Privacy
Privacy Policy
Last updated: 2 October 2026
We collect only the details we need to answer your questions, manage your stay and meet our legal obligations. This policy explains what we collect, why, how long we keep it and what your rights are, in line with the Law on Personal Data Protection of North Macedonia and the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The controller of your personal data is ДРУШТВО ЗА ПРОИЗВОДСТВО, ПРОМЕТ И УСЛУГИ АБ ИНТЕРНЕШАНЕЛ ГРУП УВОЗ-ИЗВОЗ ДООЕЛ СКОПЈЕ (AB International Group DOOEL Skopje), Boulevard Jane Sandanski 71-a/2/81, Skopje – Aerodrom, North Macedonia, company registration number (ЕМБС) 7347170, tax number (ЕДБ) 4032019541731, operating Capitol Suites & Apartments, Boulevard Jane Sandanski 71A, Skopje, North Macedonia.
For any privacy question or request, write to our data protection contact at [email protected], or call +389 70 40 40 00.
2. What we collect
- Booking request: name and surname, email, phone number, dates, number of apartments and guests (adults and children by age group), special requests, and your acceptance of the Terms.
- Contact form: name, email, phone number (optional) and your message.
- Online check-in: name and surname, nationality, email, phone number, date and estimated time of arrival, whether you need parking, number of guests, for each guest the name and surname, nationality, type and number of the identity document and date of birth, a photo or PDF of the passport or ID card of each guest, special requests, and your consent.
- Bookings made on Booking.com: the details Booking.com shares with us for your reservation (name, phone number, dates, number of guests, price and remarks).
- When you write to us by email, phone, WhatsApp or Viber: your contact details and what you tell us.
- Technical data: your IP address and browser details, used briefly to protect the forms against abuse and kept in server logs for security.
- Video surveillance: CCTV records the outside of the building and the common areas for the safety of guests and property. There are no cameras inside the apartments.
3. Why we use it
- To handle your booking request, confirm or decline it, and provide your stay (performance of a contract).
- To register guests with the authorities and keep accounting records, as the law requires (legal obligation).
- To reply to your messages, plan your arrival and parking, and keep the website and building safe (legitimate interest).
- To receive your identity documents online before arrival (your consent, which you give in the online check-in form; you can instead show the documents on arrival).
We do not sell your data and we do not use it for automated decisions or profiling. We send you emails only about your booking or your question.
4. Identity documents
Documents uploaded in the online check-in (one per guest, up to four) are sent directly to our check-in mailbox. The website does not store the files and does not include them in logs or analytics.
Only the reception staff can open that mailbox. We use the documents only to register your stay and delete them from the mailbox 30 days after your departure, unless the law requires us to keep a record for longer. The document number and date of birth that you enter in the online check-in are saved, encrypted, in our reservation system with your booking and are used only for check-in and the legal registration of guests.
6. How long we keep it
- Booking details: 5 years, for accounting and guest registration.
- Identity documents: deleted from the check-in mailbox 30 days after departure.
- Messages from the contact form: 12 months after our last reply.
- Booking requests that were declined or cancelled: 6 months.
- CCTV recordings: 30 days, unless needed to investigate an incident.
8. Security
The website uses an encrypted connection (HTTPS). Booking data is kept on our own server, protected by access control, and our mailboxes are protected by passwords known only to authorised staff. No method is completely secure, but we review our measures regularly.
9. Your rights
You can ask us to:
- tell you which data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, when we no longer need it or the law does not require us to keep it;
- restrict or object to how we use it;
- give you your data in a commonly used format (portability);
- withdraw your consent at any time, without affecting what was done before.
Send your request to [email protected]. We reply within one month. You also have the right to complain to the Personal Data Protection Agency of North Macedonia (azlp.mk).
10. Changes to this policy
We update this policy when our website or services change. The date at the top shows the latest version. See also our Terms & Conditions.