Legal
Privacy & Cookie Policy
Last updated 9 August 2026 · Version 1.0
Who we are
visitbanja.com (“we”, “us”) is an editorial guide to Serbia’s thermal spa towns. The controller responsible for your personal data is VisitBanja.com, operated by Milos Pavic, Carl Møllers Allé 4, 2860 Søborg, Denmark. You can reach us about privacy at contact@visitbanja.com.
The short version
This is a static site. We don’t run accounts, comments, a login or a database. We set one strictly-necessary cookie to remember your cookie choice, and — only if you agree — Google Analytics to see which banje readers are interested in. Nothing tracks you until you choose, and you can change your mind any time via .
What we collect and why
Analytics (with consent). If you accept analytics, Google Analytics 4 collects usage data — pages viewed, approximate location (from a truncated IP), device and browser type, and referring links. We use it only in aggregate to decide what to write next. The GA identifier can single out a browser, so we treat it as personal data.
Strictly necessary (no consent needed). A single first-party cookie stores your cookie choice so we don’t ask on every page. It contains no tracking identifier.
We do not collect names, emails or payment data — we take no bookings ourselves. Accommodation links send you to Booking.com, which is a separate company with its own policy.
Legal basis (GDPR Article 6)
Analytics cookies are processed on the basis of your consent (Art. 6(1)(a)), which you may withdraw at any time. The strictly-necessary cookie relies on our legitimate interest (Art. 6(1)(f)) in operating the site and honouring your preference.
Cookies we use
| Cookie | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| vb_consent | visitbanja.com | Remembers your cookie choice | Necessary | 180 days |
| _ga | Distinguishes visitors (analytics) | Analytics | 2 years | |
| _ga_<property> | Maintains analytics session state | Analytics | 2 years |
Analytics cookies are set only after you accept them. If you reject or ignore the banner, none are placed.
Sharing and international transfers
Analytics data is processed by Google as our processor. This can involve transfer to servers in the United States. Google LLC self-certifies under the EU-U.S. Data Privacy Framework, which currently provides a legal basis for such transfers, and Google additionally applies the EU Standard Contractual Clauses as a safeguard. See Google’s Privacy Policy. We share your data with no one else.
How long we keep it
Your cookie choice is stored for up to 180 days, after which we ask again. Google Analytics data is retained for up to 14 months and then deleted automatically.
Your rights
Under the GDPR you may request access to your data, correction, erasure, restriction, portability, and you may object to processing. You can withdraw analytics consent at any time via — it is as easy to withdraw as to give. To exercise any right, email us at contact@visitbanja.com.
You also have the right to complain to a supervisory authority — in Denmark, that is Datatilsynet.
Changes to this policy
When we change what we collect, we update this page and its version number, and — where the change is material — ask for your consent again.