Privacy policy

Who is responsible for your data

The data controller is Jet City d.o.o., Veselina Nikolića 18, 37000 Kruševac, Serbia, which operates City Hotel Kruševac. For any question about your data, write to jetcitydoo@gmail.com or call +381 37 350 2100.

What data we collect and why

• Reservation request (website form or chat): name, email, phone if provided, dates of stay, number and age of guests, room type, breakfast, extra services, note and language. We use it to process your request, confirm the booking, contact you and provide your stay.
• Guest account (optional): email, name, password and the history of your bookings and ordered services. The account lets you follow your booking and order services during your stay. We never store your password in readable form.
• Chat: message content, your name and email if you provide them, and a visitor identifier stored in a cookie. Messages are first answered by an AI-based virtual assistant, and reception can take over the conversation at any time.
• Technical data: IP address, browser type and access time, logged by our hosting provider for security and to keep the website running.

Data required by law to register a guest's stay (e.g. ID document details) is collected by reception on arrival, not through the website.

Legal basis

We process reservation and account data because, at your request, it is necessary to conclude and perform the accommodation contract. We process technical and chat data based on our legitimate interest in answering your questions and keeping the website secure. We do not use your data for advertising and we never sell it.

Cookies

We only use cookies that the website needs to work: an account sign-in cookie and a chat cookie (kept for 30 days) so you can continue a conversation you started. We do not use analytics or advertising cookies.

The Contact page shows a Google map; Google may then set its own cookies under its own policies.

Who we share data with

Your data is processed only by authorised hotel staff and trusted service providers acting solely on our behalf:

• Supabase — database and guest accounts, servers in the European Union (Ireland)
• Vercel — website hosting, global server network including the USA
• Resend — email notifications, servers in the European Union (Ireland)
• DeepSeek — the AI model behind the chat assistant; the text of your messages is sent to this service in China so the assistant can reply
• Google — the map on the Contact page

Data is transferred outside Serbia and the European Union (USA, China) only to the extent needed for the service you are using. Please do not enter sensitive data in the chat, such as payment card or ID document numbers.

How long we keep data

• Bookings and stays — as long as accounting and tax regulations require.
• Requests that did not result in a stay (rejected or cancelled) and chat conversations — at most 12 months after the last activity.
• Guest account — until you close it. On request we delete the account and all data we are not legally required to keep.

Your rights

You have the right to request access to your data, its correction or deletion, restriction of processing and data portability, and to object to processing. Send your request to jetcitydoo@gmail.com; we will reply within 30 days at the latest.

If you believe your rights have been violated, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs).

Security

The website uses an encrypted connection (HTTPS). Only authorised hotel staff can access your data, through personal accounts with role checks.

Changes to this policy

We may update this policy when the way we process data changes. The date of the last update is always shown at the top of this page.