This policy explains what data the website and Android application of PD Beljanica collect, why we collect it, how long we keep it and how you can have it deleted.

1. Who controls the data

Data is controlled by PD Beljanica. For any question regarding your data, write to maki3012@hotmail.com.

2. What data we collect

Data you enter yourself

• Required: username and password.
• Optional, as required by the club: full name, e-mail address, phone number, date of birth, gender, blood type and mountaineering card number. Which of these are mandatory is decided by the club itself.
• Content you publish: photographs, comments, reviews and sign-ups for outings.

Data created through use

• Device identifier and name, Android version and application version — used to bind one account to one device and to notify you when an update is required.
• IP address and time of sign-in attempts, both successful and failed — to protect your account from unauthorised access.
• A record of server requests (endpoint and time), your activity in the system, views of news, events, galleries and home page sections, likes of news and galleries, and time spent on the website.
• When you visit the website without signing in, we record your IP address and the pages you visit (visit statistics). To count content views we store only an unreadable fingerprint of your IP address and browser, not the address itself.
• Records of membership fees and outing payments, if the club manages them through the system.

Passwords

Your password is stored only in encrypted form (bcrypt) and cannot be read — not even by club administrators. On a failed sign-in we do not record the password you typed, only a short unreadable fingerprint used to detect repeated guessing attempts.

3. Permissions the application requests

• Camera — solely to read the QR code that connects the application to your club's server. Camera images are neither stored nor transmitted.
• Photo selection — only when you add a picture yourself. The application uses the system photo picker, so it has no access to the rest of your gallery; it sees only the image you choose.
• Internet — to communicate with the club's server.

4. What we do NOT collect

• Device location.
• Contacts, messages, or the list of installed applications.
• Advertising identifiers. The application contains no advertising and does not track you for advertising purposes.

5. Why we process data

Solely to manage membership, organise mountaineering outings and sign-ups, inform members and secure accounts. We do not use the data for advertising and do not sell it.

6. Who the data is shared with

No one outside the club. Data is stored on the server hosting the club's website. Some data is visible to other members within the application — for example, names on the list of participants for an outing, and participants' contact details needed by the outing organiser. Club administrators have access to membership data. We disclose data to third parties only where required by law.

7. How long data is kept

• Account data — for as long as you are a member and until you request deletion.
• Sign-in and server request records — for a limited period, for security purposes.
• Content you published (photographs, comments) — until you or an administrator delete it.

8. Your rights

You have the right to:

• request access to the data we hold about you,
• correct inaccurate data — most of it you can edit yourself in the application, under Profile,
• request deletion of your account and data,
• withdraw consent and stop using the application at any time.

Send your request to maki3012@hotmail.com. You can delete your account yourself in the application: Profile → Delete account. If you no longer have the application, submit a request through the Delete your account page. Deletion permanently removes your full name, e-mail, phone number, date of birth, gender, blood type and mountaineering card number, the account can no longer be used, and your membership licence is returned to the club. Records of past outings and payments remain in the club's records, but without any link to your name.

9. Security

All communication between the application and the server uses an encrypted HTTPS connection. Passwords are stored encrypted. Only club administrators have access to membership data, and every access is logged.

10. Children

The application is not intended for children under 13. Underage members are entered into the system with the knowledge and consent of a parent or guardian.

11. Changes to this policy

We may update this policy from time to time. The date of the last change is shown at the top of the page. We will inform members of significant changes through the application.