Privacy Policy | Zeta Travel Montenegro

Introduction

Welcome to Zeta Travel Montenegro (accessible via zetatravel.me), a trading name operated by Arhizeta d.o.o. – PJ Zeta Travel. We are highly committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, process, use, and safeguard your personal information in strict compliance with the European Union’s General Data Protection Regulation (GDPR) and applicable Montenegrin data protection legislation.

Data Controller

For the purpose of data protection laws, the Data Controller is Arhizeta d.o.o. – PJ Zeta Travel, a company registered in Montenegro under PIB: 03219992, PDV: ME03219992, with its registered office at Stari Put 30, 85320 Tivat, Montenegro. “Zeta Travel Montenegro” and “Zeta Travel Albania” are trading names operated by this company across its regional operations. If you have any questions regarding this policy or wish to exercise your legal data privacy rights, you can reach our team at our official corporate channel: info@zetatravel.me.

Data We Collect and Process

As a travel agency, we may collect and process the following categories of personal information depending on your interaction with our website:

– Identity & Contact Information: Full name, surname, email address, physical address, phone number, nationality, and passport details (strictly when required for international tour bookings or local border authorities).
– Transaction & Travel Booking Data: Details about your selected tour packages, travel itineraries, booking dates, hotel preferences, passenger details, and special requests.
– Financial and Payment Data: Invoicing details, billing address, and transaction history. Please note: Credit card transactions are processed securely via encrypted third-party payment gateways; we do not store your raw payment details on our servers.
– Technical and Analytical Data: IP addresses, browser types, device information, operating systems, and website navigation patterns collected automatically through functional and analytical cookies.

Legal Bases for Processing Data

Under GDPR and applicable Montenegrin data protection law, we only process your personal data under the following legitimate legal grounds:

– Performance of a Contract: To process, confirm, and execute your travel reservations and manage customer service inquiries.
– Legal Obligation: To comply with financial reporting, taxation rules, and security regulations mandated by Montenegrin and Albanian tourism authorities and local law enforcement, as applicable to our cross-border operations.
– Legitimate Interests: To improve our website functionalities, prevent fraudulent transactions, and ensure website security.
– Consent: To send you newsletter emails, marketing communications, and promotional tour offers, which you can opt-out of at any time.

Data Retention Period

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including any legal, accounting, or statutory reporting requirements under applicable Montenegrin and Albanian tourism laws.

Third-Party Data Sharing

We do not sell, rent, or trade your personal data with third parties for marketing purposes. To fulfill your specific travel arrangements, your data may be shared strictly with local and international hotels, transport companies, professional tour guides, and airline carriers involved in your booked itinerary.

Cross-Border Data Transfers

As our operations span both Montenegro and Albania, and Montenegro is outside the European Economic Area (EEA), any transfer of personal data from EU/EEA citizens is strictly managed under the appropriate safeguards established by Montenegrin data protection authorities, aligning with the equivalence requirements of GDPR.

Your Legal Data Rights

Under both GDPR and applicable Montenegrin Data Protection Law, you hold the following rights regarding your personal information: Right of Access, Right to Rectification, Right to Erasure (“Right to be Forgotten”), Right to Restriction, Right to Data Portability, and Right to Object.

You also have the Right to Lodge a Complaint with a supervisory authority if you believe your data has been processed unlawfully. If you are located within the EU/EEA, you may contact your local data protection authority. As our Data Controller is registered in Montenegro, complaints may also be directed to the Agency for Personal Data Protection and Free Access to Information (AZLP) of Montenegro.

Cookies and Data Security Protocols

Our website utilizes cookies to deliver an optimized user experience, including essential cookies required for website functionality and analytical cookies used to understand visitor behavior. You can manage or disable cookies at any time through your browser settings; please note that disabling certain cookies may affect website functionality. We have integrated robust administrative and technical security frameworks — including secure SSL encryption layers — to safeguard your data against accidental loss, unauthorized alteration, exposure, or illicit access.

Children’s Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Last Updated” date at the top of this page indicates when this policy was last revised. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:

Arhizeta d.o.o. – PJ Zeta Travel
Stari Put 30, 85320 Tivat, Montenegro
Email: info@zetatravel.me