Privacy Policy

Last updated: 26 September 2026

Through this Privacy Policy, DOO BB MINAQUA NOVI SAD informs visitors to the minaquafitness.rs website about the processing of personal data in accordance with the Personal Data Protection Act of the Republic of Serbia and other applicable regulations.

1. Data Controller

DOO BB MINAQUA NOVI SAD
Futoški put 93b, 21000 Novi Sad
Registration number: 08040800
Tax ID (PIB): 100448742
Phone: 021/679-1116

Data Protection Contact: Tatjana Malbaša
Email: tatjanam@bbminaqua.com

For general questions about Minaqua Fitness facilities and services, you may contact us at connect@minaquafitness.rs.

2. Personal Data We Process

Depending on how you use the website, we may process:

  • your first and last name;
  • your email address;
  • the subject and content of a message you send through the contact form;
  • data contained in further email correspondence;
  • your IP address and other technical data about your device, browser and access to the website that are necessary for security, website functionality and prevention of misuse;
  • website usage data through Google Analytics, in accordance with the user’s choices regarding analytics cookies and similar technologies.

We do not ask website visitors to provide special categories of personal data, such as data concerning health, biometric or genetic data, or data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning a person’s sex life or sexual orientation. Please do not enter such data into the free-text field of the contact form unless this is genuinely necessary and there is an appropriate legal basis for processing it.

3. Purposes and Legal Bases for Processing

  • Responding to enquiries and communication: when an enquiry concerns a specific service or steps taken at your request before the possible conclusion of a contract, processing is based on Article 12, paragraph 1, item 2) of the Personal Data Protection Act. For general business enquiries, processing may be based on the controller’s legitimate interest under Article 12, paragraph 1, item 6) of the Act.
  • Website security and prevention of misuse: the processing of technical data is based on the controller’s legitimate interest in protecting the website, the contact form and users.
  • Google Analytics: analytics processing that involves storing or accessing data on the user’s device is carried out on the basis of the user’s consent, except where the specific technology is exempt by law from the requirement to obtain consent.
  • Legal obligations and legal claims: we may process data where this is necessary to comply with legal obligations or to establish, exercise or defend legal claims.

The confirmation next to the contact form that you have read the Privacy Policy serves to clearly inform you about the processing of personal data. It does not constitute consent to receive marketing communications. We do not use data from the contact form for direct marketing without an appropriate legal basis.

4. Contact Form and Automatic Confirmation

To send a message through the contact form, you must provide your first and last name, a valid email address and the content of your message. The message subject is optional. Without the required information, we cannot receive or process your enquiry through the contact form.

After you submit the form, an automatic confirmation that your message has been successfully received may be sent to the email address you provided.

5. Cloudflare Turnstile

The contact form is protected by Cloudflare Turnstile to prevent automated and malicious submissions. As part of this protection, technical data required to distinguish genuine users from automated traffic may be processed.

6. Google Analytics and Cookies

The website uses Google Analytics to statistically understand how the website is used and to improve its content and functionality.

Analytics cookies and other technologies that are not technically necessary are not activated before the user receives clear information and the opportunity to accept or reject such processing, where consent is required under applicable regulations. The user may subsequently change or withdraw their choice.

7. Recipients of Personal Data

  • authorised employees and associates of DOO BB MINAQUA NOVI SAD;
  • website hosting and technical maintenance providers;
  • Cloudflare, in connection with Turnstile protection;
  • Google, in connection with Google Analytics and the email service through which communications with users are processed;
  • competent public authorities where there is a legal obligation to provide data.

We do not sell personal data or disclose it to third parties for their own direct marketing purposes.

8. Transfers of Data to Other Countries

Some digital service providers we use operate internationally, which means that certain data may also be processed outside the Republic of Serbia. In such cases, data transfers are carried out in accordance with personal data protection regulations and with appropriate safeguards in place.

9. Retention Periods

Messages sent through the contact form and related business correspondence are retained for no longer than 12 months after the end of the communication, unless the specific communication develops into a contractual, complaints-related, accounting, judicial or other legally relevant relationship. In that case, the relevant documentation is retained for the periods prescribed by specific law or for as long as necessary to establish, exercise or defend legal claims.

Technical and security data are retained only for as long as necessary for the security and operation of the system.

10. Whether You Are Required to Provide Personal Data

Providing personal data through the contact form is not a legal obligation. However, without your name, email address and message, we cannot process or respond to your enquiry through the form.

11. Your Rights

  • the right to access your personal data;
  • the right to rectification and completion of personal data;
  • the right to erasure where the legal requirements are met;
  • the right to restriction of processing;
  • the right to data portability where the legal requirements are met;
  • the right to object to processing based on legitimate interests;
  • the right to withdraw consent where processing is based on consent;
  • the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

You may submit a request to exercise your rights by emailing tatjanam@bbminaqua.com or by writing to the controller’s registered address.

12. Automated Decision-Making

DOO BB MINAQUA NOVI SAD does not make decisions that produce legal effects or similarly significantly affect an individual solely on the basis of automated processing of personal data collected through this website.

13. Data Security

We apply appropriate technical, organisational and personnel measures to protect personal data against unauthorised or unlawful access, loss, misuse, alteration, destruction or unauthorised disclosure.

14. Links to Other Websites and Social Networks

The website may contain links to other websites and social networks. When you leave our website and open a third-party website, the processing of your personal data is governed by that third party’s privacy rules.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to website functionality, service providers or applicable regulations. The current version will be available on this page together with the date of the latest update.