Last updated: 19 September 2026
1. Who processes your data
The data controller is Miloš Jovanović, holder of the registered agricultural holding no. 804266003040 (BPG), operating as the rural tourist household Salaš “Isailovi”, Rumski drum bb, 22000 Sremska Mitrovica, Serbia. E-mail: salas.isailovi@gmail.com, phone: +381 65 55 06 929. This policy applies to www.salas-isailovi.rs in all its languages.
2. Contact form
When you send us an enquiry through the contact form, we collect your name, e-mail address, phone number (if you enter one) and the text of your message. We use them only to answer you and to arrange a celebration, a stay or a visit. The legal basis is taking steps at your request before entering into a contract (Article 12(1), item 2 of the Serbian Law on Personal Data Protection; Article 6(1)(b) GDPR). The message reaches us as e-mail at our Google (Gmail) address; Google is our processor in that respect. We keep the correspondence for at most two years after the last exchange, unless accounting or contract law requires a longer period.
3. Server, security and logs
The site is hosted by a Serbian hosting provider on a server in the European Union (Finland). On every visit the server technically records the IP address, time, requested page, referring page and browser details so that the site works and stays protected. A security plugin (Wordfence) briefly records the IP addresses of requests to defend against attacks. We also keep a record of visits that arrive through AI services (for example ChatGPT or Perplexity) and of fetches by their crawlers – IP address, time, requested page and the name of the service or crawler – for at most 180 days, to understand how the site is used. The legal basis is our legitimate interest (Article 12(1), item 6 of the Serbian Law on Personal Data Protection; Article 6(1)(f) GDPR).
4. Cookies and similar tools
On your first visit we ask for your consent. Until you answer, we set only necessary cookies; Google Analytics then receives only a signal without cookies and without visitor identifiers, and the Meta pixel is not loaded at all. Analytics and marketing are switched on only when you allow them.
| Cookie | Purpose | Duration | Set by | Type |
|---|---|---|---|---|
_lscache_vary | Technical page caching – tells the server which copy of a page to serve | 2 days | this site | necessary |
pll_language | Remembers the language you chose | 1 year | this site | necessary |
salas_consent | Remembers your choice in the cookie banner | 12 months | this site | necessary |
_ga, _ga_PJW28BB2CD | Google Analytics 4 – distinguishes visitors and sessions for visit statistics; it also records interactions such as scrolling, outbound clicks and form submission; “Google signals” is also enabled, by which Google links the data to accounts that have allowed ads personalisation | 2 years | Google Ireland Ltd. | analytics |
_fbp | Meta pixel – recognises the browser and records page views (PageView) and submitted enquiries (Lead) for measuring and targeting Meta ads | 90 days | Meta Platforms Ireland Ltd. | marketing |
You can change your choice at any time through the “Cookie settings” link in the site footer, and you can delete cookies in your browser settings. The legal basis for analytics and marketing is your consent (Article 12(1), item 1 of the Serbian Law on Personal Data Protection; Article 6(1)(a) GDPR).
5. Google Maps and YouTube videos
The contact page embeds a Google map. It loads from Google’s servers regardless of your choice in the banner; Google thereby learns your IP address and may set its own cookies under its own privacy policy. The “The History of the Salaš” page and some blog posts embed YouTube videos. When a video scrolls into view it loads from YouTube (Google) servers, which then learn your IP address and may set their own cookies, regardless of your choice in the banner.
6. Links to other websites
The site links to Booking.com, Tripadvisor, Facebook and Instagram. Once you open them, those sites’ privacy policies apply.
7. Transfers outside Serbia and the EU
Google (Google Ireland Limited) and Meta (Meta Platforms Ireland Limited) may also process data in the United States. Transfers rely on the EU–US Data Privacy Framework and on those companies’ standard contractual clauses.
8. Your rights
You have the right to access your data, to have it corrected, completed or erased, to restrict processing, to data portability and to object, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Send requests to salas.isailovi@gmail.com. You may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs) or, if you are in the European Union, to the data protection authority of your own country.
9. Children
The site is not intended for children under 15 and we do not knowingly collect their data.
10. Changes
We change this policy when what we collect changes. The current version is always on this page, with the date of the last change. When a change materially affects cookies, we will ask for your consent again.