Privacy Notice
This notice explains how we handle personal information when you request and schedule a Football Club Operating System demo.
- Effective
- 3 September 2026
- Last updated
- 3 September 2026
01
Who is responsible for your data?
The controller is established in the Republic of Serbia. Serbian data-protection law is the primary framework. The GDPR is addressed where it applies.
02
What information we collect
When you request a demo, we collect:
- your first name, last name and work email;
- your club or organisation and role;
- your country and club website, if you choose to provide them;
- your selected operational challenge;
- whether there are other club processes you would like to automate or improve, if you choose to answer;
- any optional details you enter about that process; and
- basic information about the source and status of your demo request.
If you continue to scheduling, Cal.com processes your name, email, timezone, selected date and time, and booking identifiers. Calendar and Google Meet event information is then created for the meeting. The services involved may also receive ordinary technical request information such as your IP address, browser details, referring page and timestamps.
Please do not use the free-text field to provide health data or other sensitive personal information.
03
Why we use your information
We use the information to:
- respond to your inbound demo request;
- understand your professional or club context and prepare the session;
- arrange and deliver the requested meeting; and
- manage the evaluation of FCOS and any directly related commercial discussion.
We do not use this form as consent for newsletters, unrelated marketing or unrelated promotional messages. The demo-request flow does not make automated decisions about you that produce legal or similarly significant effects.
Legal basis
We rely on legitimate interests: Article 12 paragraph 1 item 6 of the Serbian Law on Personal Data Protection, and GDPR Article 6(1)(f), where applicable. Our legitimate interest is responding to your demo request, preparing and arranging the requested meeting, and managing the directly related evaluation of FCOS and any resulting commercial discussion.
Your name, work email, club or organisation, role and operational challenge are necessary for us to assess, prepare and arrange the requested demo. Country, club website, the additional automation-interest question and its details are optional.
04
Service providers
Football Club Operating System does not use a custom user database for demo requests. We use the following service providers to handle lead management, scheduling and meeting delivery:
Cal.com
Appointment scheduling, including attendee details, selected time and booking records.
Cal.com Privacy PolicyGoogle Workspace
Calendar event creation and Google Meet delivery for a scheduled demo.
Google Workspace data processing terms05
International data transfers
These service providers may process information in countries outside your own. Where applicable data-protection law requires a transfer safeguard, the relevant provider agreements may use an adequacy decision, Standard Contractual Clauses or another lawful mechanism. The safeguards that apply depend on the provider, account configuration and transfer.
06
How long we keep information
Up to 12 months after the last meaningful interaction for demo prospects who do not enter an active commercial relationship.
A meaningful interaction is a substantive reply, meeting, requested follow-up or active FCOS evaluation. Each such interaction restarts the 12-month period. Delivery receipts, automated messages, passive page views, internal notes and unsuccessful contact attempts do not restart it. If a prospect becomes a customer, or records must be retained for a contract, legal claim, accounting or another legal obligation, the relevant records follow that separate retention framework.
07
Your rights
Depending on applicable law and the circumstances, you may have rights to access, correct or delete your personal data, restrict its use, object to processing based on legitimate interests, and receive your personal data in a portable format where applicable. You may also complain to the competent data-protection authority, including the Commissioner for Information of Public Importance and Personal Data Protection in Serbia.
We may ask for limited additional information to verify your identity where necessary and assess whether a requested right applies before completing a request.
08
Security and data handling
We use established service providers and take reasonable measures to limit access and use demo-request information only for the purposes described in this notice. No method of transmission or storage is completely secure.
10
Changes to this notice
We may update this notice when our data handling or service providers change. The latest version will show its effective and last updated dates at the top of this page.
11
Contact
For privacy questions or rights requests, contact Bojan Ćerdić at office@bojancerdic.com.