Notice on the Processing of Candidates' Personal Data
1. Data Controller
- For The Bristol Bol hotel, the data controller is:
Bristol d.o.o.
Radnička cesta 43, Zagreb
OIB: 53064018167
Data Protection Officer: dpo.hr@the-bristol.com - For The Bristol Belgrade hotel, the data controller is:
Belgrade Waterfront LLC,
Karađorđeva 48, 11000, Belgrade
VAT number: 108608107
Data Protection Officer: privacy@belgradewaterfront.com
2. What Data We Process
We process the data you provide in your application and CV, such as identification and contact details, information on education, qualifications, work experience and skills, social media hyperlinks, and other data you voluntarily provide to us.
When using the platform, technical data may also be processed, such as IP addresses, browser and device information, and platform usage data.
Please do not provide us with data that is not relevant to employment.
3. Purposes and Legal Basis for Processing
We process your personal data for the purpose of:
- receiving and evaluating your application, communicating with you, conducting interviews and testing, and potentially entering into an employment contract, based on taking steps at your request prior to entering into a contract;
- complying with legal obligations applicable to us;
- protecting information systems and establishing, exercising, or defending legal claims, based on our legitimate interest.
4. Retention Period
We retain data related to the application until the completion of the selection process and for a maximum of three months thereafter, unless longer retention is required to fulfill legal obligations or protect legal claims.
We may retain your data for the purpose of potentially contacting you regarding future similar job openings only with your separate consent. You can provide your consent by ticking a separate box on the application form. Consent is voluntary, and not providing it does not affect your current application. You can withdraw it at any time via the Candidate Portal or by sending an email to dpo.hr@the-bristol.com (The Bristol Bol), or privacy@belgradewaterfront.com (The Bristol Belgrade).
If you have given your consent for future job openings, we will retain the data for a maximum of 12 months from the date the consent was provided or until its earlier withdrawal.
5. Data Recipients
To manage applications, we use the TalentLyft platform, provided by AdoptoTech d.o.o., which processes personal data as our data processor.
We may provide the data to competent authorities when we are required to do so based on legal obligations.
6. Obligation to Provide Data
Data marked as mandatory is required for receiving and considering your application. If you do not provide it, we may not be able to consider your application or continue with the selection process. Other data is provided voluntarily.
7. Your Rights
In accordance with applicable personal data protection regulations, under the prescribed conditions, you have the right to:
- access your personal data;
- rectification or erasure of data;
- restriction of processing;
- data portability, where applicable;
- object to processing based on legitimate interest;
- withdraw consent, where the processing is based on consent.
After applying, you will be granted access to the Portal, where you can inspect your personal data, and request its export or erasure. The link to the Portal will be included in the confirmation email after applying for the job vacancy.
You can submit a request to exercise your rights via the Candidate Portal or by email at: dpo.hr@the-bristol.com (Bristol Bol), or privacy@belgradewaterfront.com (Bristol Belgrade).
If you believe that your data is being processed contrary to the regulations, you have the right to lodge a complaint with the competent supervisory authority for personal data protection.
Last notice update: August 20, 2026
