Get a Quote

Privacy policy

Last updated: 9 October 2026

This notice explains how personal data is used on dunking-devils.com. PKU d.o.o. is responsible for the website and show-booking inquiries. DD Akademija membership and enrollment are handled by a separate controller, Športno društvo Devils, described below.

Website and booking controller

PKU d.o.o., Letališka cesta 33E, 1000 Ljubljana, Slovenia. For privacy questions or requests, email office@dunking-devils.com.

Data collected through the website

  • Booking inquiries: your name, company, role, email, optional telephone number, event date, location, venue, audience, requested show and other details you submit.
  • Technical and usage data: IP address, browser/device information, requested pages, timestamps and interactions such as contact-link clicks or video plays, where collected by hosting or enabled measurement services.
  • Inquiry attribution: the landing-page URL, referring website and campaign parameters or advertising click IDs present in the visit. With your analytics or marketing consent the website keeps these in session storage until the tab is closed; without consent it uses only the page on which you send the form. They are included with a submitted booking inquiry so we know which channels bring inquiries.
  • Cookie choices: your selected analytics and marketing preferences, stored in your browser. See our Cookie Policy for cookies and similar storage.

Purposes and legal bases

  • Answering your inquiry, preparing a proposal and arranging a booking: steps you request before a contract, or performance of a contract (GDPR Article 6(1)(b)). For contacts acting on behalf of a company, our legitimate interest is communicating with that company and arranging its event (Article 6(1)(f)).
  • Operating and protecting the website, preventing abuse and handling relevant business correspondence: our legitimate interests in a reliable service, security and managing requests (Article 6(1)(f)). Where inquiry-source information is used to evaluate advertising, the applicable consent requirements also apply; submitting an inquiry does not itself give marketing consent.
  • Optional analytics, advertising measurement, remarketing and enhanced conversion matching: your consent (Article 6(1)(a)), where these services are enabled and consent is required. You can change your choice using Cookie settings. An inquiry is not a subscription to promotional emails.
  • Keeping required accounting and other statutory records: compliance with legal obligations (Article 6(1)(c)). Establishing or defending relevant legal claims: our legitimate interest in protecting legal rights (Article 6(1)(f)).

Service providers and recipients

Booking forms send your inquiry to Google Apps Script and Google Sheets in our Google Workspace. Inquiry notifications are sent to our booking team by email. Hosting, IT and professional advisers may process the information needed to provide their services.

Google Tag Manager manages measurement tags. With your consent we use Google Analytics 4 for usage analysis and, when we run advertising campaigns, Google Ads, Meta (Facebook and Instagram) and TikTok for advertising measurement. No analytics or advertising tag sends data before you consent. Loading the Tag Manager script itself from Google’s servers transmits your IP address and browser information to Google but sets no cookies. The tools, their cookies and lifetimes are listed in the Cookie Policy; before we add a new tool we update the cookie banner and both policies.

Where enhanced conversions are enabled with the relevant consent, email or telephone identifiers may be matched with an advertising platform using hashing. Hashed identifiers can still be personal data; hashing is not encryption or a guarantee of anonymity.

YouTube videos load when you press play. Following a social-media link takes you to that platform, which processes information under its own privacy notice. Data may also be disclosed to competent authorities where required by law.

International processing

Google (Google Workspace, Analytics, Ads, YouTube), Meta and TikTok may process data outside the European Economic Area, in particular in the United States. Transfers to Google LLC and Meta Platforms, Inc. rely on the EU-U.S. Data Privacy Framework adequacy decision; other transfers rely on the European Commission’s Standard Contractual Clauses with supplementary safeguards where needed. Contact the relevant controller for information about the countries, recipients and safeguards applicable to your data, or to request a copy of the applicable safeguards.

