✕
Close
This changes the language for the entire site. English is the default; other languages are for reference.
This Privacy Policy explains how personal data is processed in connection with Apartments Artee, including its websites, reservation interfaces, booking requests, communications and related accommodation services.
It should be read together with our Important Booking Terms, property-specific information and any other terms applicable to a particular reservation.
Apartments Artee is the name used on this website for the accommodation and/or reservation service through which guests may discover, request or arrange stays at applicable accommodation properties.
The Apartments Artee reservation service may facilitate reservations for accommodations that are owned, operated or managed by different persons or businesses.
Apartments Artee does not necessarily own or directly operate every accommodation presented through the Apartments Artee reservation service.
Because different processing activities may be carried out by different parties, this Privacy Policy distinguishes between processing for which the Apartments Artee service determines the purposes and means and processing independently determined by an applicable accommodation provider or other recipient.
For personal-data processing carried out through the Apartments Artee website, reservation interface and related reservation communications, the controller is the person or entity operating the relevant Apartments Artee service and determining the purposes and means of that processing.
The identity and legal status of the controller may depend on the particular Apartments Artee service or activity involved. The applicable controller information should therefore be read together with any legal notice or property-specific information provided for that service.
Privacy Contact
Apartments Artee
Email:
apartments@artee.ba
Where a designated data-protection officer is legally required for a particular controller or processing activity, the applicable contact information will be provided to data subjects.
An accommodation provider may separately act as a controller where that provider independently determines the purposes and means of processing personal data for its own activities.
Examples may include processing independently carried out for guest registration, accommodation administration, invoicing, accounting, statutory reporting, security, the provider's own records or other purposes for which that provider determines the processing.
Important distinction:
Sharing personal data with an accommodation provider does not automatically make that provider a processor, nor does it automatically make it a separate controller.
The applicable role depends on who determines the purposes and means of the relevant processing.
Where two or more parties jointly determine the purposes and means of processing, they may be joint controllers where the legal conditions for joint controllership are satisfied.
If you are unsure which controller is responsible for a particular processing activity, you may contact apartments@artee.ba and we will provide the applicable information or direct your request to the appropriate controller where necessary.
Personal data is processed in accordance with applicable data-protection legislation of Bosnia and Herzegovina, including the Law on Protection of Personal Data ("Official Gazette of BiH", No. 12/25) .
The Law on Protection of Personal Data establishes rules for the protection of individuals in connection with the processing of personal data and regulates, among other matters, the rights of data subjects, obligations of controllers and processors, security, personal-data incidents and international transfers.
This Policy is intended to explain the principal processing activities relevant to the Apartments Artee reservation service. It does not replace mandatory rights or obligations established by applicable law.
Depending on the reservation, service or communication involved, we may process:
We aim to collect and process only personal data that is adequate, relevant and limited to what is necessary for the applicable purpose.
We do not intentionally request sensitive or special-category personal data unless processing such information is necessary and permitted by applicable law. If you voluntarily provide sensitive information in a special request, that information may be processed only to the extent permitted by applicable law and reasonably necessary for the relevant purpose.
OUR STANDARD RESERVATION REQUEST FORM DOES NOT COLLECT CREDIT-CARD NUMBERS, CVV/CVC CODES, PIN NUMBERS OR ONLINE-BANKING CREDENTIALS.
Unless different payment arrangements are expressly made available for a particular reservation, payment is generally made in cash in BAM or EUR according to the applicable reservation instructions.
If another payment method is expressly arranged for a particular reservation, payment information may be processed by the relevant payment provider. Such provider may also process personal data under its own terms and privacy information.
We do not request credit-card PINs, online-banking passwords or similar authentication credentials through ordinary reservation communications.
Personal data may be received directly from you when you:
Personal data may also be received from an applicable accommodation provider, reservation partner or another person acting on your behalf where reasonably necessary for the reservation or related service.
Where personal data is not obtained directly from you, the applicable controller will provide the information required by applicable law concerning the source or category of source of the personal data, unless a statutory exception applies.
