1. Data Controller

The data controller is MNK Brod 35 , with registered address at Bartola Kašića 30, 35000 Slavonski Brod . For any questions regarding data protection, you can contact us via email: icorlukasb@gmail.com.

2. Legal Basis for Processing

We process personal data in accordance with the General Data Protection Regulation (GDPR). The legal bases for processing include:

• Consent of the data subject (Art. 6(1)(a) GDPR)
• Performance of a contract (Art. 6(1)(b) GDPR)
• Legal obligation (Art. 6(1)(c) GDPR)
• Legitimate interests of the controller (Art. 6(1)(f) GDPR)

3. What Personal Data We Collect

We may collect the following categories of personal data:

• Identification data: Name, surname, date of birth
• Contact data: Email address, phone number, address
• Membership data: Membership status, player registration data
• Technical data: IP address, browser data, cookies
• Photos and videos: From matches and events

4. Purposes of Data Processing

We use your personal data for the following purposes:

• Administration of club membership
• Player registration with the Football Association
• Communication with members and visitors
• Sending notifications about matches and events
• Processing inquiries via contact form
• Improving user experience on the website
• Fulfilling legal obligations

5. Data Retention

We only keep personal data for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Membership data is retained for the duration of membership and an additional 5 years after the end of membership. Player data is retained in accordance with Football Association regulations.

6. Sharing Data with Third Parties

We may share your personal data with the following recipients:

• Football Association - for player registration
• Regional Football Association - for competition purposes
• Hosting providers - for technical support of the website
• Competent authorities - when required by law

We will not sell, rent or otherwise share your personal data with third parties for marketing purposes without your express consent.

7. Your Rights

Under GDPR, you have the following rights:

• Right of access - the right to request a copy of your personal data
• Right to rectification - the right to request correction of inaccurate data
• Right to erasure - the right to request deletion of data ("right to be forgotten")
• Right to restriction of processing - the right to request restriction of processing
• Right to data portability - the right to receive data in a structured format
• Right to object - the right to object to the processing of data
• Right to withdraw consent - at any time, without affecting the lawfulness of processing before withdrawal

To exercise your rights, you can contact us via email: icorlukasb@gmail.com.

8. Cookies

This website uses cookies to improve user experience. Cookies are small text files stored on your device. We use the following types of cookies:

• Essential cookies - necessary for the functioning of the website
• Analytics cookies - help us understand how you use the website
• Functional cookies - remember your settings and preferences

You can manage cookie settings through your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction or disclosure. This includes data encryption, secure servers and regular security audits.

10. Right to Lodge a Complaint

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the supervisory authority. The competent supervisory authority is:

Personal Data Protection Agency (AZOP)
Selska cesta 136, 10000 Zagreb
Web: www.azop.hr
Email: azop@azop.hr

11. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. All changes will be published on this page with an updated date. We recommend regularly reviewing this page.