HBRD HOTELI ILIDZA SARAJEVO, ONLINE PRIVACY STATEMENT OUR MISSION We at Hoteli Ilidza are dedicated to protecting your privacy and safeguarding your personal data. Our mission is to consistently exceed our guests’ expectations in terms of the products and services we provide to our business and leisure travelers. We strive to create an experience that is responsive to our guests’ needs by using the information you entrust us with responsibly. We are committed to respecting your privacy and adhering to the principles of applicable data protection and privacy laws throughout the world. We have provided this Privacy Statement as an explanation of how we collect, how the use of this information can benefit your experience on our web sites and during your relationship with us, with whom and for what purposes we may share the information, and the choices you can make about our use of the information. We also describe the measures we take to protect the security of the information and how you can contact us about our privacy practices. PURPOSE FOR COLLECTION: We are fully committed to providing you with information about the collection and use of personal data furnished by, or collected from you while using our web sites, products and services. It is our standard practice not to ask you for information unless we need it. The main purpose for collecting your personal data is to allow us to provide you with the requested services such as processing a transaction. In addition, information may be collected for the following purposes: fulfilling reservation or information requests; purchasing products or services; registering for program membership; responding to our communications (e.g., surveys, promotional offers, or reservation confirmations); accommodating your personal preferences; fulfilling requests for services or recommendations we provide you; working with third party sources with your consent, including processing information you make available via social networking and other web sites, to better assist us with understanding your interests and to serve you better; your use of our apps on your electronic devices; pdating your contact information including your address; or facilitating the transmission of forward to a friend email at your request. We may also ask your permission to use your personal data for the following purposes: Sending you direct marketing messages and communications in relation to the products and services offered by Hoteli Ilidza, our strategic marketing partners, and other trusted third parties; Performing market research via surveys to better serve your needs, improve the effectiveness of our web sites, your hotel experience, our various types of communications, advertising campaigns, and/or promotional activities. We may also analyze personal data we process for the above-mentioned purposes to better understand our customers’ needs, improve our services and the way we operate. The outcome of such analysis will only be aggregate data that will not to be used to identify, single out, or take action towards an individual, but only to analyze trends and other behavior at aggregate level. TYPES OF INFORMATION WE COLLECT: We collect information about our hotel guests and web site visitors so that we can provide an experience that is responsive to our guests’ and visitors’ needs. In order to fulfil the above mentioned purposes, we may collect personal data or information relating to you that can identify you, directly or indirectly. Such data may primarily include your name, home, work and e-mail addresses, telephone, mobile telephone, and fax numbers, credit card information, date of birth, gender, and lifestyle information such as room preferences, leisure activities, names and ages of children, and other information necessary to fulfill special requests (e.g., health conditions that require special room accommodations). When you visit our websites, we may also collect internet log information and details of visitor behavior patterns which we only process in a way which does not identify you (or anyone else). If we use your data in this way, we do not attempt to identify you or to single out information on an individual level. If we do want to identify you or single you out, we will make it clear when we collect the information and will explain what we intend to do with it. CONSENT: You may opt out of Hoteli Ilidza surveys and marketing emails relating to Hoteli Ilidza offerings and services, when we collect your information and at any time by clicking on the link included in such communications, or by contacting us directly to opt out of direct marketing, telemarketing, emails or surveys. To see the Updating Your Communication Preferences in the Contact Us section of this privacy statement. You will always be offered the choice not to submit your personal data to our strategic marketing partners and other trusted third parties for marketing communications or to decide what communications you want to receive from us and them. If you are a Hoteli Ilidza Preferred Guest (“HIPG”) program member, you may also change your communication choices by updating your communication preferences in your individual membership profile. In some cases your permission will be implied from the nature of the service requested or transaction undertaken. For example, we may collect and use personal data that you volunteer, or behavioral data or other information collected in the aggregate. In addition, your permission will be deemed given for communications from us that are necessary to fulfill transactions and services that you request. In certain circumstances, we will seek your express permission when we collect information that is regarded under certain data privacy regulations to be sensitive in nature (e.g., information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, sex life, health conditions or judicial data) as permitted or required by the applicable law. TRANSFERING: In most cases, the information you provide is added to a Hoteli Ilidza local or global database. In the course of processing your information, it may be necessary to transfer your personal data to HBRD Hoteli Ilidza affiliates, properties within the Hoteli Ilidza and/or third party service providers located in the BiH and throughout the world for the purposes outlined within this Privacy Statement. Unless otherwise precluded or governed by legal requirements and/or process, Hoteli Ilidza subsidiaries, affiliates and property owners that may receive your information are obligated to follow similar privacy requirements relating to your personal data. As a general practice, we do not sell, rent, or