platform receives the details necessary to process your booking under its own privacy policy
• Legal authorities: when required by law, regulation, or governmental authority in the Republic of Serbia
• Google Analytics, meaning Google Ireland Limited and, where applicable, Google LLC, but only if you consent to analytics cookies

6. Data Retention

We retain your personal data only for as long as necessary.

• Contact form messages and email correspondence are kept for up to 12 months after last contact, or until you request deletion
• Reservation records may be retained for up to 5 years to comply with applicable Serbian tax and hospitality regulations
• Analytics cookies and related identifiers are retained in accordance with our Google Analytics retention settings and your browser storage until withdrawn or expired

7. Your Rights

If you are a resident of the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR).

To exercise any of these rights, please contact us at house.of.mirrors.belgrade@gmail.com. We aim to respond within 30 days. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia, or with the supervisory authority in your country of residence.

• Right of access
• Right to rectification
• Right to erasure, subject to legal retention requirements
• Right to restriction
• Right to data portability
• Right to object to processing based on legitimate interest

8. Security

We take reasonable measures to protect your personal data from unauthorized access, loss, or disclosure.

Communication through WhatsApp and Viber is end-to-end encrypted. Email correspondence is handled through standard provider security measures.

9. Cookies

This website may use essential cookies or similar technologies required for its basic functionality, such as session management or language preference.

Google Analytics is enabled only after your explicit consent through the cookie banner. If you decline analytics cookies, Google Analytics is not used to measure your visits.

You may change your choice at any time through the “Cookie Settings” option in the footer of the website.

• Essential cookies: used for core website functions such as remembering your language preference and technical site operation
• Consent record cookie or local storage entry: stores your choice to accept or decline analytics cookies
• Analytics cookies: set only if you accept them and used to measure website traffic and usage through Google Analytics

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

We encourage you to review this page periodically.

11. Contact

For any questions or requests regarding this Privacy Policy, please contact us.

• Name: Ljubisa Obradovic
• Address: Ustanicka 10, Apt 15, 11010 Belgrade, Serbia
• Email: house.of.mirrors.belgrade@gmail.com
• Phone: +381 64 175 2332