Privacy and cookies

This page explains which cookies and similar technologies we use on the public part of the Nevesinjska olimpijada website, which data we process for internal visit statistics, and how analytics and marketing tools may be used with your consent.

Necessary cookies are used for the basic functioning of the site, while analytics and marketing cookies are only used if you accept them via the cookie banner or cookie settings.

Data controller

The data controller for the public part of the website is the organiser of the manifestation — i.e. the entity managing the specific manifestation or event. Technical maintenance and development of the software solution may be performed by BSS Rašović / ManifestBSS as a technical service provider, in accordance with the agreement with the organiser.

For questions regarding privacy, data processing or exercising user rights, you can contact us via the contact page or the official e-mail address listed on the site.

A) Neophodni kolačići

We use necessary cookies that enable the basic functioning of the site, form security, CSRF protection, user sessions, saving the language choice and saving cookie settings. These cookies are not used for marketing or profiling.

  • sessionid — Django user session, mainly for logged-in users in the dashboard.
  • csrftoken — Form CSRF protection.
  • django_language, translation_lang — user language choice.
  • Local storage of cookie settings (localStorage) — saving your choice regarding cookies.

B) Analitika posjeta

With your consent, we collect basic analytics data about the use of the site to measure traffic, monitor page performance, improve content and understand visitor interests.

If you accept analytics cookies, the following data may be stored with each visit to a public event page:

  • putanja stranice koja je posjećena
  • page type
  • datum i vrijeme posjete
  • approximate visitor country based on IP geolocation
  • cryptographic hash of the IP address (SHA-256 + secret salt) — the raw IP address is not stored
  • shortened user-agent
  • referrer URL
  • screen resolution
  • browser language
  • time zone

The data is used in pseudonymised and aggregated form and we do not use it for the direct identification of visitors.

C) Marketing cookies and advertising tools

With your consent, we may use marketing cookies and similar technologies to measure the success of promotional campaigns, track conversions and display more relevant advertisements. These tools may include Meta Pixel, Facebook/Instagram advertising tools, Google Ads, YouTube remarketing or other similar services, depending on the configuration of the specific manifestation or individual event.

Marketing cookies may be set by our advertising and marketing partners. They do not directly store data such as name, surname, e-mail or phone, but may recognise your browser, device or pattern of site usage. If you do not allow these cookies, the advertisements you see may be less tailored to your interests, and the organiser will not be able to accurately measure the success of individual promotional activities.

Marketing scripts are not loaded until you give consent to marketing cookies.

D) Purpose of analytics

Data is used exclusively in aggregated and statistical form for analysis of page traffic, an overview of the most visited content, approximate visit statistics by country and improvement of the user experience. We do not use analytics data for the direct identification of visitors.

E) Tracking of clicks on sponsor and partner links

When you intentionally click on a sponsor or partner logo or link — on the sponsors page or in dynamic sponsor blocks — we may record that the click occurred. This does not require access to cookies or localStorage in your browser; the server records the click so that the organiser can measure the effectiveness of sponsor and partner placements.

The following data may be stored with each click:

  • identifier of the sponsor or partner
  • date and time of the click
  • URL to which the user was redirected
  • approximate country based on IP geolocation
  • cryptographic hash of the IP address
  • shortened user-agent
  • referrer URL

Legal basis: The legal basis for this processing is the legitimate interest of the organiser to measure the effectiveness of sponsor and partner activities and to detect abuse or bot clicks, in accordance with applicable personal data protection regulations.

Right to object: You may object to this processing by sending a request via the contact page.

Retention period: Click data is stored for a maximum of 12 months. Aggregated statistics, without data that can be linked to an individual session, may be stored longer.

F) Managing your consent

You can accept or refuse analytics and marketing cookies via the cookie banner, or change your choice at any time by clicking the link Cookie settings u podnožju stranice.

Your choice is stored locally in your web browser. If you clear browser data, the banner will reappear on your next visit.

Necessary cookies are always active because they are required for the basic functioning of the site.

G) External resources and third parties

On some pages we may use external resources and third-party services. These services may process technical data such as the IP address, user-agent, device information or interactions with content, in accordance with their own privacy policies.

  • Google Fonts — for loading fonts.
  • jsDelivr CDN — for loading JavaScript libraries.
  • YouTube embeds — if the event has included video content.
  • Meta Pixel / Facebook / Instagram advertising tools — may be used only with consent to marketing cookies.
  • Google Ads / YouTube remarketing — may be used only with consent to marketing cookies.

H) Registration data

When you register for an event, we collect the data defined by the organiser through the registration form — typically first and last name, e-mail, phone, date of birth, category, discipline or other data needed for the organisation of the event. This data is used exclusively for the organisation of the manifestation, participant records, communication with participants, processing of registrations, any payments, and publication of results where applicable.

The exact scope of data depends on the specific registration form.

You may at any time request the deletion of your personal data from the registration by sending a request to the manifestation organiser via the contact page or contact e-mail address. After the request is processed, personal data from the registration (name, e-mail, phone, file uploads, all answer fields) will be permanently removed.

For the purpose of internal audit and statistics, the record that a registration existed (event, discipline, date, status, payment status) and the hash proof that the deletion request was processed may be kept after anonymisation, but without any personal data that could identify you.

I) Email subscription to news

You can subscribe to email news notifications, either for an individual event or for all news of the umbrella manifestation.

Subscription requires a separate consent and is not combined with consent to cookies or consent to event registration. The e-mail address is used exclusively for sending notifications within the chosen subscription scope.

Each email contains an unsubscribe link. Unsubscribing is immediate and does not require login or additional steps. You may also contact the organiser via the contact page to manually deactivate the subscription.

J) Data retention periods

Analytics data is kept as long as needed for monitoring traffic, preparing reports and improving content, and at most for the period set by the manifestation organiser.

Data on clicks on sponsor and partner links is kept for a maximum of 12 months.

Registration data is kept as long as needed for the organisation of the event, participant records, communication, results processing, administrative obligations and any legal obligations. Once the need for storage expires, data is deleted or anonymised.

Data for email subscription is kept until the user unsubscribes or until the need to send notifications ends.

K) User rights

In accordance with applicable personal data protection regulations, you may request access to your personal data, correction of inaccurate data, deletion of data, restriction of processing, data portability where applicable, and object to certain types of data processing.

If processing is based on your consent, you may withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights you can contact us via the contact page or the organiser's official e-mail address. You also have the right to lodge a complaint with the competent personal data protection authority. In Bosnia and Herzegovina, the competent authority is the Personal Data Protection Agency of BiH.

L) Contact

For all questions related to privacy, cookies or management of your data, you can contact us via the contact page or the official e-mail address listed on the site.