give physical possession of your personal data to unaffiliated third parties outside the Hoteli Ilidza system. Situations in which we may share your information to others include: when companies or service providers that perform business activities on behalf of Hoteli Ilidza require such information in order to conduct the tasks defined in their agreements with Hoteli Ilidza (e.g., credit card processing, customer support services, market research administration or database management services), when a hotel or other property leaves the Hoteli Ilidza system and access to your personal data is necessary to facilitate business operations or meet contractual obligations in connection with the fulfillment of reservations that are booked for future stays or events, in the event Hoteli Ilidza is merged or acquired by another company, to comply with legal or regulatory requirements or obligations in accordance with applicable law, a court order or a subpoena, in case of emergency such as to safeguard the life, health, or property of an individual. If information is shared as mentioned above, we seek to limit the scope of information that is furnished to the amount necessary for the performance of the specific purpose Unless otherwise precluded by legal process, third parties are obligated to protect your personal data in line with our policy and abide by applicable privacy laws and regulations. DELETION AND RETENTION OF YOUR PERSONAL DATA: Your personal data will be kept in a form which enables to identify you for no longer than it is necessary for the purposes for which we collected and use your data. Your personal data may be retained in certain files for a period of time as required by applicable law and following Hoteli Ilidza data retention policies in order to comply with such financial or legal requirements, to properly resolve disputes or to troubleshoot problems. In addition, some types of information may be stored indefinitely due to technical constraints, and will be blocked from further processing for purposes which are not mandatory by law. ACCESSING, UPDATING AND REMOVING YOUR PERSONAL DATA: You may request to have access to your personal data we keep or to have your personal data updated, erased or blocked unless this proves impossible or involves a disproportionate effort. You have may request confirmation as to whether we process your personal data and what that data constitutes. Where allowed under local law, you may request us to erase your personal data, if one of the following circumstances exist: your personal data are no longer necessary for the purposes for which they were collected or otherwise processed; if the processing was based on your consent and if you have withdrawn your consent, your consent has expired, or where there is no longer a legal ground for the processing of your personal data; If the processing is for direct marketing purposes or if you make a justifiable objection ; a court or regulatory authority has ruled that your personal data concerned must be erased; your personal data was unlawfully processed. To ensure that your personal data is accurate and up to date, we encourage you to regularly review and update your information as appropriate (e.g., in the event your home or e-mail address changes, or you wish to add an additional method for us to communicate with you). If you are an SPG program member, you can review and update your individual membership profile on-line or with the assistance of a Hoteli Ilidza customer service representative. If you are not a SPG program member you can review and update your personal data by contacting our Consumer Affairs Team or Privacy Office and requesting an access form. Please note that in an effort to prevent the unauthorized disclosure of your personal data, you may be asked to provide proof of identity (or other authentication materials) together with the completed access request form. Access to personal data for non-SPG program members cannot be provided by telephone If, upon review, you wish to deactivate your SPG program member profile, or update your personal data, we will endeavor to do so in a timely manner. Occasionally, information that you request to be removed will be retained as explained above. Therefore, for the above reasons you should not always expect that all of your personal data will be completely removed from our databases in response to your request, even though we are regularly reviewing our data retention practices to ensure that personal data, while residing on the systems of Starwood and/or Starwood’s strategic marketing partners and service providers, will not be actively processed and will be accessed only if required by law. Please refer to the appropriate contact information belowto contact us about updating your communication preferences, removal from our marketing lists, or to submit a general question or request. SECURITY SAFEGUARDS: Hoteli Ilidza recognizes the importance of information security, and is constantly reviewing and enhancing our technical, physical, and logical security rules and procedures. All Hoteli Ildiza owned web sites and servers have security measures in place to help protect your personal data against accidental, loss, misuse, unlawful or unauthorized access, disclosure, or alteration while under our control. Although “guaranteed security” does not exist either on or off the Internet, we safeguard your information using appropriate administrative, procedural and technical safeguards, including password controls, “firewalls” and the use of up to 256-bit encryption based on a Class 3 Digital Certificate issued by VeriSign, Inc. This allows for the use of Secure Sockets Layer (SSL), an encryption method used to help protect your data from interception and hacking while in transit. ON-LINE TECHNOLOGIES: Hoteli Ilidza and its third party marketing partners may use cookies, invisible pixels, and web beacons to obtain information about you while visiting our web sites. A cookie is a very small text file that is sent to your browser from a web server and stored on your computer’s hard drive. Hoteli Ilidza cookies assign your computer with a unique identifier, which in turn, becomes your identification card whenever you return to a Starwood web site. Cookies are designed to save you time because they help us to provide you with a customized experience without you having to remind us of your preferences each time you return to our web pages. Hoteli Ilidza cookies are not designed to damage your files, nor can they read information from other files on your computer hard drive. Cookies can also help us provide you with a personalized