Politika privatnosti

Controller. Beogradski Padel Klub, Žorža Klemansoa 41, Belgrade, Serbia.
Contact (privacy): [email protected], +381 64 0019999
DPO: Not appointed.
Domains covered: beogradskipadelklub.com
Last updated: 15 Nov 2025

What this Policy covers

This Policy explains how we collect, use, disclose and protect personal data when you visit our website and use its features (contact form, embedded maps/videos/social). App policies are published separately.

Data we process

a) Data you provide

• Contact form: name, email, optional phone number, and your message.

b) Data collected automatically

• Server/access logs (via our host, Hostinger – Germany/EEA): IP address, date/time, URLs, user-agent, referrer and error codes (for security and troubleshooting).

• Analytics (optional/consent-based):

  • Google Analytics 4 (GA4) – page views, events, device/approx. location (city), language, in a way that does not reveal your identity to us. We keep Google Signals/Ads features off.

  • Microsoft Clarity – session analytics & heatmaps with text/input masking enabled so free-text you type is not recorded.

• Embeds (loaded only after consent): Google Maps, YouTube, Instagram may set cookies or receive your IP to display content.

We do not collect special category data and do not run third-party advertising on the site.

Purposes and legal bases

• Answering your inquiry (contact form): legitimate interests to respond to requests and manage customer relations.

• Security, diagnostics, anti-abuse (server logs): legitimate interests.

• Analytics & session insights (GA4, Clarity): consent. These tools are blocked until you accept non-essential cookies.

• Legal compliance: where we must keep records or respond to lawful requests.

Cookies & consent

We use a banner with Accept / Reject (and a link to manage choices). Until you Accept, we do not load GA4, Clarity, Maps, YouTube or Instagram embeds. You can change your choice anytime via “Cookie settings” in the footer.

Sharing and recipients

We share data only with service providers as needed:

• Hosting: Hostinger (Germany/EEA).

• Analytics: Google (GA4), Microsoft (Clarity).

• Content embeds: Google (YouTube/Maps) and Meta (Instagram).
  We do not sell personal data or share it with other third parties for their marketing.

International transfers

Although we host in Germany, providers like Google, Microsoft and Meta operate globally. Where data is transferred outside the EEA/Serbia, we rely on Standard Contractual Clauses (SCCs) and provider safeguards (e.g., GA4 truncates IPs in the EEA and does not store full IPs). You can contact us for copies of relevant transfer safeguards.

Retention

• Contact form: kept 12 months, then deleted or anonymized.

• Server/access logs: kept 60 days.

• Clarity recordings: kept 30 days.

• GA4 reporting data: 14 months (configured in GA).
  We may keep data longer if required by law or to establish/defend legal claims.

Your rights

You have the right to access, rectify, erase, restrict, object, and (where applicable) data portability, and to withdraw consent at any time (this does not affect prior processing).
How: email [email protected] from the address you used, describe your request, and we’ll respond without undue delay.

Children

The website is not directed to children. If you believe a child sent us personal data, contact us and we will delete it.

Security

We use HTTPS, access controls (least-privilege), timely updates/patching, and input masking in Clarity. No system is 100% secure; we monitor and improve protections continually.

Complaints

You can contact us first. You also have the right to complain to the Serbian Supervisory Authority (Commissioner for Information of Public Importance and Personal Data Protection — “Poverenik”).

Changes

We may update this Policy from time to time. Significant changes will be announced via the banner or on this page. The “Last updated” date shows the current version.