Effective from 27 October 2026
This policy explains which personal data the website of Društvo Neodvisnih Airsofterjev processes, why, on what legal basis, how long we keep it and what your rights are. Processing follows the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).
Društvo Neodvisnih Airsofterjev (DNA)
Verovškova 42, 1000 Ljubljana, Slovenia
Registration no.: 4131410000 · Tax no.: 22053310
For any question about personal data or to exercise your rights, write to us through the contact form or by post to the address above. The club has not appointed a data protection officer, as it is not required to.
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | name, email, message | replying to your message | the club's legitimate interest in answering enquiries (Art. 6(1)(f) GDPR); for questions about joining or taking part, also steps before entering an agreement (6(1)(b)) | as long as needed to handle it, at most 12 months |
| Event sign-up | name, email, callsign (optional), chosen event | organising the event, informing participants of changes | performing the participation agreement (6(1)(b) GDPR) | up to 3 months after the event |
| Membership form | full name, date of birth, address, postcode, phone, email, signature | keeping the register of members required by the club's statute and the Societies Act | membership (6(1)(b) GDPR) and the legal duty to keep a register of members (6(1)(c)) | during membership and at most 1 year after it ends, unless the law requires longer |
| Membership fee | payer's name, amount, date, purpose | recording payments and bookkeeping | membership (6(1)(b)) and accounting rules (6(1)(c)) | as required by accounting rules |
| Visiting the site | IP address, time of visit, page requested, browser details (host's technical logs) | operating, securing and protecting the site against abuse | legitimate interest (6(1)(f) GDPR) | as set by the host (Cloudflare), usually a short time |
| Gallery photos | photos from events in which people may be recognisable | presenting the club's activities | the club's legitimate interest (6(1)(f) GDPR) or consent where required | while published; we remove a photo on request |
Filling in the membership form online: when you fill in the form on the Membership page, the PDF is created in your browser. Nothing is sent anywhere; the club only receives your data when you hand in the signed form.
Form fields: we only collect what we need. The callsign in event sign-ups is optional.
We do not sell data or pass it to unauthorised parties. Only board members who need it for the club's work have access.
Some providers (for example Cloudflare and Google) are based in the USA or also process data outside the European Union. Transfers rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
For anyone under 18, the membership form is signed by a parent or guardian. Children under 15 should not fill in the forms on this site themselves.
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Send your request through the contact form or by post; we reply within one month.
If you believe we process data unlawfully, you can complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 166, 1000 Ljubljana, www.ip-rs.si.
The site runs over an encrypted connection (HTTPS). Editing content is only possible for authorised members through a protected login. Fonts and scripts are stored on our own site, so visiting it does not send data to other providers.
What the site stores in your browser is described on the Cookies page.
We update this policy when the way the site works changes. The current version is always published on this page. The Slovenian version is authoritative.