Privacy Policy

1. Controller

The controller responsible for personal data processed via cleanbazeni.com and blog.cleanbazeni.com is:

For any data protection questions or to exercise your rights, email us at info@cleanbazeni.com or call +381 64 616 5521.

2. Scope and legal framework

This policy covers the website cleanbazeni.com, the blog blog.cleanbazeni.com and any communication with us via the forms on these sites, by email or by phone.

We process data in accordance with the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti, Official Gazette of the Republic of Serbia No. 87/2018, “ZZPL”). If you are located in the European Union, the European Economic Area or Switzerland, the General Data Protection Regulation (EU) 2016/679 (GDPR) or the Swiss Federal Act on Data Protection (revFADP) also applies to the extent applicable.

3. Website visits and server logs

When you open a page, your browser automatically sends technical data to the server: IP address, date and time of access, the requested page or file, the referring page (referrer), browser and operating system information (user agent) and the response status code.

We use this data to deliver the website, keep it stable and secure, and detect errors and misuse. Requests for pages that do not exist or are not permitted, as well as server errors, are recorded in log files with the data listed above. The logs are limited in size and older entries are deleted automatically.

To protect against misuse (for example, an excessive number of requests to the search or the forms), we briefly store records containing your IP address in hashed (pseudonymised) form; they are deleted automatically.

Legal basis: our legitimate interest in the secure and proper operation of the website (Art. 12(1)(6) ZZPL; Art. 6(1)(f) GDPR).

4. Contact form and enquiries

When you send us an enquiry via the contact form, we process:

• your name and email address (required), phone number (optional) and your message;
• the pool configuration you selected in the calculator, quiz or gallery, if it is shown in the form;
• a note that you are contacting us through our referral programme, if you opened the form from that page;
• the site language, your IP address and the Google reCAPTCHA score (see section 6).

Your enquiry is not stored in a website database; it is delivered as an email via our mail server to our business mailbox. If sending fails, we record your IP address, email address, the form type and the error description in an error log.

The purpose is to answer your enquiry and, at your request, to prepare an offer. Legal basis: steps taken at your request prior to entering into a contract (Art. 12(1)(2) ZZPL; Art. 6(1)(b) GDPR) and, for general enquiries, our legitimate interest in answering messages (Art. 12(1)(6) ZZPL; Art. 6(1)(f) GDPR). Without your name, email address and message we cannot respond.

The same applies when you email us directly, write to us via a messaging app or call us.

5. Job applications

Through the form on our careers page we process your name, email address, phone number, the text about yourself and, if attached, your CV as a PDF, DOC or DOCX file of up to 5 MB. Your IP address and the Google reCAPTCHA score are recorded with the application.

The application, including the CV, is sent by email to our business mailbox; the CV is not stored permanently on the web server, only temporarily while it is checked and sent.

The purpose is to assess your application and to recruit. Legal basis: your consent, given by ticking the box in the form, and steps prior to entering into a contract (Art. 12(1)(1) and (2) ZZPL; Art. 6(1)(a) and (b) GDPR). As stated in the form, we keep application data for up to 12 months unless you are hired or agree to a longer retention period. You can withdraw your consent at any time by emailing info@cleanbazeni.com.

Please do not send us special categories of data (such as health data) unless this is genuinely necessary.

6. Spam protection for forms (Google reCAPTCHA)

We protect the forms on the website and the blog with Google reCAPTCHA v3. The script is only loaded once you start filling in a form. Based on browser and device data, your IP address, on-page behaviour and Google cookies, reCAPTCHA assesses whether the form is being completed by a human or an automated program; our server receives only a risk score from Google.

The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. More information: https://policies.google.com/privacy

Legal basis: our legitimate interest in protecting the forms against spam and misuse (Art. 12(1)(6) ZZPL; Art. 6(1)(f) GDPR). The forms are additionally protected by a hidden control field and a limit on the number of submissions.

7. Analytics (Google Analytics 4) – only with consent

We only use Google Analytics 4 if you have allowed it by clicking “Accept” in the cookie notice. Until you make a choice, and if you decline, the Google Analytics script is not loaded and no data is sent to Google.

With your consent, Google Analytics sets the cookies _ga and _ga_<ID> and records data on how the site is used: pages visited, time of visit, traffic source, approximate location (country, city), device type, browser, screen resolution and interactions on the page. According to Google, Google Analytics 4 does not store IP addresses. Advertising and ad personalisation features are disabled. We use the data only in aggregated form to improve the content and operation of the site.

The service is provided by Google Ireland Limited, Dublin, Ireland, as our processor; data may also be transferred to Google LLC in the USA (see section 11). Data is kept in line with the retention period set in our Google Analytics account, and the cookies expire after 2 years at the latest. The blog blog.cleanbazeni.com uses a separate Google Analytics property under the same conditions.

