Legal documents

Privacy Policy

How we collect, use and protect your information.

Spirit of Youth respects the privacy of website visitors, people who contact us, and people who register for our programs and events. This Policy explains what data we collect, why we use it, how long we keep it, and which rights you have.

1. Data controller

The controller of your personal data is Spirit of Youth, Zarkovacka 25, 11030 Belgrade, Serbia. For privacy questions and requests, contact us at office@spiritofyouth.eu.

2. Information we collect

Depending on how you use the website, we may collect:

  • Contact form or email data: your full name, email address, message topic and content, and any other contact details you choose to provide.
  • EcoRise registration data: your selected role, full name, email address, phone number, organization or institution if provided, shirt size, confirmation that you are at least 18 years old, the date and version of the Code of Conduct you accepted, and a portrait photograph for your event badge.
  • Technical data: IP address, browser type, access time, and basic server logs required for website security and operation.

3. Purposes and legal basis

We use personal data only for the purposes for which it was collected:

  • to respond to your inquiry or request;
  • to provide requested information about our activities, programs, and collaboration opportunities;
  • to record and organize participant or volunteer registrations for EcoRise;
  • to contact you about the conference;
  • to prepare a shirt in the selected size;
  • to prepare and issue your event badge;
  • to record that you accepted the applicable conference Code of Conduct;
  • to protect the website and resolve technical issues.

We process contact form data to act on your request and on the basis of our legitimate interest in responding to messages you voluntarily send us. We process data submitted through the EcoRise form on the basis of the consent you provide before submitting the registration. You may withdraw consent at any time. Withdrawal does not affect processing carried out lawfully before withdrawal. We do not make automated decisions or profile applicants.

4. Photograph for the event badge

We use your photograph only to prepare the event badge and for internal event organization. We will not publish it on the website, social media, or in promotional materials without separate consent.

5. Required and optional data

Fields marked as required are necessary to process the registration. The organization or institution field is optional. Without the required details, shirt size, photograph, adult confirmation, and acceptance of the Code of Conduct, the registration cannot be submitted.

6. Retention periods

  • Contact form data is kept until the inquiry and related communication are complete, for no longer than 12 months unless longer retention is required by law or for a legal claim.
  • EcoRise registration data is kept during event preparation and delivery, for no longer than 12 months after the event ends.
  • The photograph used for the event badge is deleted no later than 90 days after the event ends unless you have given separate consent for another clearly stated purpose.

7. Access to data and external service providers

Only authorized people who need the data for communication, event organization, or website maintenance may access it. We may use hosting and IT providers that process data under our instructions and confidentiality obligations.

  • Formspree: contact form messages are delivered through Formspree, which receives the form content and necessary technical data. Formspree uses infrastructure in the United States and states that it relies on contractual safeguards. See the Formspree Privacy Policy.
  • Google Fonts: some pages load fonts from Google servers, which may receive an IP address and basic request information. See the Google Fonts privacy information.
  • Interactive maps: some pages use Leaflet and maps based on CARTO and OpenStreetMap data. When a map loads, the relevant providers and CDN may receive an IP address and technical request information. See the privacy policies of CARTO and OpenStreetMap.

Website server infrastructure may be located in the European Economic Area, while some external services may process data outside Serbia and the EEA under their terms and applicable safeguards. We do not sell personal data or disclose it to third parties for their own marketing purposes.

8. Data security

We apply reasonable technical and organizational measures, including access restrictions, protected administrator accounts, HTTPS, and storage separated from publicly available website content. No method of transmitting or storing data can be completely risk-free.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction of processing, portability where applicable, withdrawal of consent, or object to processing. Send requests to office@spiritofyouth.eu. You also have the right to submit a complaint to the Serbian Commissioner for Information of Public Importance and Personal Data Protection.

10. Adults, cookies, and changes to this Policy

EcoRise registration is intended only for people aged 18 or older, and we do not ask for a date of birth. The website may use necessary cookies and similar technologies for proper operation and security. We may update this Policy from time to time; the current version and revision date will always be published on this page.

11. Contact

Last updated: August 12, 2026.