This policy explains what personal data FK Železničar Niš (the “club”, “we”) collects through this website, why, on what legal basis, how long we keep it and what rights you have. It is written in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of RS, no. 87/2018).
1. Data controller
FK Železničar Niš
Niš, Srbija
Email: klub@fkzeleznicar.rs
Phone: +381 18 000 000
For any data protection question or to exercise your rights, write to the email address above.
2. What we process and why
Football school enrolment form
- Data: the child’s name and surname, year of birth, the parent’s/guardian’s name and surname, phone number, email (optional), preferred age group (optional) and a note (optional).
- Purpose: to contact you about enrolment and a trial training.
- Legal basis: the consent of the parent/guardian, given by ticking the box before sending, and steps taken at your request before entering a membership/training agreement.
- Retention: until the enrolment is completed or declined; if the child is not enrolled we delete the application within 12 months of receipt at the latest. For enrolled children, data is kept in the club’s records under a separate agreement and applicable law.
- If you enter an email address, we send a confirmation of receipt.
Contact form
- Data: name, email, phone (optional), subject (optional) and your message.
- Purpose: to answer your question.
- Legal basis: the club’s legitimate interest and your interest in receiving a reply.
- Retention: up to 12 months after the last correspondence.
Supporting the club (donations)
The website does not accept payments and does not collect card data. It only shows the club’s bank details; you pay through your own bank. We process data about payments received on the club’s account to the extent and for the periods required by law (accounting and tax rules).
Technical data
When you visit, the server automatically records your IP address, request time, requested address and browser type. These logs are used to run and secure the website (protection from abuse and overload), are processed on the basis of legitimate interest and kept for 30 days at most. We use no analytics or advertising tools.
3. Children
The enrolment form is filled in by a parent or guardian, not by the child. Persons under 15 cannot give consent on their own for information society services, so we do not collect data from them directly. We do not ask for photographs, personal ID numbers or health data through the website. Photos and videos of children are published only with the consent of a parent/guardian.
4. Cookies
The website uses only strictly necessary cookies (session and form protection), which expire when you close the browser or the session ends; no consent is needed for them. We do not use cookies for analytics, tracking or advertising.
5. Third-party services
- Google Fonts: fonts are loaded from Google servers, so Google receives your IP address.
- YouTube and Vimeo: videos and live streams are embedded from these services (YouTube in “youtube-nocookie” mode). These providers may collect device and IP data when you play or open a video; their own privacy policies apply.
- Social networks: links to the club’s profiles lead to third-party sites with their own rules.
- Hosting and email: we use hosting and email providers that process data only on our behalf.
Some of these providers have servers outside Serbia (e.g. in the USA or the EU). Transfers are made with the safeguards required by law. We do not sell data or share it for marketing.
6. Who has access
Applications and messages are seen only by authorised club staff and coaches who need them for their work, through the protected admin area of the website.
7. Your rights
You have the right to request information about processing, access to and a copy of your data, rectification, erasure, restriction of processing, data portability, to object to processing and to withdraw consent at any time (withdrawal does not affect processing before it). Send your request by email; we reply within 30 days, which may be extended as the law allows.
If you believe your data is processed contrary to the law, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs).
8. Security
We use an encrypted connection (HTTPS), admin access protected by accounts and limited by role, and protection of forms against automated abuse.
9. Changes
We may change this policy. The current version is always this page, with the date of the last update.