Introduction
This Privacy Policy explains how Barkraft doo, operating under the brand name Bar Akademija (“we”, “us”, “our”), collects, uses, stores and protects personal data when you visit barakademija.com or submit any information through our website.
We are committed to protecting your privacy and handling your personal data in a transparent, lawful and fair manner in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the applicable laws of Montenegro.
By using our website and submitting any form, you acknowledge that you have read and understood this Privacy Policy.
Who We Are — Data Controller
The data controller responsible for your personal data is:
- Company name: Barkraft doo
- Brand name: Bar Akademija
- Country of registration: Montenegro
- Operating locations: Banja Luka (BiH), Belgrade (Serbia), Mostar (BiH), Podgorica (Montenegro)
- Website: barakademija.com
- Email: kucha@barakademija.com
For any questions or requests relating to your personal data, contact us directly at kucha@barakademija.com.
Personal Data We Collect
We collect personal data only when you voluntarily provide it to us. The categories of data we collect are:
When you submit an enrollment inquiry or contact form on our website, we collect the information you enter, which typically includes: your full name, email address, phone number and the course or city you are enquiring about. Our forms are powered by Forminator (WPMU Dev). Submitted data is sent to our company email and stored securely within our WordPress installation.
If you contact us via WhatsApp or Viber at +382 69 957 869, any data you share in that conversation is handled in accordance with the respective platform’s own privacy policy. We do not store WhatsApp or Viber conversations in any third-party database beyond the app itself.
We use Google Analytics to collect anonymous, aggregated data about how visitors use our website — including page views, session duration and general geographic location (country level). This data does not identify you personally. You can opt out via the Google Analytics Opt-out Browser Add-on.
Pages on this site may include embedded content from YouTube, Facebook or Instagram. Embedded content behaves exactly as if you visited those websites directly. These platforms may set their own cookies and collect data about your interactions. We have no control over their data practices. Please refer to their respective privacy policies: YouTube · Facebook · Instagram.
We do not collect or process payment card data on our website. All payments are made via bank wire transfer, handled directly between you and your bank. No payment card data is stored by Barkraft doo.
How We Use Your Data
We use the personal data you provide solely for the following purposes:
- To respond to your enrollment enquiry and confirm your seat in a Bar Akademija course
- To arrange and manage payment for your course reservation
- To send you course-related information including dates, location details and pre-course materials
- To issue your international certificate upon graduation
- To respond to any questions or support requests you send us directly
- To improve our website using aggregated, anonymous analytics data
We will never sell, rent or trade your personal data to third parties for marketing purposes. We do not use your data to send unsolicited commercial emails.
Our legal basis for processing your data under GDPR Article 6 is: (a) your consent when you submit a form, and (b) the performance of a contract when you enroll in a course.
Where Your Data Is Stored
Our website is hosted on servers in Bosnia and Herzegovina by Global.ba, which operates in compliance with EU data protection standards.
Enrollment data submitted through our forms is stored within our secure WordPress database on those same servers. Email communications are handled via Gmail Workspace (Google LLC), which operates under the EU–US Data Privacy Framework (the successor to Privacy Shield, in effect since July 2023) and is subject to the Google Privacy Policy.
Third-Party Access to Your Data
We do not share your personal data with third parties except in the limited circumstances described below:
We use the following third-party services that may process your data as part of delivering our website and communication services:
- Google LLC (Google Analytics, Gmail Workspace) — anonymous analytics and email. Subject to the EU–US Data Privacy Framework.
- Global.ba — website hosting provider in Bosnia and Herzegovina.
- WPMU Dev (Forminator) — contact and enrollment form plugin. Data is stored within our own WordPress database.
- Meta (Facebook, Instagram) — social media embeds and pages. Subject to Meta’s own privacy policy.
- Google (YouTube) — embedded video content. Subject to Google’s privacy policy.
We do not sell, rent, trade or otherwise transfer your personal data to outside parties for any commercial purpose. No advertiser, marketing network or data broker has access to the personal data you submit to us.
Cookies
Our website uses cookies — small text files stored in your browser. We use the following categories of cookies:
- Essential cookies: Required for the website to function. These cannot be disabled.
- Analytics cookies (Google Analytics): Collect anonymous data about how visitors use our site. No personal identification. You can opt out via Google’s opt-out tool.
- Third-party cookies: Set by embedded YouTube, Facebook or Instagram content only when you interact with that content.
You can control and delete cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use our website.
How Long We Retain Your Data
We retain personal data only for as long as necessary for the purposes described in this policy:
- Enrollment enquiries: Retained for up to 24 months after your last communication or course participation, then securely deleted.
- Graduated students: Your name and certificate record may be retained indefinitely as part of our graduate registry, unless you request deletion.
- Analytics data: Anonymous and aggregated. Retained by Google Analytics per their standard data retention settings (14 months by default).
- Email communications: Retained in our email system for up to 24 months unless you request earlier deletion.
You may request deletion of your personal data at any time by writing to kucha@barakademija.com.
Your Rights Under GDPR
If you are a resident of the European Union or European Economic Area, you have the following rights regarding your personal data under the General Data Protection Regulation (GDPR):
You can request a copy of the personal data we hold about you at any time.
You can ask us to correct any inaccurate or incomplete personal data.
You can request that we delete your personal data, subject to any legal obligations to retain it.
You can ask us to limit how we use your data in certain circumstances.
You can request your data in a structured, machine-readable format for transfer to another controller.
You can object to the processing of your personal data based on our legitimate interests.
Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.
You have the right to lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, please contact us at kucha@barakademija.com. We will respond within 30 days as required by GDPR Article 12.
Exercise your rights.
Write to us and we will respond within 30 days.
Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure:
- SSL/HTTPS encryption is used across our entire website, protecting all data transmitted between your browser and our servers.
- Access control: Only authorised team members have access to personal data submitted through our forms.
- Data minimisation: We collect only the data strictly necessary for the purposes described in this policy.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33, and affected individuals without undue delay.
Legal Disclosure
We may disclose your personal data to a third party or government authority only where we are legally required to do so — for example, in response to a valid court order, subpoena, or request from a law enforcement authority with appropriate legal jurisdiction.
Any such disclosure will be made only to the minimum extent required by law and in compliance with GDPR and the applicable laws of Montenegro and the European Union. We will notify you of any such request where we are legally permitted to do so.
We do not proactively report individuals to third parties or law enforcement without a valid legal obligation.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise any of your rights, please contact us:
- Company: Barkraft doo (Bar Akademija)
- Email: kucha@barakademija.com
- Website: barakademija.com
- Country: Montenegro
Privacy question or data request?
We respond within 30 days as required by GDPR.