Privacy policy

1. Data controller

Controller: Kendo Klub Rijeka, registered office: Zagrebačka 7, 51000 Rijeka, Croatia, OIB: 83733322513.

For privacy questions or to exercise your rights, contact us at info@rijekakendo.com or +385 98 982 6557.

2. Data we process

Website visits: our hosting partners may automatically log technical data (e.g. IP address, browser type, date and time of access) for security and service stability.

Direct contact: if you email or call us, we process the information you provide (e.g. name, email, message content).

Membership application: through the internal form at /pristupnica (Google Forms) we collect data needed to process membership, maintain member records, and meet association obligations (e.g. identity and contact details and other fields defined in the form).

Public information: we display club contact details and documents as required for our association.

3. Purpose and legal basis

We use hosting logs to operate the site securely, prevent abuse, and handle incidents (legitimate interest under GDPR Art. 6(1)(f)).

We use inquiry data to respond and organise training or cooperation (pre-contractual steps or legitimate interest; we would ask for separate consent for marketing).

We use membership form data to handle applications, establish and manage membership, and meet statutory and by-law obligations (performance of the membership agreement or steps prior to entering it, GDPR Art. 6(1)(b), and where applicable legal obligation, Art. 6(1)(c)).

4. Cookies

We do not use cookies for tracking, profiling, or third-party advertising, nor similar browser storage (e.g. localStorage) for marketing.

The embedded membership form (Google Forms) may set cookies and similar technologies controlled by Google LLC to operate the form, provide security, and prevent abuse. See Google’s privacy policy for details.

External links (Instagram, Facebook, YouTube, Google Maps) lead to third-party services that may set their own cookies when you visit them.

5. Recipients and transfers

The site is hosted via Vercel Inc. (US/EU infrastructure). Hosting may involve processing of technical logs; appropriate safeguards and standard contractual clauses apply.

Membership forms are hosted by Google LLC (Google Forms, US/EU). Google acts as a processor on our behalf for collecting responses; we process and retain responses in club records under this policy.

We do not sell data or share it for marketing. We disclose data only when required by law or necessary to provide the service (e.g. hosting, membership form processing).

6. Retention

Technical logs are kept for the period defined by our hosting provider, typically up to a few months, unless longer retention is required for security or legal obligations.

Email communication is kept as long as needed to respond and document our relationship with members or interested persons, then deleted or anonymised when no longer necessary.

Membership form and member record data are kept for the duration of membership and afterwards for periods required by our statute, law, and accounting rules, then deleted or anonymised when no longer necessary.

7. Your rights

You have the right of access, rectification, erasure, restriction, objection, and data portability within the limits set by the GDPR. Requests relating to the membership form or membership may be sent to the controller contact in section 1.

You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Martićeva 14, 10000 Zagreb, www.azop.hr.

8. Changes

We may update this policy from time to time. The current version will be published on this page with the update date.