Data controller
The controller of personal data is NK Hajduk 1932 Vela Luka. Contact details (address, phone, e-mail) are available on the Contact page.
What data we collect and why
- Contact forms and enquiries — name, e-mail address and the content of your message, solely to answer your enquiry (legitimate interest / consent).
- Club membership — full name, address, e-mail, phone and date of birth, to maintain the membership register and provide member benefits (performance of the membership agreement).
- Web-shop orders — name, e-mail, phone and address, to confirm and fulfil your order. No payments are processed through the website (cash or bank transfer); we never collect or store card details.
- Event registrations — name and contact details, for event organisation.
- Member-area sign-in — e-mail address (one-time sign-in link, no password).
Cookies and analytics
The site uses only essential cookies (session, language preference); the web-shop cart is stored locally in your browser. We use no marketing or advertising cookies.
Visit statistics are collected with our own installation of Umami, which works without cookies and does not track visitors across sites: the data is anonymous and aggregated, stored on the club's own server within the EU.
Technical logs and service providers
The site is served from servers within the European Union (Hetzner, Germany), protected and accelerated by Cloudflare. We use Sentry (EU region) to detect technical errors; error logs may include an IP address and technical browser details. Transactional e-mails (order confirmations, member sign-in links) are sent through an e-mail delivery processor. Data is shared with service providers only to the extent necessary to run the site.
How long we keep data
We keep data only as long as needed for the purpose it was collected for, or as long as legal obligations require (e.g. accounting regulations for orders, the membership register under the club statute). Enquiries are deleted once no longer needed.
Your rights
You may at any time request access to your data, its rectification or erasure, restriction of processing, data portability, and you may object to processing. Submit your request via the form on the Contact page. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, Zagreb, azop.hr.
Changes to this policy
We may update this privacy policy from time to time; the version published on this page is the one in force.
