Privacy Policy

Notice on the collection of personal data

Portal Gde na more (hereinafter Rukovalac), collects and processes certain personal data through its website https://www.gdenamore.com/.

1. Categories of users whose personal data is collected: The Operator collects and processes personal data of its users, namely: users of accommodation owners who are registered for advertising through the Operator's website (hereinafter: registered users), as well as users who connect to the Operator's website through their account on the social network Google and post reviews of the accommodation they stayed in (hereinafter: users-reviewers).

2. Categories of personal data collected and processed:: The Operator collects and processes the following data from registered users: first name, last name, e-mail address, residential address, landline and mobile phone number, place, zip code, country, while it collects and processes data from the user-reviewer about the name and surname or pseudonym of the user-reviewer, data that these users share about themselves in the review, and profile data on the Google social network (Google ID, Google username and Google e-mail address), with the fact that only the Operator's website is published Google user name (user name) of the user-reviewer (hereinafter referred to collectively as: "Personal data").

3. Pravni osnov obreda: Personal data is collected on the basis of informed consent, and in accordance with Article 12 paragraph 1 point 1) of the Personal Data Protection Act ("Official Gazette", number 87/18, hereinafter: ZZPL), the person whose data is being processed may withdraw consent at any time, which entails the termination of any further processing, and personal data are deleted or anonymized. Withdrawal of consent does not affect the processing of data until the moment of withdrawal of consent. Also, the reports posted by the Person to whom the consent refers will remain available on the Handler's website even after the consent has been withdrawn, but without personal data. After withdrawing consent to the processing of personal data, the services of the website regarding the possibility of placing advertisements and reports will not be available for the person who withdrew consent, but such a person will still be able to visit the site itself and access the contents.

4. Purpose of processing: Personal data is collected and processed in order to enable the provision of certain services of the website, namely: when it comes to registered users for the purpose of placing ads - information about their accommodation capacity, in accordance with the Terms of Use of the Operator's website; when it comes to users-reviewers, in order to enable the posting of reviews (reports) about travel.

5. Protection measures: Personal data is stored and stored by the Controller in its internal records, in relation to which it applies all necessary organizational, technical and personnel protection measures in accordance with the requirements of the valid ZZPL, including technical protection measures, control of physical access to the system where Personal Data is stored, data access control, data transfer control, data entry control, data availability control and other information security measures that are necessary for the protection of personal data.

6. Rights of persons to whom the data refer: In relation to personal data, the person whose data is stored has the following rights: the right to request access to personal data from the Controller; the right to request correction or deletion of personal data; the right to submit a complaint to the Commissioner for Access to Information of Public Importance and Protection of Personal Data, as well as other rights guaranteed by the valid ZZPL. In relation to the exercise of his/her rights, the handlers will provide the person whose data has been collected with all the necessary assistance, all in accordance with the conditions and in the manner prescribed by the valid ZZPL.

7. Cookies (Kolačići): The operator uses cookies in his work. Cookies are text files that are stored in the Internet browser while the user is browsing the Internet page and that allow the page to access the data stored in them, in order to be informed about the previous user activity.

The operator uses the following types of Cookies:

Cookies that are necessary for the website to function (Eng. Necessary Cookies), removing such Cookies leads to the impossibility of using the website or certain parts of it;

Functional cookies (eng. Functional Cookies), enable the information society service provider to enable better functionality of the website and personalization of the information that is presented to the user. The removal of this type of Cookies may lead to certain services on the website not functioning adequately;

Performance cookies (eng. Performance Cookies), which provide information about visitors and the way our users use our website, e.g. number of visits, information on the frequency of visits to the control station, etc. This information does not identify the user visiting the website, and helps the information society service provider to improve the performance of its own website and provide a better user experience.

8. Google Analytics: The website of the Operator uses the services of Google Analytics, (provided by Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA), which is also based on the technology of using cookies, and which are stored on the visitor's device, all for the purpose of qualitative analysis of the use of the website itself. More information in the Google Privacy Policy, which is available via the following link: goo.gl/f1oVC8.

9. Facebook Pixel: The Operator's website uses the Facebook pixel, which represents a technology similar to Cookies, on the basis of which the Operator receives information about who all visited the website while also logged into this social network.

10. Third parties: The controller may also provide personal data to third parties, some of whom are processors and some recipients of data. The processor in the sense of Article 4 paragraph 1 point 9) is a natural or legal person, that is, a government body that processes personal data on behalf of the controller, while the data recipient is a natural or legal person, that is, a government body to which the personal data was disclosed, regardless of whether it is a third party or not. Categories of processors that can have access to personal data: IT company that maintains the Controller's information and communication systems.

Website users confirm that they have read and understood this Notice, and that they fully agree to the collection of their Personal Data in the manner described above.

All additional questions regarding the processing of personal data can be directed to the e-mail address: [email protected]. The operator will respond to all inquiries within 5 working days at the latest.

Accommodation search through ChatGPT

The GdeNaMore integration receives only the parameters ChatGPT sends for a selected tool: language, destination, accommodation type and selected features; optionally dates, guest count and indicative budget; and listing identifiers for details or galleries. We use them to search and display active public listings. Search criteria are processed for the request and are not stored in a separate integration database.

If a user chooses to send an inquiry to an owner through ChatGPT, the integration asks for first name, last name, email, phone number and message. It shows a review before sending and requires explicit confirmation. A confirmed inquiry is processed through the website's existing inquiry system, which shares contact details with the accommodation owner.

Technical data and retention

To deliver and protect the service, network and hosting layers may process an IP address, access time, request path, response status and client technical data. Hosting server access logs are rotated and may remain for up to 53 weeks. Limited MCP diagnostic logs are retained for no more than 52 weeks. For administrative statistics, we record the type and time of successful tool calls, where relevant a public listing ID, and visits to listings from ChatGPT links. This table does not contain names, contact details, IP addresses or message contents. Search criteria are not retained.

Cloudflare processes traffic as our network protection provider. On our current plan, Security Analytics is available to us for up to 7 days and Security Events for up to 24 hours. These are availability periods for those features; Cloudflare describes its separate processing in its privacy policy.

Recipients and your choices

Request data passes through our hosting provider and Cloudflare. Photos load from the GdeNaMore domain. If you open a gallery video, YouTube may receive data needed to display it. ChatGPT conversations are governed by OpenAI's privacy policy; our service receives parameters for individual tool calls, not the whole conversation.

You may stop using the integration and choose not to open a listing or video. To request access, correction or deletion of data that can be linked to you, email [email protected]. ChatGPT conversation controls are available through your OpenAI account.