The Law on Protection of Personal Data permits processing where at least one lawful basis applies. Depending on the circumstances, these include consent, performance of a contract or steps taken before entering into a contract, compliance with a legal obligation, protection of vital interests, performance of a task in the public interest or official authority, and legitimate interests where the statutory requirements are satisfied.
| Purpose | Typical legal basis |
|---|---|
| Receiving and managing reservation requests | Steps taken at the request of the data subject before entering into an agreement and/or performance of an agreement. |
| Checking availability and communicating reservation details | Steps taken before entering into an agreement and/or performance of an agreement. |
| Confirming, modifying or cancelling reservations | Performance of an agreement and/or steps taken at the request of the data subject. |
| Providing or arranging accommodation | Performance of an agreement and/or steps before entering into an agreement. |
| Guest registration and statutory reporting | Compliance with a legal obligation applicable to the relevant controller. |
| Accounting, tax and legally required records | Compliance with a legal obligation applicable to the relevant controller. |
| Fraud prevention, security and protection of systems | Legitimate interests where the statutory balancing requirements are satisfied and/or compliance with legal obligations. |
| Complaints, disputes and legal claims | Performance of an agreement, legitimate interests where permitted by law, compliance with legal obligations and/or establishment, exercise or defence of legal claims. |
| Montier CLUB administration, where applicable | Performance of the applicable membership relationship, steps before entering into it and/or consent where required by law. |
| Direct marketing, where applicable | Consent or another legal basis permitted by applicable law, depending on the circumstances. |
| Website analytics and improvement, where applicable | Legitimate interests where permitted by applicable law and/or consent where legally required. |
The exact legal basis used for a particular processing activity depends on the actual circumstances and applicable legal requirements.
Where processing is based on legitimate interests, those interests will be considered against the interests or fundamental rights and freedoms of the data subject as required by law.
We will not use personal data for a materially incompatible purpose without first satisfying the applicable legal requirements for further processing.
Some personal data may be necessary to process a reservation request, communicate with you, provide an accommodation service, comply with legal obligations or perform another requested service.
Other information may be optional, such as certain special requests or marketing information.
Where applicable, the relevant reservation form or communication will identify information that is necessary for the requested service. If required information is not provided, we may be unable to process the reservation request, provide the requested service, communicate with you or comply with an applicable legal obligation.
Where consent is the legal basis, providing the relevant personal data is generally voluntary and withdrawal of consent will not affect processing carried out before withdrawal.
We aim to process personal data that is adequate, relevant, accurate and limited to what is necessary for the applicable purpose.
Guests should provide accurate and up-to-date information and notify us where information relevant to an active reservation needs to be corrected.
Apartments Artee may facilitate reservations for accommodations owned, operated or managed by persons or businesses other than the operator of the Apartments Artee reservation service.
Where necessary to receive, confirm, administer or provide a reservation, relevant personal data may be disclosed to the applicable accommodation provider.
The information shared will be limited, where applicable, to information reasonably necessary for the reservation, stay, communication, guest registration, security, legal obligations or related services.
An accommodation provider may independently process personal data as a separate controller where it determines its own purposes and means of processing.
Such provider may have additional privacy information or property-specific privacy practices applicable to its own processing.
Where the applicable parties jointly determine the purposes and means of processing, the legal requirements concerning joint controllers may apply.
We may use external service providers where reasonably necessary to operate our websites, reservation systems and related business activities.
Depending on the services actually used, these may include:
Where a provider processes personal data on behalf of a controller, the provider will process the data in accordance with applicable data-protection requirements and the applicable contractual or other legally required arrangements.
A service provider that independently determines the purposes and means of its own processing may be a separate controller for that processing.
Depending on the circumstances, personal data may be disclosed to the following categories of recipients:
We do not disclose personal data to recipients merely because they are available as a commercial contact. Disclosure must have an applicable legal basis and be reasonably connected with the relevant purpose.
Where you use WhatsApp, Viber, email, telephone or another communication service to communicate with us, relevant contact information and the content of the communication may be processed for reservation, customer-service or related purposes.
Third-party communication providers operate their own systems and may independently process personal data in accordance with their own terms and privacy practices.
Where communication with the applicable accommodation provider is necessary, relevant information may be shared with that provider on an appropriate legal basis.
MARKETING COMMUNICATIONS ARE OPTIONAL.
Submitting a reservation request does not automatically subscribe you to promotional communications.
Promotional communications will only be sent where there is an appropriate lawful basis for doing so.
Where marketing is based on consent, you may withdraw your consent at any time by using the unsubscribe mechanism provided in the communication or by contacting apartments@artee.ba.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
You may also have a right to object to processing of personal data for direct marketing purposes as provided by applicable law.
Unsubscribing from marketing does not prevent necessary reservation, transactional or service communications.
If Montier CLUB membership functionality is actually used and you provide membership information, it may be processed for purposes including:
Membership benefits remain subject to applicable membership terms, eligibility requirements and conditions of the relevant offer.
Our websites may use cookies and similar technologies.
