Privacy Policy
Last updated: 26 August 2026
This Privacy Policy explains how personal data is collected, used and protected when you visit kayabeach.me, the official website of Kaya Beach.
1. Data Controller
The website kayabeach.me and the Kaya Beach brand are operated by:
EAGLE HILLS MONTENEGRO d.o.o. Podgorica
Serdara Jola Piletića 18
Podgorica, Montenegro
Company Registration Number: 51297625
Tax Identification Number (PIB): 03738973
Email: office@kayabeach.me
Telephone: +382 68 523 325
For the purposes of applicable data protection legislation, EAGLE HILLS MONTENEGRO d.o.o. is the controller of personal data processed through this website.
2. Personal Data We Collect
The website does not currently provide online accounts, online payments, newsletter subscriptions or online reservation forms.
We may nevertheless process limited technical information when you visit the website, including:
- IP address;
- browser and device type;
- operating system;
- date and time of access;
- pages visited;
- referring website;
- basic server and security logs;
- cookie preferences recorded through CookieYes.
This information may be processed automatically by the website, hosting provider and security systems required for the website to function safely.
3. Telephone Reservations
Reservations are currently made by telephone.
If you contact Kaya Beach by telephone, we may process information you voluntarily provide, such as:
- your name;
- telephone number;
- reservation date and time;
- number of guests;
- preferred table, sunbed or beach area;
- additional information necessary to manage your reservation.
This information is used exclusively to respond to your request, confirm and manage your reservation, provide the requested service and resolve any related enquiries.
Please do not provide sensitive personal information that is not necessary for your reservation.
4. Purposes and Legal Bases
We may process personal data for the following purposes:
Website operation and security
Technical information may be processed to deliver the website, maintain security, prevent misuse and diagnose technical problems.
The legal basis is our legitimate interest in operating and protecting the website and, where applicable, compliance with legal obligations.
Reservation management
Information provided during a telephone reservation may be processed to take steps at your request and to provide the requested service.
Legal and administrative obligations
Certain information may be retained where necessary to comply with accounting, tax, regulatory or other legal requirements.
Cookies requiring consent
Where non-essential cookies or similar technologies are introduced, they will be used only after you provide consent through the CookieYes consent banner. You may withdraw or change your consent at any time.
5. Cookies
The website uses CookieYes to record and manage visitors’ cookie preferences.
Strictly necessary cookies may be used without consent where they are required for website operation, security or storage of your privacy choices.
Analytics, advertising and other non-essential cookies will not be activated unless you consent to them.
For further information, please read our Cookie Policy or open the cookie settings available on the website.
6. Recipients and Service Providers
Personal data may be processed by carefully selected service providers acting on our behalf, including:
- website hosting and server providers;
- website maintenance and technical support providers;
- security and backup providers;
- CookieYes, for cookie consent management;
- professional advisers or competent authorities where required by law.
Service providers may process personal data only for the purposes for which they have been engaged and subject to appropriate confidentiality and data protection obligations.
We do not sell personal data.
7. External Links and Social Media
The website may contain links to third-party services, including Instagram, telephone services and map or navigation services.
When you follow an external link, the relevant third party may process your data under its own privacy policy. We do not control the privacy practices, content or security of third-party websites and services.
We recommend reviewing the privacy policy of any external service you choose to use.
8. International Data Transfers
Some technical service providers may process or store information outside Montenegro or the European Economic Area.
Where applicable, reasonable safeguards will be used to protect personal data, including contractual protections, recognised adequacy mechanisms or other measures permitted by applicable law.
9. Data Retention
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected.
In particular:
- telephone reservation information is normally retained until the reservation has been completed and any related enquiry has been resolved;
- technical and security logs are retained only for the period necessary for website security, troubleshooting and fraud prevention;
- cookie consent records are retained according to the settings and duration displayed through CookieYes;
- information required by law may be retained for the legally prescribed period.
Data may be retained for a longer period where necessary to establish, exercise or defend legal claims or comply with a legal obligation.
10. Data Security
We apply reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
However, no website, electronic transmission or storage system can be guaranteed to be completely secure.
11. Your Rights
Depending on the law applicable to your situation, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- withdraw consent at any time;
- request data portability where applicable;
- submit a complaint to the competent data protection authority.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, contact office@kayabeach.me. We may request sufficient information to verify your identity before responding.
12. Complaints
If you believe that your personal data has been processed unlawfully, you may contact the competent supervisory authority in Montenegro:
Agency for Personal Data Protection and Free Access to Information of Montenegro
Where applicable, you may also have the right to contact a competent supervisory authority in the country where you reside, work or believe an infringement has occurred.
13. Children’s Privacy
The website is intended for a general audience and is not designed to collect personal data directly from children.
Parents or guardians who believe that a child has provided personal data unnecessarily may contact us to request its deletion.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to the website, our services, applicable legislation or the technologies we use.
The current version will always be published on this page, together with the date of the latest update.
15. Contact
For questions concerning this Privacy Policy or the processing of personal data, contact:
EAGLE HILLS MONTENEGRO d.o.o. Podgorica
Serdara Jola Piletića 18
Podgorica, Montenegro
Email: office@kayabeach.me
Telephone: +382 68 523 325