Privacy Policy

1. Data controller and contact details

The controller of personal data processed through this website is Dramićanin Academy, Radoja Domanovića 5A, Kragujevac, Serbia. For privacy questions or to exercise your rights, contact support@dramicaninacademy.com or +381 69 374 56 57.

This policy covers use of the website and enquiries submitted through its forms. Any subsequent processing connected with arranging or providing training may also be covered by an additional notice where necessary.

2. Information we collect

We receive information directly from you when you complete the contact or free consultation form and, to a limited extent, automatically when you use the website.

• Contact details: full name, email address and telephone number. A telephone number is required for consultation requests and optional on the general contact form.
• Enquiry details: the programme you are interested in, fitness level for consultation requests, and the message you enter.
• Form security data: form start time, technical anti-spam signals and, when enabled, a Cloudflare Turnstile token and the IP address needed to verify the request.
• Technical data the infrastructure may record: IP address, device and browser type, request time, requested URL and website diagnostic data.
• Google Analytics 4 usage information, but only after you accept analytics cookies.
• Information needed to display the embedded Google map on the contact page: Google may receive the IP address, device and browser details, request time, page URL and other technical signals when the map loads.
• Local preferences: your selected language and analytics-cookie choice are stored in your browser.

3. Purposes and legal grounds

We process data only for a defined purpose and on an appropriate legal ground under the Serbian Law on Personal Data Protection.

You may withdraw consent at any time. Withdrawal does not affect processing lawfully carried out before it was withdrawn.

• Responding to enquiries, arranging a free consultation and taking steps at your request before a possible service agreement — based on your request and the consent confirmed in the form.
• Protecting the website and preventing spam, misuse and technical attacks — based on our legitimate interest in maintaining a secure and reliable service.
• Measuring visits and improving content through Google Analytics 4 — only on the basis of your prior consent.
• Displaying the Academy’s exact location through an embedded Google map — based on our legitimate interest in helping visitors find the premises. The map loads separately from Google Analytics consent.
• Meeting legal obligations and establishing, exercising or defending legal claims — where required or necessary.

4. Contact and consultation forms

Required fields are identified in each form. Without your name, a valid email address and the information required by the relevant form, we cannot process and answer the request. Please do not enter medical records, diagnoses, treatments or other sensitive information in free-text fields. If such information later becomes genuinely necessary to plan training safely, we will request it separately and explain how it will be processed.

Completed forms are delivered to our team using the Resend email service. Resend processes contact details, message content and technical delivery information on our behalf.

5. Hosting, security and abuse prevention

The website and the server function that receives forms use Vercel infrastructure. Vercel may process technical logs including IP address, device and browser information, request time, approximate location derived from the IP address and diagnostic data to deliver, secure and maintain the service.

When Cloudflare Turnstile is enabled, it is used to distinguish legitimate requests from automated abuse. For this purpose Cloudflare may process limited technical signals such as IP address, User-Agent, connection characteristics, request origin and the verification result. Turnstile is not used for advertising.

6. Analytics and cookies

We use Google Analytics 4 to understand which pages are visited and how the website can be improved. The analytics script does not load until you select “Accept analytics”. Advertising features, Google Signals and ad personalisation are disabled, and IP anonymisation is enabled.

If you accept analytics, Google Analytics may set “_ga” and “_ga_<ID>” cookies to distinguish visits and maintain session state. Their default lifetime may be up to two years. Your choice is stored locally in the browser until you change it or clear browser data.

You can change your choice at any time through “Cookie settings” in the website footer. After rejection, we no longer send new analytics events and attempt to remove accessible Google Analytics cookies for this domain.

7. Who receives information

We do not sell or rent personal data and do not disclose it for another party’s direct advertising. Access is limited to Dramićanin Academy team members who need it to answer an enquiry and carefully selected providers that process data on our behalf or supply their own technical services.

• Resend — sending and delivering form messages.
• Vercel — website hosting, server functions, security and technical logs.
• Cloudflare — Turnstile form protection, when enabled.
• Google — website analytics only after consent and the embedded map on the contact page.
• Competent authorities or professional advisers, only where legally required or necessary to protect legal rights.

8. International transfers

Some technical providers operate globally and may process data outside Serbia, including in the United States and the European Economic Area. We limit transfers to information required for the relevant service and rely on the applicable contractual, organisational and technical safeguards made available by the provider, including standard contractual clauses where applicable.

9. Retention periods

We keep contact and consultation enquiries while resolving the request and for no longer than 24 months after the last meaningful communication, unless a shorter period is sufficient or a longer period is required by law, a service relationship or the protection of legal claims. If an enquiry results in services being provided, relevant information may be kept for the periods applicable to that relationship and legally required records.

User-level analytics events are kept for no longer than 14 months, while analytics cookies may remain for up to two years unless you reject or delete them earlier. Cookie choice and language preference remain in browser local storage until you change or delete them. Technical and security logs are retained only as long as needed to detect abuse, resolve incidents and operate the service reliably, in line with the relevant infrastructure provider’s retention schedule.

10. Your rights

Subject to applicable law, you may request access, correction, deletion or restriction of your personal data; object to processing based on legitimate interests; and request data portability where the legal conditions are met. Where processing is based on consent, you may withdraw it at any time.

Send requests to support@dramicaninacademy.com. To protect your information, we may ask for reasonable proof of identity. We will respond without undue delay and no later than 30 days, unless the law permits an extension due to the complexity or number of requests.

If you believe your rights have been infringed, you may lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection. You are welcome to contact us first so we can try to resolve the matter directly.

11. Children’s information

Programmes may be suitable for young athletes, but the website is not intended for children under 15 to submit information independently. If you are under 15, a parent or legal guardian should complete or approve the form. If we learn that the website has received a child’s information without the required approval, we will delete it as soon as reasonably possible. A parent or guardian may contact us to request access, correction or deletion.

12. Data security

We use reasonable technical and organisational measures appropriate to the data and risk, including encrypted transmission, input validation and limits, anti-spam protection and restricted access to received enquiries. No transmission or storage system is completely secure, so security cannot be guaranteed in every circumstance.

13. Automated decisions, marketing and external links

We do not use data collected through this website to make decisions producing legal effects solely by automated means, and we do not create marketing profiles. We do not use form details to send promotional messages without a separate appropriate legal basis.

The website contains direct links to services such as Instagram, Facebook, WhatsApp and Google Maps; those services receive information when you open their link. The contact page also contains an embedded Google map that loads when you scroll near it. Google may then receive technical information and act under its own privacy policy, which we do not control.

14. Changes to this policy

We may update this policy to reflect changes to website features, service providers or law. The current version is always published on this page with its last-updated date. We will provide an appropriate and prominent notice of important changes that materially affect your rights.