Privacy Policy

1. Who we are

Stari Mlini ("we", "us") operates this website and our restaurant and event venue in Montenegro. Our address is Ljuta BB, Dobrota, Kotor 85330, Montenegro. For privacy-related questions you can contact us at reservations@starimlini.com (reservations) or host@starimlini.com (events).

2. What data we collect

We collect only what is necessary to provide our services:

• Reservations: Name, email, phone number, party size, date and time, and any special requests you provide.
• Event and special-occasion inquiries: Name, email, phone, preferred date, number of guests, event type, venue preference, and any details you submit in the inquiry form.
• Guest accounts: If you create an account, we store the information you provide (e.g. name, email, phone) and any profile or preference details you add.
• Contact and general inquiries: Name, email, and the content of your message.
• Technical data: When you use our site we may collect IP address, browser type, and similar technical information that helps us run and secure the website.

3. How we use your data

We use your data to:

• Process and manage your reservations and event inquiries.
• Send you confirmations, reminders, and (where applicable) cancellation or event-related communications by email or SMS.
• Respond to your inquiries and provide customer support.
• Manage your guest account and preferences.
• Improve our website and services and ensure security.
• Comply with legal obligations where required.

We do not sell your personal data. We do not use your data for marketing by third parties.

4. Legal basis (if you are in the EEA)

Where European data protection law applies, we process your data on the basis of: (a) performing our contract with you (reservations, events, account); (b) our legitimate interests (running and improving our business, security); and (c) where necessary, your consent (e.g. for optional communications or features).

5. Data retention

We keep reservation and event inquiry data for as long as needed to fulfil the booking, handle follow-ups, and deal with disputes or legal requirements. Account data is retained while your account is active and for a reasonable period after. We may retain anonymised or aggregated data for analysis. You can ask us to delete your data (see "Your rights" below).

6. Cookies and similar technologies

Our website may use essential cookies and similar technologies to make the site function (e.g. session, security). We may also use analytics to understand how the site is used. You can control cookies through your browser settings.

7. Sharing and international transfer

We may share data with service providers who help us run the website, send emails or SMS, or process payments (e.g. hosting, email/SMS providers, payment processors). They are required to protect your data and use it only as we instruct. Our business is in Montenegro; if you are elsewhere, your data may be transferred to and processed in Montenegro or other countries where our providers operate. We ensure appropriate safeguards where required by law.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your data, to data portability, and to object to certain processing. If you are in the EEA you also have the right to lodge a complaint with a supervisory authority. To exercise your rights or ask questions about your data, contact us at reservations@starimlini.com or host@starimlini.com.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No system is completely secure; we encourage you to use strong passwords and keep your account details safe.

10. Changes

We may update this privacy policy from time to time. The "Last updated" date at the top will be revised when we do. Continued use of our website and services after changes constitutes acceptance of the updated policy. We recommend checking this page periodically.