Privacy policy

Who is responsible for your data

The data collected through this website is controlled by JD Gastro Holding DOO Ogranak Restoran Megdan (tax ID 114110835, registration number 21972657), with its registered office at Dunavska 2, 12000 Požarevac, Serbia. If you have any questions about how your data is processed, you can contact us by phone or at our registered address.

What data we collect

We collect only the data you provide to us yourself through the contact form, the table or apartment booking forms or when ordering food online.

• Your first name and surname
• Your phone number
• Your email address, if you enter one
• Your delivery address, only for orders with delivery
• The content of your message or note, including the preferred date, time, seating area and number of guests
• The content of your order (the dishes chosen, delivery or collection, time)
• For an apartment booking: the apartment chosen, the arrival and departure dates and the number of guests
• The IP address from which the request was sent — only with reservations and orders, solely to protect against misuse (limiting the number of requests); it is removed together with the other personal data

What we use your data for

We use your data solely to respond to your enquiry, to confirm or decline a table or apartment booking, to prepare and deliver your order, to send you a confirmation and status updates (by email or SMS) and to arrange the details of a celebration or a stay.

We do not use your data to send advertising messages without your consent, and we do not pass it on to third parties for marketing purposes.

Legal basis for processing

Processing is based on your consent, which you give by sending an enquiry, or on taking steps prior to entering into a contract for hospitality services.

How long we keep your data

We keep data from enquiries for as long as is necessary to respond and to provide the service, and for no longer than two years from our last contact. Personal data from table and apartment bookings and from orders (name, phone number, email, address, note, IP address) is removed automatically 12 months after the date of the booking (for an apartment, after the departure day) or order; the record of the reservation or order itself, without personal data, is kept for our records. Records of messages sent (to whom and when a message was sent, without its content) are kept for no longer than 12 months. We keep data for longer only where the law requires us to do so.

Your rights

Under the Law on Personal Data Protection of the Republic of Serbia, you have the following rights at any time:

• The right of access to the data we process about you
• The right to have inaccurate or incomplete data corrected
• The right to have your data erased
• The right to restriction of processing and the right to object
• The right to withdraw your consent at any time
• The right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection

Third-party services

The location map is provided by Google Maps and loads only after you explicitly request it with a click. Until then, no data is sent to Google.

The Megdan apartments are booked directly on this website. If the apartments are also offered on the Booking.com platform, we exchange only the booked dates with it (a calendar), with no names or other guest details. Apartment booking details (name, number of guests, dates and, unless the owner turns it off, phone number and note) are also written to the owner's personal calendar with Apple iCloud, solely to manage the bookings.

For orders with delivery, we check whether the address is in Požarevac using the public OpenStreetMap map search (the Nominatim service, OpenStreetMap Foundation). We send only the street and house number — no name, phone number or other details. The delivery driver may open the same street and number in the Google Maps app (Google) to navigate to you.

We send confirmations and notifications about reservations and orders through email and SMS services; they process only your contact details and the content of the message, solely in order to deliver it. Data is stored in a database with our hosting provider, on servers protected by encryption.

Data security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or misuse. The website is delivered over an encrypted HTTPS connection.