experience in the following ways: remembering your user name and password for future visits so log-in is easier and faster. ensuring you are provided with the appropriate frames and content ensuring you obtain all requested information. helping us deliver communications that are relevant and responsive to your interests and location. Hoteli Ilidza cookies are limited to our sites and services only and are not designed to follow you when traveling on the Internet after leaving. We track the usage of our web sites in order to better meet your needs and to help make it easier for you to find information in the future. Please note that in addition to Hoteli Ilidza cookies, various third parties may also place cookies on your computer’s hard drive. Hoteli Ilidza are not responsible for the presence or absence of third party cookies, or for the technological capabilities or practices employed by third parties in connection with third party cookies. If you would prefer not to have the benefits of cookies, your Internet browser can be adjusted to treat cookies in different ways. Depending upon the type of browser you are using, you may be able to configure your browser so that: you are prompted to accept or reject cookies on an individual basis or , you may be able to prevent your browser from accepting any cookies at all. You should refer to the supplier or manufacturer of your web browser for specific details about cookie security. However, you should also understand that rejecting cookies might affect your ability to perform certain transactions on our web sites and our ability to recognize your browser from one visit to the next. Hoteli Ilidza also uses invisible pixels, sometimes called web beacons, to count how many people visit certain web pages. Information collected from invisible pixels is used and reported in the aggregate and does not contain personal data. Hoteli Ilidza may use this information to improve marketing programs and content. We also work with vendors and strategic marketing partners to help deliver advertisements and personalized content that we believe will be of interest to you. These vendors and other partners include advertisers, advertising agencies, advertising networks, audience segment providers, data exchanges, analytics providers, and other similar providers. Please click here for a current list of the agencies and providers with which we work. These partners and vendors use cookies and web beacons to collect information about your online activity (e.g., the sites and pages you have visited at Hoteli Ilidza sites and other third party sites) in order to help Hoteli Ilidza (and in some cases, third party advertisers) deliver personalized content and advertising to you while you are on Hoteli Ilidza or other sites. We may also engage one of these vendors to deliver our advertisements to consumers whose online behaviors on sites other than the Hoteli Ilidza sites indicate that they may be interested in travel. In other instances, we engage in special arrangements with certain advertisers with which we think our web site visitors would have an interest. We allow these advertisers to deliver co-branded messages directly to consumers who have visited our web pages. These types of cobranded advertisements may appear on Hoteli Ilidza sites or on third party sites. In general, you can opt out of our vendors’ use of cookies to tailor personalized content or advertising to you by visiting. In order to anticipate your needs, our website provides links to other web sites and third parties for your convenience and information. We are not responsible for the collection, use, maintenance, sharing or disclosure of data (including personal data) by such third parties. We encourage you to contact these third parties to ask questions about their privacy practices, policies and security measures before disclosing any personal data. We recommend that you review the privacy statements and policies of linked web sites to understand how those web sites collect, use and store information. MINORS: We do not seek to obtain nor does it wish to receive personal data directly from minors; however, we cannot always determine the age of persons who access and use our web sites. If a minor (as defined by applicable law) provides us with his/her data without parental or guardian consent, we encourage the parent or guardian to contact us to have this information removed and to unsubscribe the minor from future Hoteli Ilidza marketing communications. UPDATING YOUR COMMUNICATION PREFERENCES If you would like to update your information, modify your communication preferences, or if you do not want to receive marketing communications from Hoteli Ilidza in the future, you can contact us: UPDATES TO THE PRIVACY STATEMENT: This Statement was last updated to include Hoteli Ilidza’s adoption of Binding Corporate Rules by way of Hoteli Ilidza’s Guest Data Protection Standards. Hoteli Ilidza may amend this Privacy Statement from time to time in order to meet changes in the regulatory environment, business needs, or to satisfy the needs of our guests, properties, strategic marketing partners, and service providers. Updated versions will be posted to our web site and date stamped so that you are always aware of when the Privacy Statement was last updated.

Payment should be made directly to the hotel by cash or credit card. All bookings must be guaranteed by credit card, credit card details will be used only for insurance if reservation is canceled or no-show is made. Bookings without credit card details will not be accepted. Credit card will not be used before predicted time for check-out. Please cancel at least 72 hours before date of arrival to avoid any charges of Your credit card. For NON REFUNDABLE bookings, the total price of the reservation may be charged anytime after booking. In case of No-Show, Cancellation or Amendments less than 72 hours, one night’s room rent will be charged to guests’ credit card which cannot be later reversed or disputed. Security deposit is required upon check-in depending on the number of nights – Credit Card is preferable. In case of pre-paid bookings, please do not use your credit card to make bookings for others as presence of the card-holder will be required at the time of check-in. The card-holder will be required to sign on the Hotel’s Registration Form and show his original credit card and identity proof. Room will be denied in case of non-compliance. Please ensure to enter a valid credit card number. If the hotel cannot get pre-authorization or payment on the guests’ credit card, the hotel reserves the right to cancel the booking without any notice.