Privacy notice
Draft – pending legal review. Last updated: September 2026.
Introduction
Welcome to the Astera Apart Hotel website. We are committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your personal data when you visit our website, make an enquiry, or stay with us.
We comply with the Law on Personal Data Protection of the Republic of North Macedonia, which is aligned with the European Union's General Data Protection Regulation (GDPR), as well as the GDPR itself where applicable to our guests from the EU.
Who We Are (The Data Controller)
The entity responsible for processing your personal data (the "data controller") is:
• Company Name: [Company legal name] (trading as Astera Apart Hotel)
• Address: Prespanska 39, 1000 Skopje, Republic of North Macedonia
• Company Registration No.: [Registration no.]
• Tax No.: [Tax no.]
You can contact us about any data protection matters:
• Email: info@astera.mk
• Phone: +389 2 60 90 666
• Reception Mobile: +389 78 454 357
What Personal Data We Collect
We collect different types of personal data at different stages of your interaction with us. It is important to note that sensitive data such as credit card details and identification documents are not collected directly on this website.
• When you use our website enquiry form:
• Your full name
• Your email address
• Your phone number
• The content of your message, which may include details about your potential stay.
• When you browse our website:
• Technical data, collected via cookies and similar technologies. This can include your IP address, browser type, and general location. We only use non-essential analytics cookies if you provide your consent.
• Your consent preferences for cookies and essential functional data for theme selection.
• When you make a booking:
• Our website does not process bookings directly. You are redirected to our trusted booking partner, Clock PMS+, to complete your reservation.
• Clock PMS+ will collect the data necessary to secure your booking, which typically includes your name, contact details, payment card information, and details of your stay. We do not have access to your full payment card details. Please review the privacy policy of Clock PMS+ for information on how they handle your data.
• When you check in at the hotel:
• To comply with legal requirements in North Macedonia, we are required to collect certain information from all guests. This includes:
• Full name, date and place of birth, citizenship.
• Details from your official identification document (e.g., passport or national ID card number).
• Permanent residence address.
• Dates of arrival and departure.
• We also collect information required to process payment for your stay and any additional services.
Why We Process Your Personal Data (Purposes)
We use your personal data for the following purposes:
• To manage your enquiries: To respond to questions you submit via our website contact form or by email/phone.
• To manage your booking and stay: While the initial booking is handled by our partner, we process your data to prepare for your arrival, manage your stay at our 24 studios, handle check-in (from 14:00) and check-out (by 11:00), provide customer service, and process payments.
• To comply with legal obligations: We are legally required to register our guests with the relevant authorities in North Macedonia. We also need to collect and remit the city tourist tax for each guest. We must also retain financial records for tax and accounting purposes.
• To improve our website and services: We use aggregated and anonymised data from analytics cookies (with your consent) to understand how visitors use our website, helping us to improve its functionality and content.
• To ensure security: We use tools like Cloudflare Turnstile on our forms to protect our website from spam and abuse.
• To provide website features: We embed features like Google Maps to help you find us and Google Reviews to show feedback from past guests. These are optional and may involve data processing by Google if you interact with them.
Our Legal Bases for Processing
We only process your personal data when we have a valid legal basis to do so.
• Consent: We rely on your consent to process data submitted through our enquiry form, to place non-essential analytics and marketing cookies on your device, and when you choose to interact with embedded third-party services like Google Maps. You can withdraw your consent at any time.
• Performance of a Contract: When you make a booking, we process your personal data to fulfil our contractual obligations to provide you with accommodation and related services. This includes all processing from the point of booking confirmation through to your check-out.
• Legal Obligation: We process your identification data and details of your stay to comply with our legal obligations under North Macedonian law, including guest registration laws and tax regulations.
• Legitimate Interests: We process some data based on our legitimate interests, provided your rights and freedoms do not override these interests. This includes using security measures like spam filters to protect our website and analysing website traffic in an anonymised form to improve our business.
Who We Share Your Data With (Recipients and Processors)
We do not sell your personal data. We may share it with trusted third-party service providers who act as "data processors" on our behalf, or with other "data controllers".
• Clock PMS+: Our booking engine provider. They process the personal and payment data required to make a reservation. They are a data processor for this purpose.
• Google:
• Google Analytics: If you consent, data about your website usage is shared with Google to provide us with analytics reports.
• Google Maps: If you interact with the embedded map, Google processes data to provide the map service.
• Google Places API: We use this service to display reviews. No personal data from you is sent to Google for this purpose.
• Google Workspace: Used internally for staff email and collaboration, including employee sign-in to our systems. This is separate from guest data processing.
• Sanity: Our Content Management System (CMS) provider, which hosts the content of our website.
• Cloudflare: We use their Turnstile service to prevent spam on our forms. This service processes technical data to distinguish human users from bots.
• Government and Law Enforcement Agencies: We are required by law to share guest registration data with the relevant authorities in North Macedonia.
International Data Transfers
Some of our service providers are located outside of the European Economic Area (EEA) and North Macedonia, primarily in the United States. This includes Google, Cloudflare, and Sanity.
When we transfer your data to these countries, we ensure it is protected by implementing appropriate safeguards. We rely on mechanisms such as the European Commission's Standard Contractual Clauses (SCCs) and other supplementary measures to ensure that your data receives a level of protection equivalent to that provided within the EU and North Macedonia.
How Long We Keep Your Data (Retention)
We retain your personal data for no longer than is necessary for the purposes for which it was collected.
• Enquiry Data: Information submitted via our contact form is typically retained for 12 months after our last communication with you, unless you become a guest.
• Guest and Booking Data: If you stay with us, we retain your booking and check-in information for the period required by North Macedonian law for financial, tax, and guest registration purposes. This may be for several years after your stay.
• Cookie Data: The retention period for data collected via cookies depends on the type of cookie. Session cookies are deleted when you close your browser, while persistent cookies remain for a pre-defined period. You can manage and delete cookies via your browser settings.
Your Data Protection Rights
Under data protection law, you have various rights regarding your personal data.
• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data we hold about you.
• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data, where we have no overriding legal or contractual reason to retain it.
• Right to Restrict Processing: You can ask us to suspend the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to request that we transfer your personal data to you or another service provider in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to our processing of your personal data where we are relying on a legitimate interest.
• Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided in this notice.
How to Make a Complaint
We hope to be able to resolve any questions or concerns you have about our use of your information. Please contact us first at info@astera.mk.
If you are not satisfied with our response, you have the right to lodge a complaint with the national supervisory authority for data protection. In North Macedonia, this is:
• Agency for Personal Data Protection (AZLP)
• Address: bul. "Goce Delchev" br. 18, 1000 Skopje, North Macedonia
• Website: www.dzlp.mk
Contact Us
For any questions about this Privacy Notice or how we handle your data, please contact us:
• Astera Apart Hotel
• Prespanska 39, 1000 Skopje, North Macedonia
• Email: info@astera.mk
• Phone: +389 2 60 90 666
Updates to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page periodically for the latest information on our privacy practices. The "Last updated" date at the top of this page indicates when it was last revised.