Draft. Before publication the club fills in the controller details and approves the text.
This policy explains what personal data the Rotary Club Niš website collects, why it collects it and what rights you have. It follows the Personal Data Protection Act of the Republic of Serbia and the principles of the EU General Data Protection Regulation (GDPR), since the site is also available to visitors outside Serbia.
Who the controller is
The data controller is Rotary Club Niš, [club address], Niš, Serbia. For any question about personal data write to [email protected].
What data we collect
Contact form. When you send us a message, you enter your first name, last name, email address, subject and the message itself. You provide this data yourself and we use it only to reply to you. The form has protection against automated submissions (a hidden field and, where needed, a Cloudflare Turnstile check) that does not collect data about you.
Analytics. We use Cloudflare Web Analytics to see how many visitors the site has and which pages are read most. This service uses no cookies, builds no visitor profile and does not track individuals on our site or any other. We receive aggregate numbers only.
Server logs. The site is hosted by Cloudflare. Like any host, Cloudflare briefly records technical data about each request (IP address, browser type, time of access) for security and abuse detection. We do not use these logs to identify visitors.
Map on the contact page. The map is embedded from OpenStreetMap (OpenStreetMap Foundation). When you open the contact page, your browser loads the map from their server, which sees your IP address in the process. The map sets no tracking cookies.
The site has no accounts, login or newsletter, so it collects no other data about visitors.
Purpose and legal basis
We process contact form data to answer your enquiry, membership question or proposal for cooperation. The legal basis is your consent, given by sending the message, and our legitimate interest in communicating with people who contact us.
We process analytics and server logs on the basis of our legitimate interest in running the site securely and knowing how it is used.
How long we keep data
Messages from the contact form are kept in the club’s mailbox while the correspondence lasts and for at most one year after the last message. If the correspondence leads to membership or cooperation, we keep the data for as long as that lasts.
Analytics contains no data about individuals, so there is nothing to delete. Cloudflare keeps server logs briefly, under its own rules.
Who we share data with
We do not sell data and do not share it for advertising. It is processed only by the services that technically run the site:
- Web3Forms forwards the contact form message to the club’s email address.
- Cloudflare hosts the site, forwards mail from the club’s address to the club’s mailbox (Email Routing) and provides analytics and form protection.
- GitHub stores the site’s code and published content (texts and photographs). GitHub holds no data about visitors.
These services are based outside Serbia. Transfers abroad are covered by their standard contractual clauses on data protection, and their own privacy policies apply to processing on their side.
Your rights
You have the right to:
- request access to the data we hold about you and a copy of it;
- request correction of inaccurate data or completion of incomplete data;
- request deletion of your data;
- request restriction of processing or object to processing;
- withdraw consent at any time, which does not affect processing carried out before withdrawal.
Send your request to [email protected]. We reply within 30 days at the latest. If you believe we process your data unlawfully, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (Bulevar kralja Aleksandra 15, Belgrade, poverenik.rs). Visitors from the EU may also contact their national supervisory authority.
Cookies
The site sets no cookies for tracking, advertising or analytics, so there is no consent banner. If we embed content from other services on a page (for example a video or a map), that service may set its own cookies, to which its privacy policy applies.
Photographs and names of members
The site publishes the names, roles and photographs of members of Rotary Club Niš and Rotaract Club Niš, as well as photographs from projects and events. Members have given their consent to publication. If you appear in a photograph and want it removed, or if as a member you withdraw your consent, write to [email protected] and we will remove the content within a reasonable time.
Changes to this policy
We change this policy when the way the site works or the regulations change. The current version is always on this page, with the date of the last change at the top.