Contact us directly at +385 91 61 894 48 [email protected] (local time] 7:36)



Personal Data Protection Policy

1. Basic Information
Privacy policy of Bati Grupa d.o.o. Split, Ninska 15, tax ID: 36585259881, which operates under the VIPOPRESTIGE brand, contains information on how we use and protect personal data. As a data controller, we are responsible for the personal data that we collect and that we will use in accordance with this policy and the laws on the protection of personal data and privacy.

2. Types of Personal Data We Collect and Collection Methods
Your personal data shell be processed only when necessary and they may include: name, contact details (e.g., address, phone number, email address), nationality, date of birth, financial details (e.g., payment details, personal identification number), username and password if you have our account, personal identification number if you are a guest whose reservation needs to be processed, passenger information if the guest needs tourist tax information, information collected through cookies – see our Cookie Policy.
Special categories of personal data shell be collected only when necessary, such as to fulfill your specific requests (e.g., information concerning your health such as mobility impairments to ensure that your requests are met) or to provide some services (e.g., to ensure that cancellation complies with our terms).
Personal data is generally collected directly from you. If you have booked through one of our booking partners, we will receive your details from them. Your data can also be retrieved from other guests accompanying you.
Providing certain personal information is a legal or contractual obligation and if you do not provide it to us, we may not be able to enter into or perform a contract with you or we may cancel your booking or our rental service. If this is the case, you will be notified and we will not be liable to you.

3. Use of Your Personal Data
Your personal data shell be used for a variety of reasons, depending on your relationship with us and in accordance with one or more of the following legal bases: when we need to process personal data to perform a contract we have entered into with you or take steps to enter into a contract with you, when we have your consent, when we need to fulfill a legal obligation, when it is necessary to achieve our legitimate interests or the legitimate interests of a third party, and your interests and fundamental rights do not prevail over theses interests.
For the processing of special categories of personal data, additional justification must be provided and it shell be use only on the basis of your express consent, if you have made the data public, in connection with legal requirements or if this is necessary for the purposes of significant public interest.
Your personal data shell be used for any of the following purposes; (we also explained the legal basis on which we rely and our legitimate interest – when applicable):
– to be able to conclude your reservation (contract, consent and legitimate interest due to keeping records and providing good customer service),
– to manage your account that you have with us (consent and legitimate interest due to keeping records and providing good customer service),
– to invite you to leave a review about our services (legitimate interest to understand the perception of our business and improve our service),
– to send official notices, including booking updates and changes to our terms and conditions (contract and legitimate interest to keep our clients informed of current events),
– to provide you with details or information you required (consent),
– to manage customer service enquiries, including complaints (legitimate interest to improve our service, staff training, record keeping and problem solving),
– to use cookies to customize our services, for example, in connection with repeated visits to our websites (consent),
– to carry out marketing activities (consent and legitimate interest in discovering the type of services you are interested in and informing about them),
– for statistical purposes (legitimate interest in evaluating the range of our services or the success of our services),
– in the event of travel crisis or other unforeseen travel incidents in which we may have to provide your contact information to a third party in order to provide you with emergency assistance (legitimate interest in protecting our client and business),
– fulfilment of a legal obligation, process or request (legal obligation),
– compliance with our reservation conditions and other agreements, including the investigation of all their possible violations (agreement and legitimate interest in protecting our business),
– detection and prevention of criminal acts (legal obligation and legitimate interest to protect our business and clients, and cooperation with state institutions),
– solving security and technical problems and fraud (legal obligation, contract, legitimate interest in protecting our business and clients, and cooperation with state institutions),
– protection of the rights, property or safety of us and our users, clients, employees, suppliers, third parties or the public (legal obligation, contract, legitimate interest, protection of our business, clients, third parties and the public),
– to examine, develop and improve our services (legitimate interest in improving our business),
– in order to realize or defend our legal rights (legitimate interest in protecting our business).

4. Personal Data Disclosure
Your personal data might be shared with: our employees and suppliers when necessary to provide you with services, service provides who act as processors and provide IT services, system management services, hosting and website support, marketing services, etc., to professional advisers, including bankers, lawyers, auditors, accountants and insurers who provide services to us, credit/debit companies, payment service providers, government agencies, regulatory bodies and other public authorities, debt collectors when someone owes us, third party booking or distribution platforms, travel agents and booking partners, user review companies and marketing service providers, third parties we may choose to sell, transfer or merge parts of our assets or business and business we buy or with we merge, third parties for which you authorized us to address them. Third parties are obliged to process your personal data in accordance with data protection laws. Where a third-party acts on our behalf, we do not allow them to use your information for their own purposes and we ensure that they have appropriate security measures in place to protect your information.

5. International Transfers
Your personal data outside the European Economic Area (EEA) shell only be transferred when adequate measures in place to protect your personal data in a manner that complies with data protection laws are taken. In doing so, the implementation of at least one of the following protection measures will be ensured: decisions on adequacy; or approved contractual measures and, if necessary, supplementary measures. Please contact us if you are interested in further details on the applicable transfer mechanism.

6. Data Retention Period
Your personal data will not be kept for longer than necessary. In order to determine the appropriate retention period, we take into account the amount, nature and sensitivity of personal data, the potential risk of harm caused by unauthorized use or disclosure of your personal data, the purpose for which we process your personal data, any legal or regulatory requirements and any relevant industry standards or guidelines. When your information is no loner needed, we will take care to remove or delete it securely or anonymize it so that is can no longer be linked to you.
You are not required to pay any compensation for the exercise of any of the above rights, unless your request is unfounded or excessive; in this case, we may charge you a reasonable fee or refuse to execute the request. We may need to ask you for information to help us verify your identity and the identity the data you are referring to. This is a security measure to ensure that personal information is not disclosed to any person who is not entitled to receive it.
Please, contact us if you wish to exercise any of these rights. We aim to respond to requests within 20 days. If your request is particularly complex, we can extend that period to two months and we will inform you about it.

7. Your Rights
In certain situations, you have the right to: request access to your personal data, request the correction of stored personal data about you, request the deletion of personal data when there is no valid reason for their further processing, submit an objection to the processing of your personal data when we rely on legitimate interests for their processing or we use them for direct marketing, request the restriction of the processing of your personal data or withdraw your consent when we process your data based on it.
You are not required to pay any compensation for the exercise of any of the above rights, unless your request is unfounded or excessive; in this case, we may charge you a reasonable fee or refuse to execute the request. We may need to ask you for information to help us verify your identity and the identity the data you are referring to. This is a security measure to ensure that personal information is not disclosed to any person who is not entitled to receive it.
Please, contact us if you wish to exercise any of these rights. We aim to respond to requests within 20 days. If your request is particularly complex, we can extend that period to two months and we will inform you about it.

8. Other online sites
Our website may contain links to other websites. This privacy policy applies only to our online sites. Therefore, we advise you to read their privacy policies when using links to other websites. We accept no responsibility or liability for there policies.

9. Updating our Privacy Policy
We regularly review our privacy policy and update our website. This policy was last updated in December 2022.

10. Address in Connection with Data Protection
If you want to exercise your rights or have questions about data protection, you can contact our data protection officer by email at [email protected]