ОПНЗПС

Privacy policy

This policy applies to opnzps.com and sign.opnzps.com. The controller is the Association of Friends and Supporters of JSD Partizan “NOTHING FROM PARTIZAN, EVERYTHING FOR PARTIZAN”, Jedrenska 1, Zvezdara, 11050 Belgrade, Serbia, registration number 28749449, tax ID 114199727. office@opnzps.com

What we process and why

  • Applications and membership. We process name, contact details, date and place of birth, the personal identification number (JMBG) or other identity document number and its issuer if entered, eligibility declarations, referral information, funding choice and optional participation details. We use these details to assess eligibility at your request and administer membership. Referral details come from the applicant. The public list of accepted members displays a name, nickname or initials according to the choice made in the application. You can choose anonymous display and request a change later.
  • Payments and agreements. We process payment information and, for agreements with legal entities, the business information entered, the representative’s name and role, contact details and business email address for delivering the agreement and corresponding with the legal entity. We use these to prepare and perform agreements, record payments and meet accounting obligations. The applicant provides the representative’s and contact person’s details.
  • Messages and proposals. We use your name, contact details, message and proposal information to reply and assess proposals. Our legitimate interest is managing correspondence and reviewing submissions.
  • Site security. We use session information, technical logs and hashed request identifiers to protect forms, limit abuse and diagnose errors. Our legitimate interest is keeping the sites secure.

Fields marked as required are necessary to handle the relevant request. Without them we cannot process the application, prepare the agreement or answer a request that requires them.

For designated corporate donations requested on the campaign page, the information used to prepare the agreement is contained in an encrypted link sent to the business email address. The link is valid for 48 hours. We retain the signed agreement you send to the Association with the donation records.

Recipients and external services

Authorised Association staff can access the data. Hosting and email providers receive access as needed to provide their services. Banks or PayPal handle payment data depending on the payment method. Authorised accounting service providers may also access records needed for accounting. Data is disclosed to competent authorities when required by law. Google and PayPal may process data outside Serbia as described in their notices. You can contact us for information about safeguards for transfers made by the Association.

Cookies and external content

Essential session cookies support forms and protect the session. The main site stores your analytics choice in the browser so that it can apply it on later visits. You can change the choice in the site footer.

Google Analytics measures visits and use of the site. Google Tag Manager loads tags and activates only after you allow analytics. Analytics can use cookies and collect visit, device and interaction data. You can withdraw consent in Privacy settings.

The main site loads Google Fonts to display typefaces. On the membership fees page, PayPal may load its subscription component. When you use PayPal or follow a social media link, those services describe their processing in their own notices.

Google Privacy Policy · PayPal Privacy Statement

Retention

We retain applications as long as needed to decide on them. Membership records are retained during membership and afterwards as needed to meet legal obligations and handle claims. Payment records and agreements are retained in accordance with applicable accounting and tax requirements. Correspondence is retained as needed to handle the request and resolve any dispute. Technical logs are retained as needed to detect and prevent misuse.

The application system has a weekly maintenance task that removes applications still awaiting email confirmation after seven days. The same task removes database backups older than eight weeks.

Your rights

The Association decides on membership requests. Form checks and email verification support the application process.

Under Serbia’s Personal Data Protection Act, you may request access, rectification, erasure, restriction or portability and object to processing where applicable. Where processing is based on consent, you may withdraw it. Send requests to office@opnzps.com. You may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.