Legal basis: your consent (Art. 12(1)(1) ZZPL; Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the Cookie settings link in the page footer. After withdrawal, Google Analytics is no longer loaded and existing _ga cookies are deleted as far as technically possible. Withdrawal does not affect the lawfulness of processing carried out before it.

8. Blog (blog.cleanbazeni.com)

Newsletter sign-up

When you sign up for the newsletter, we store your email address, the time of sign-up and your IP address in a subscriber list on the server, and we receive an email notification of the sign-up. The purpose is to send you new guides, seasonal reminders and pool tips. Legal basis: your consent (Art. 12(1)(1) ZZPL; Art. 6(1)(a) GDPR). You can unsubscribe at any time by emailing info@cleanbazeni.com; we keep your data until you unsubscribe.

Questions about articles, suggestions and bug reports

If you send us a question about an article, a suggestion or a bug report, we process your name (if provided), email address, message, the article title and, if attached, a screenshot. The message is delivered by email to our mailbox. For suggestions and bug reports we generate a voucher code, which is recorded in a log together with your email address and IP address. Legal basis: responding to your request and our legitimate interest in improving the blog and preventing misuse (Art. 12(1)(2) and (6) ZZPL; Art. 6(1)(b) and (f) GDPR).

The blog forms are also protected by Google reCAPTCHA (section 6).

9. Cookies and similar technologies

Cookies are small text files that your browser stores on your device. In addition to cookies, we use the browser’s local storage (localStorage) and a service worker cache. Essential technologies are used without consent because the site would not work properly without them; analytics cookies are set only with your consent.

Local storage data stays on your device; only the pool configuration and the referral note are sent to the server, and only when you submit the contact form.

The service worker keeps stylesheets, scripts, images and an offline page in the browser cache so that the site loads faster. The cache contains no personal data.

You can change your choice at any time via the Cookie settings link. You can also delete cookies and local storage in your browser settings.

Cookie settings

10. Recipients

We do not sell your data or use it for advertising. Your data may only be received by:

• our hosting provider, whose servers run the website and the blog and store the logs, as a processor;
• our email service provider, whose server sends and stores the messages from the forms, as a processor;
• Google (reCAPTCHA and, with your consent, Google Analytics);
• public authorities, where we are legally required to disclose data.

11. International data transfers

We are based in the Republic of Serbia. If you contact us from the EU, the EEA or Switzerland, you send your data directly to us in Serbia, which is not an EU member state; the ZZPL is aligned with the GDPR and provides a comparable level of protection.

When Google services are used, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023, and under the Swiss-U.S. Data Privacy Framework. The transfer is based on Art. 64 ZZPL and Art. 45 GDPR; Google additionally uses standard contractual clauses.

12. How long we keep data

We keep data only for as long as necessary for the purpose for which it was collected:

• enquiries: until the enquiry is resolved; if we enter into a contract, for the duration of the business relationship and as long as required by law (for example accounting and tax obligations);
• job applications: up to 12 months, as stated in the form;
• newsletter: until you unsubscribe;
• logs: until they are automatically overwritten or deleted;
• data based on consent: until you withdraw your consent, unless the law requires longer retention.

13. Your rights

Under the ZZPL (Arts. 26–38) and, in the EU/EEA, the GDPR (Arts. 15–22), you have the right to:

• access the data we hold about you and obtain a copy;
• have inaccurate data corrected and incomplete data completed;
• have your data erased;
• restrict processing;
• data portability for data you have provided to us;
• object to processing based on legitimate interest;
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

We do not make decisions based solely on automated processing that produce legal effects for you. You can send your request to info@cleanbazeni.com. We respond without undue delay and at the latest within 30 days. If we cannot reliably verify your identity, we may ask for additional information.

14. Right to lodge a complaint

If you believe that the processing of your data does not comply with the law, you can lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti), Bulevar kralja Aleksandra 15, 11120 Belgrade, https://www.poverenik.rs

If you live or work in the EU/EEA, you can also lodge a complaint with the supervisory authority in your country (list: https://edpb.europa.eu/about-edpb/about-edpb/members_en); in Switzerland, with the Federal Data Protection and Information Commissioner (FDPIC, https://www.edoeb.admin.ch). Your right to a judicial remedy remains unaffected.

15. Data security

Our websites are served exclusively over an encrypted connection (HTTPS). The forms are protected against misuse by a session token, a reCAPTCHA check and a limit on the number of submissions, and only authorised persons have access to the servers and the mailbox. However, no data transmission over the internet is completely secure.

16. Links and social media

We do not embed social media plugins, videos, maps or fonts from third-party servers. Facebook, Instagram, TikTok, WhatsApp and Google Maps are connected by plain links only: data is sent to these services only when you click a link, and their own privacy policies then apply.

17. Minors

Our offer is aimed at adults. Minors should not send us personal data without the consent of a parent or guardian.

18. Changes to this policy

We update this privacy policy when our services or the law change. The current version is always published on this page together with the date of the last update.