Privacy policy

1. Data controller

The controller of personal data is Udruženje RK “NIKOLA TESLA” BANJA LUKA, Ul. Bitoljska bb, 78000 Banja Luka, Bosnia and Herzegovina.

JIB: 4402985500008 · MBS: F-1-214/08 · E-mail: info@rknikolatesla.rs.ba.

For privacy questions and to exercise your rights under this Policy, contact us at the e-mail above.

2. Scope

This Policy covers processing via the Club’s public website, including contact forms, training interest and application forms, and technical data needed to run the site (e.g. security session and cookies — see the Cookie policy).

It does not cover processing by third parties on their own platforms (e.g. social networks) when you follow our links.

3. Data we collect

Depending on the form and your activity, we may process:

• identity and contact data: name, e-mail address, message content / subject;
• training application or interest data (name, e-mail, time of submission);
• technical data needed for secure site operation (e.g. session identifier, CSRF protection);
• website-usage data via Google Analytics (e.g. pages visited, device type, general geography);
• technical data related to Google reCAPTCHA when forms are submitted (to protect against automated abuse).

4. Purposes of processing

We process personal data for the following purposes:

• answering enquiries and communicating with you;
• organising and administering amateur-radio training, including application confirmation and status updates;
• keeping a record of interest in the next training cycle;
• maintaining the security and proper functioning of the website, including form protection (reCAPTCHA);
• visit statistics and content improvement (Google Analytics);
• complying with legal obligations where applicable.

5. Legal bases

Processing is based, as applicable, on:

• your consent — when you submit a form and confirm acceptance of the terms and privacy policy;
• steps at your request prior to entering into an arrangement / participating in training (processing an application);
• the Club’s legitimate interest in running a secure site and answering enquiries, balanced against your rights;
• a legal obligation, where such an obligation exists.

You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal, by writing to info@rknikolatesla.rs.ba.

6. Recipients

We do not sell personal data. We may share data only when necessary:

• with technical service providers (hosting, e-mail delivery) that process data on our instructions with appropriate safeguards;
• with Google, for Google Analytics and Google reCAPTCHA, in line with their terms and this Policy;
• with competent authorities when required by law.

Site e-mail is sent via an SMTP delivery service (e.g. Brevo), solely for the purposes stated in this Policy.

7. Retention

We keep data only as long as needed for the purpose for which it was collected, or longer if required by law:

• contact messages — until the exchange is completed and for a reasonable archive period (typically up to 24 months, unless longer is needed);
• training applications / interest — during the relevant training cycle and a reasonable period thereafter for organisation and proof of communication;
• technical logs and sessions — briefly, according to operational and security needs.

8. Your rights

Under the ZZLP and other applicable rules, you may request:

• information on whether we process your data and to what extent;
• access to your data and correction of inaccurate data;
• erasure or restriction of processing, where legal conditions are met;
• objection to processing based on legitimate interest, where applicable;
• withdrawal of consent, where processing is based on consent;
• lodging a complaint with the competent personal-data protection authority in Bosnia and Herzegovina.

Send requests to info@rknikolatesla.rs.ba. We may ask for reasonable identification to prevent misuse. We respond within a reasonable time as required by law.

9. Security

We apply appropriate technical and organisational measures (e.g. HTTPS, protected administration, access control, secure session cookies) to reduce the risk of unauthorised access, loss or misuse.

No system is perfectly secure; if you become aware of an incident involving your data, please notify us without delay.

10. Children

The site is not intended for the deliberate collection of children’s data without parental or guardian consent. If you believe we have received a child’s data improperly, contact us for deletion.

11. Changes

We may update this Policy from time to time. The new version is published on this page with an update date. For material changes affecting form processing, we aim to make the information clearly available before continued use.