Depending on the configuration actually used, these technologies may serve purposes including:
The exact cookies and technologies used may change as website functionality and service providers change.
Where consent is legally required for a particular cookie or similar technology, the applicable consent mechanism will be used.
You may also control cookies through your browser settings. Disabling certain cookies may affect website functionality.
Where analytics or technical-performance tools are actually used, they may process technical information to help us understand website usage, identify technical problems and improve website functionality.
The analytics providers actually used may change from time to time. The applicable processing depends on the provider and its configuration.
Where analytics involves personal data or technologies for which consent is legally required, applicable legal requirements will be followed.
We do not automatically treat all analytics information as anonymous. Whether information constitutes personal data depends on the actual information and configuration involved.
Some service providers used for hosting, email, communications, analytics, technology or other services may process personal data outside Bosnia and Herzegovina.
Where personal data is transferred to another country or international organization, the transfer will be carried out in accordance with the requirements of applicable data-protection law.
Depending on the circumstances, a transfer may rely on an applicable adequacy decision, appropriate safeguards, an applicable derogation or another transfer mechanism permitted by law.
Where required by applicable law, information concerning the recipient or categories of recipients and the applicable safeguards for an international transfer may be obtained by contacting: apartments@artee.ba.
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected or processed, taking into account applicable legal, accounting, tax, contractual, accommodation-registration, security and dispute-resolution requirements.
Where a specific statutory retention period applies, the data may be retained for that period. Where no fixed period applies, the retention period or applicable criteria will depend on the nature and purpose of the processing.
| Category | Retention principle |
|---|---|
| Reservation enquiries | Until no longer reasonably necessary for resolving the request and related administrative purposes, unless longer retention is required or justified by law or a legal claim. |
| Confirmed reservation records | For the period necessary to administer the reservation and satisfy applicable legal, accounting, tax and dispute-related requirements. |
| Guest-registration information | For the period required by applicable accommodation, registration or other legislation. |
| Marketing information | While necessary for the relevant marketing relationship and, where appropriate, to maintain records of preferences or withdrawal as required by law. |
| Complaint and legal records | For as long as reasonably necessary to investigate, resolve or establish, exercise or defend legal claims, subject to applicable limitation periods and legal obligations. |
Different categories of personal data may therefore be retained for different periods.
When personal data is no longer required, it will be deleted, anonymized or otherwise disposed of in accordance with applicable requirements and reasonable security practices.
We take appropriate technical and organizational measures proportionate to the nature and risks of processing to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, alteration or damage.
Depending on the circumstances, measures may include access controls, authentication, secure communications, restricted access, backups, monitoring, recovery procedures and other appropriate safeguards.
Our websites may use SSL/TLS encryption for communications where supported.
No method of transmission or storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information transmitted over the internet.
If a personal-data breach occurs, the applicable controller will assess the breach and take the measures required by applicable law.
Where the statutory conditions are satisfied, a controller must notify the Agency for Personal Data Protection in Bosnia and Herzegovina without unnecessary delay and, where possible, within 72 hours after becoming aware of the breach.
Where a breach is likely to result in a high risk to the rights and freedoms of a natural person, the applicable controller must also notify the affected person without unnecessary delay, subject to the exceptions provided by law.
Processors must notify the relevant controller without unnecessary delay after becoming aware of a personal-data breach.
Our reservation services are generally intended to be used by adults or by persons acting with the involvement of a responsible adult.
Guests under 18 may nevertheless be included in a reservation where permitted by the applicable accommodation and applicable law.
We may process information concerning children where reasonably necessary for reservation administration, guest registration, accommodation, safety or legal obligations.
We do not knowingly request unnecessary personal information from children.
We do not currently make reservation decisions solely through automated processing that produces legal effects concerning you or similarly significantly affects you.
We may use ordinary technical systems to assist with website operation, security, fraud prevention, availability checking or other administrative functions. Such technical processing does not by itself mean that a decision is made solely by automated processing within the meaning of applicable data-protection law.
If this changes and applicable law requires additional information or safeguards concerning automated decision-making or profiling, the relevant information will be provided before such processing takes place.
Subject to the statutory conditions, limitations and exceptions, applicable data-protection law may provide you with rights including:
These rights are subject to statutory conditions, limitations and exceptions. In particular, a request for deletion does not necessarily require deletion where continued processing is required or permitted by law.
You may submit a data-protection request by email to:
Privacy Contact
apartments@artee.ba
You may submit a request in free form. Please provide enough information for us to understand the request and, where reasonably necessary, to verify your identity.