Website and inquiry retention

  • Inquiry records and correspondence are retained while the request, proposal and related follow-up remain open. Once closed, we keep them only as long as needed for a resulting booking, accounting obligations or an unresolved complaint or legal claim; information not needed for those purposes is deleted or anonymised.
  • Contract, invoice and other legally required records follow the applicable statutory periods. Only the information needed for those obligations or relevant legal claims is retained for that longer period.
  • Session storage remains for the browser-tab session. Your cookie choice is kept in browser local storage for 12 months, after which we ask again; you can change or clear it at any time. Cookie lifetimes are listed in the Cookie Policy; they are separate from retention of data in provider accounts (Google Analytics data is kept for 14 months) or inquiry records. Contact us for the applicable retention period or criteria for a particular record.

DD Akademija: separate controller

The controller for DD Akademija membership and enrollment is Športno društvo Devils, Letališka cesta 33E, 1000 Ljubljana, Slovenia. Contact enia@dunking-devils.com for academy privacy requests. This section applies to the member and, where relevant, their parent or legal guardian.

Academy data and purposes

Enrollment collects member identity, date of birth, address and contact details; parent/guardian and emergency-contact details; payment-related information, chosen programme and discounts; necessary safety/health information; declarations, consent choices, a signature and optional notes. Please provide only health information relevant to safe participation and inform any emergency contact whose details you supply.

Membership administration, organizing training, communicating with members and arranging payments are based on the membership agreement (Article 6(1)(b)). Accounting and other required records are based on legal obligations (Article 6(1)(c)). Relevant safety administration, emergency-contact arrangements and legal claims may rely on legitimate interests (Article 6(1)(f)); an actual emergency may justify processing necessary to protect vital interests (Article 6(1)(d)).

Health information supplied for safe participation requires your explicit consent (Articles 6(1)(a) and 9(2)(a)), unless another applicable legal exception permits the specific processing. You may withdraw that consent; the academy will discuss whether safe participation remains possible without the relevant information.

Consent to photography, filming and promotional use is optional and separate from membership. Where granted, the specified material may be used by Športno društvo Devils, PKU d.o.o. and ODBITO 360 d.o.o. for the purposes stated in the enrollment consent. Refusal does not prevent membership. Withdrawal applies to future consent-based use and does not make earlier lawful use unlawful.

Academy recipients and storage

Enrollment is processed through Google Apps Script and Google Sheets. A signed enrollment PDF is created in Google Drive and emailed to the member, a provided parent/guardian address and academy administration. Relevant information may be used by academy staff, coaches, payment/accounting providers and authorities where needed for their roles. Necessary registration data may be supplied to the Gymnastics Federation of Slovenia or the relevant competition organizer when the member participates in activities requiring registration.

Membership and signed enrollment records are retained for the active membership and then only where needed to settle outstanding membership obligations, meet statutory recordkeeping requirements or resolve relevant claims. Health and emergency-contact information is reviewed when circumstances change or membership ends and removed when no longer needed for safe participation or a specific lawful purpose. Optional promotional material is used according to the consent choice and any withdrawal; accounting retention is not a reason to retain all health or promotional information.

Your choices and rights

You may request access, correction, deletion or restriction of your personal data, object to processing based on legitimate interests and, where applicable, receive or transfer data processed by automated means on the basis of consent or a contract. These rights have legal conditions and exceptions, including statutory recordkeeping duties.

You can withdraw consent at any time without affecting the lawfulness of earlier consent-based processing. Use Cookie settings for browser choices; contact PKU d.o.o. for other website/booking requests or Športno društvo Devils for academy, health or image-use requests. We may request information necessary to verify your identity before disclosing records.

You may complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) or another competent supervisory authority. You do not have to contact us first.

Required inquiry or enrollment fields are identified on the form. Without necessary contact or membership information, we may be unable to answer the request or complete enrollment. Optional advertising, analytics and image-use consent is not a condition for asking about a show or joining the academy.

Changes to this notice

We update this notice when our services or processing change. The revision date appears above. A change to this notice does not itself grant consent for a new purpose.