Policy
GDPR and Data Protection Policy
Our approach to personal data protection, aligned with GDPR principles.
Draft – this document has not yet been formally reviewed and adopted by the association's governing bodies.
01
Data collection
We collect personal data directly from you through forms, email or in person: identification and contact details, and information you provide in applications.
02
Legal basis for processing
Consent (forms, photographs), performance of membership obligations, legal obligations (records required by law) and legitimate interest (communicating with members and partners).
03
Processing purposes
- Responding to inquiries
- Managing membership and volunteers
- Organising events and activities
- Meeting legal and reporting obligations
04
Data minimization
We ask only for what we need. Optional fields are clearly marked.
05
Data retention
Inquiries are kept for up to 12 months; membership records for the duration of membership and as required by law afterwards; volunteer applications for up to 24 months unless you ask us to delete them sooner.
06
Data security
Access is limited to authorised officers; records are kept securely and shared only when required.
07
Your rights
- Right of access to your data
- Right to correction
- Right to deletion
- Right to restrict or object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with the competent data protection authority
08
Access, correction and deletion requests
Send your request to info@ksdrivers.org. We will respond within 30 days.
09
Privacy inquiries
Auto-moto klub "Lijevče" iz Nove Topole · info@ksdrivers.org · +387 63 280 431
10
Applicable law
This draft will be adapted to the law of the association's country of registration once that is confirmed against the registration certificate. The supplied contact details indicate Bosnia and Herzegovina.