If we have reasonable doubts concerning the identity of the person making a request, we may request additional information necessary to verify identity, as permitted by law.
We will provide information concerning actions taken in response to a rights request without unnecessary delay and, in any event, within 30 days of receiving the request.
Where necessary because of the complexity or number of requests, that period may be extended by up to an additional 60 days, where permitted by law. We will inform you of any such extension within the applicable initial period and provide the reasons for the delay.
Where we do not act on a request, we will inform you without unnecessary delay and, at the latest within the applicable statutory period, of the reasons for not acting and of your right to lodge a complaint with the Agency or seek judicial protection where applicable.
If your request concerns processing independently carried out by an accommodation provider acting as a separate controller, we may provide the applicable contact information or direct the request to that controller where appropriate.
You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data infringes applicable data-protection law.
In Bosnia and Herzegovina, the competent supervisory authority is:
Agency for Personal Data Protection in Bosnia and Herzegovina
Dubrovačka br. 6
71000 Sarajevo
Bosnia and Herzegovina
Telephone: +387 33 726 250
Email:
azlpinfo@azlp.ba
The Agency is the independent supervisory authority responsible for monitoring implementation of the Law on Protection of Personal Data in Bosnia and Herzegovina.
You may also have rights to seek judicial protection or other remedies provided by applicable law.
Our websites or communications may contain links or references to third-party websites, platforms or services.
Third-party services are operated by their respective providers. Their own privacy policies and terms may apply to information processed directly by those providers.
This Privacy Policy does not govern processing independently carried out by a third party acting as its own controller.
Where MontierHotels.com is used as an additional website, domain or online service associated with Apartments Artee or related hospitality activities, personal-data processing carried out through that service may be subject to this Privacy Policy where the relevant controller determines the purposes and means of that processing.
If MontierHotels.com or another associated service independently processes personal data as a separate controller, its applicable privacy information may also apply.
WE DO NOT SELL, RENT OR TRADE PERSONAL DATA.
This does not prevent lawful disclosure or processing by accommodation providers, processors, service providers, professional advisers, authorities or other recipients where there is an appropriate legal basis or where disclosure is required or permitted by law.
We may update this Privacy Policy from time to time to reflect changes to our services, reservation procedures, technology, legal requirements, processing activities or service providers.
The current version will be published on this page together with its applicable update date.
Where a change materially affects the processing of personal data, we will provide any additional information or notice required by applicable law.
Changes to this Privacy Policy do not automatically alter the contractual terms of an already confirmed reservation.
For privacy questions, data-subject requests or questions about personal-data processing carried out through the Apartments Artee reservation service, please contact:
Apartments Artee — Privacy Contact
Email:
apartments@artee.ba
If your question concerns processing independently carried out by an accommodation provider acting as a separate controller, we may provide the applicable contact information or direct the request to that controller where appropriate.
This Privacy Policy explains how personal data may be processed. It does not determine whether a reservation is available, confirmed, cancelled or otherwise accepted.
Reservation procedures, confirmation, pricing, cancellation, payment, accommodation-provider responsibilities, guest obligations, house rules and other reservation matters are governed by the Important Booking Terms and the specific conditions applicable to the reservation.
Where the Terms identify an accommodation provider other than the operator of the Apartments Artee reservation service, that provider may have separate responsibilities as a data controller for its own processing.
Nothing in this Privacy Policy is intended to exclude, restrict or limit any mandatory right or protection provided by applicable data-protection or consumer law.
We use Cloudflare Turnstile, a privacy-focused security tool provided by Cloudflare, Inc., to protect our website from malicious bot traffic and automated abuse.
Turnstile processes minimal client-side signals to distinguish human users from bots, including:
Cloudflare states that it does not have the ability to directly identify any individual from these signals, including IP addresses. The purpose of processing is solely bot detection and blocking — not profiling, identification, or targeting of individuals.
The signals collected by Turnstile are strictly necessary for detecting and blocking bots to enable visitors to enjoy a safe and secure experience when visiting our website.
Data Controller Relationship:
Cloudflare acts as a data processor for the signals processed to provide the Turnstile service to us (website operator). We act as the data controller for this processing.
Cloudflare also acts as a data controller for processing Turnstile signals to improve its bot detection capabilities, relying on its legitimate interests.
For more information about how Cloudflare processes data through Turnstile, please refer to:
For privacy concerns regarding Turnstile data processing, you may contact Cloudflare's Data Protection Officer at dpo@cloudflare.com.