Privacy Policy

Last updated: October 2026

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the sections below.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in section „2. Information about the responsible party".

How do we collect your data?

Some of your data is collected because you provide it to us — for example data you enter into the contact form or a booking inquiry. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (for example internet browser, operating system or time of page access).

What do we use your data for?

The data is collected to ensure the website is provided free of errors and securely, and to process your inquiries and bookings. We do not use any tools to analyse your user behaviour: there is no reach measurement, no tracking and no profiling.

2. Information about the responsible party

The party responsible for data processing on this website is:

Martin Pilz (private holiday rental “Sunrise Lodges Montenegro”)
Dapčevici / Velje Selo
85000 Bar, Montenegro
Phone: +382 67739897
Email: info@sunriselodges.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (for example names, email addresses or similar).

3. General Information on Data Processing

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from „http://" to „https://" and by the lock symbol in your browser line.

Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and browser version, operating system used, referrer URL, hostname of the accessing computer, time of the server request and IP address.

The legal basis is Art. 6 (1) lit. f GDPR. We have a legitimate interest in the technically error-free presentation, the stability and the security of our website. This data is not merged with other data sources. The logs are kept only as long as necessary for these purposes and are then deleted automatically.

4. Contact Form

If you send us an inquiry via the contact form, your details from the form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The legal basis is Art. 6 (1) lit. b GDPR, provided your inquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling the inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR), where this has been requested.

5. Booking Inquiries

For booking inquiries via our website we collect the following data: name, email address, phone number (optional), desired accommodation, arrival and departure date, number of guests and special requests. This data is used to process your booking inquiry and to communicate with you.

The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures and performance of the accommodation contract). Where we are required to retain data for tax or commercial law reasons, that further storage is based on Art. 6 (1) lit. c GDPR.

Guest Registration

Under Montenegrin law, guests must be registered with the competent authorities. For this purpose, on arrival we process the legally required details of all travellers, usually name, date of birth, nationality and the type and number of the identity document, and transmit them to the competent authority.

The legal basis is Art. 6 (1) lit. b GDPR, as registration is a prerequisite for carrying out the stay, and Art. 6 (1) lit. f GDPR (legitimate interest in complying with the registration obligations applicable in Montenegro).

6. Storage Period

Unless a specific period is stated in this policy, your personal data remains with us until the purpose for processing no longer applies. If you assert a justified request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for storing it. In detail:

• Contact inquiries: until the inquiry has been dealt with conclusively and no further questions are to be expected.
• Booking inquiries and bookings: until your stay has been fully completed; beyond that for as long as statutory retention obligations (in particular under tax and commercial law) require.
• Delivery logs of our system emails (recipient, subject, time, delivery status): one year from dispatch. They are deleted automatically after that.
• Server log files: see section 3.
• Cookie settings: remain on your device until you delete them there or change them in the cookie settings.

7. Your Rights

You have the right at any time to:

• Request information about your personal data stored with us and its processing (Art. 15 GDPR)
• Request correction of incorrect personal data (Art. 16 GDPR)
• Request deletion of your personal data stored with us (Art. 17 GDPR)
• Request restriction of the processing of your personal data (Art. 18 GDPR)
• Object to the processing of your personal data (Art. 21 GDPR)
• Receive your personal data in a structured, commonly used and machine-readable format (Art. 20 GDPR)

Withdrawing Your Consent

Many processing operations are only possible with your express consent. You can withdraw consent you have already given at any time with effect for the future (Art. 7 (3) GDPR). The lawfulness of the data processing carried out up to the withdrawal remains unaffected. You can change or completely withdraw your cookie consent at any time using the „Cookie settings" button at the bottom of every page.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice — in particular in the EU member state of your residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

8. Cookies and Storage on Your Device

Our website stores information on your device — partly as cookies, partly in your browser's local storage (localStorage).

Technically necessary storage is required for the website to function: this includes session handling, the language setting and storing your cookie decision itself. The legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) lit. f GDPR.

All other storage operations — in particular loading the Google map — take place exclusively after your prior consent. The legal basis is § 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a GDPR. Without your consent, none of it is loaded or stored.

You can change your decision at any time using the „Cookie settings" button. You can also configure your browser to block cookies generally or to delete them when closing; the functionality of this website may be limited as a result.

9. External Services and Processors

Vercel (hosting)

This website is hosted by Vercel Inc., San Francisco, USA. When a page is requested, Vercel processes the technically necessary connection data that also appears in the server log files (see section 3).

Legal basis is Art. 6 (1) (f) GDPR — the legitimate interest in providing this website securely and reliably. The transfer to the USA takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR including the European Commission's standard contractual clauses.

Supabase (database and content management)

We use Supabase to store and process the website content as well as your contact and booking inquiries. The provider is Supabase Inc., San Francisco, USA.

The database of this website is located in the eu-central-1 region, that is, in a data centre in Frankfurt am Main, Germany. Your data is stored there and does not leave the European Union in regular operation. Access from a third country in the course of maintenance and support cannot be entirely ruled out; the European Commission's standard contractual clauses apply to this. Processing takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Resend (email delivery)

We use the Resend service provided by Plus Five Five, Inc., San Francisco, USA, to send confirmations and notifications by email. This involves processing your email address, the content of the message and delivery log data (time, subject, delivery status), and transferring it to the USA.

The legal basis is Art. 6 (1) lit. b GDPR, as sending emails is necessary to process your inquiry and to handle the booking. The transfer to the USA takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR including the European Commission's standard contractual clauses.

Google Maps

On our directions page we embed the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is only loaded after you have expressly agreed. Until then you only see a placeholder area and no connection to Google is established. If you agree, your browser transmits your IP address, among other things, to Google; a transfer to the USA may take place. The legal basis is your consent under § 25 (1) TDDDG and Art. 6 (1) lit. a GDPR, which you can withdraw at any time with effect for the future. Further information can be found in Google's privacy policy: https://policies.google.com/privacy

10. No Automated Decision-Making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place. We always decide on your booking inquiry personally.

11. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.