Law on Personal Data Protection (‘Official Gazette of the Republic of Serbia’ No. 87/2018)
The Association processes your data when you visit this website and use the applications. On such occasion, various data are exchanged between your device and ours, which may include personal data. The data collected this way are used to optimize our website, among other things.
When you visit our website, the browser you use on your device will automatically, and without any activity on your part, send to the server of our website:
– the IP address of the device from which you accessed the website and which is connected to the internet,
– the date and time of the access,
– the name and URL of the downloaded data file,
– the website/application from which you accessed our website (referrer URL),
– the browser you are using and, if necessary, the operating system of your computer that supports internet, as well as the name of your provider.
The above data are temporarily stored for the following purposes:
– ensuring a smooth connection,
– ensuring comfortable use of our website/application,
– assessment of system security and stability.
The lawful basis for processing the IP address is Article 12, paragraph 1 point 6) of the Law on Personal Data Protection (legitimate interest). Our legitimate interest derives from the aforementioned purpose of data processing.
We generally do not transfer these data to third parties.
The data are stored temporarily during your visit to the site, and then automatically deleted.
After you leave our website, the geolocation data are deleted.
We respect the confidentiality of all your personal data that you submit via the contact form, by phone or e-mail. We process your data exclusively in accordance with the established purpose, and in order to answer your question. The lawful basis for data processing is Article 12, paragraph 1 point 6) of the Law on Personal Data Protection (legitimate interest).
If you participate in any of our surveys, such participation is voluntary. With anonymous surveys, we do not store data that allow us to determine the participant’s identity. We only store the date and time of your participation. We consider any personal data that you share through the survey to be given voluntarily and store it in accordance with the provisions of the Law on Personal Data Protection. In case you have given your consent for conducting the survey, the lawful basis for data processing is your consent in accordance with Article 12, paragraph 1, point 1) of the Law on Personal Data Protection. In that case, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the already completed data process preceding your consent withdrawal. Details of data processing related to surveys are regulated by the data protection rules of each individual survey.
All personal data that you submit to us through a question (suggestions, praise or objections) on this website or via e-mail, will be deleted or anonymised no later than 90 days after the final reply.
Processing for performance of a contract concluded (Article 12, paragraph 1, point 2) of the Law on Personal Data Protection). The data are processed for the purpose of preparing the conclusion of a contract, which precedes the contractual relationship, as well as for the purpose of fulfilling obligations after the conclusion of the contract.
Processing for the purpose of complying with legal obligations (Article 12, paragraph 1, point 3) of the Law on Personal Data Protection). The purpose of data processing derives, depending on individual cases, from legal regulations. For example, data are processed for the purpose of fulfilling the obligation to store documentation and in connection with identification, e.g. on the basis of regulations for the prevention of money laundering, on the basis of tax control and reporting and data processing within the framework of requests from state authorities.
Processing for the purpose of fulfilling legitimate interest (Article 12, paragraph 1, point 3) of the Law on Personal Data Protection).
As part of our business relationship, you are obliged to provide us with the personal data that are necessary for the initiation, implementation and conclusion of the contractual relationship and for the fulfilment of related obligations, or data that we are legally obligated or have lawful right to collect based on legitimate interest. Without these data, we will be unable to start a business relationship with you.
In the event that we transfer personal data to recipients in countries that are not members of the Council of the European Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data, the data will be transferred only in the event that the EU has confirmed the appropriate level of data protection, if an appropriate level has been agreed with the recipient of the data (e.g. through standard contractual clauses) or if you give us your consent.
In addition to the right to withdraw your consent, if the legal requirements are met, you also have the following rights:
– the right to request information about your personal data that we process, in accordance with Article 26 of the Law on Personal Data Protection,
– the right to rectification of inaccurate or incomplete data, in accordance with Article 29 of the Law on Personal Data Protection,
– the right to erasure of your stored data, in accordance with Article 30 of the Law on Personal Data Protection,
– the right to restriction of processing your data, in accordance with Article 31 of the Law on Personal Data Protection,
– the right to data portability, in accordance with Article 36 of the Law on Personal Data Protection,
– the right to object, in accordance with Article 37 of the Law on Personal Data Protection,
In accordance with Article 26 of the Law on Personal Data Protection, you have the right to request from us, free of charge, information on whether or not your personal data are being processed, access to such personal data, as well as information:
– on the purpose of the processing;
– on the types of personal data which are being processed;
– on the recipients or types of recipients to whom the personal data have been or will be disclosed, in particular on the recipients in other countries or international organisations;
– on the envisaged period for which the personal data will be stored, or, where that is not possible, on the criteria used to determine that period;
– on the existence of the right to request from the authorized person (Association) rectification or erasure of their personal data, the right to restriction of processing and the right to object to processing;
– on the right to file a complaint with a state authority (Commissioner for Information of Public Importance and Protection of Personal Data);
– available information on the source of personal data (available information), where the personal data has not been collected from the data subject (from you);
– on the existence of automated decision-making, including profiling referred to in Article 38, paragraphs 1 and 4 of the Law on Personal Data Protection and, at least in those cases, meaningful information about the logic involved, as well as on the significance and the expected consequences of such processing for the data subject (you).
If personal data are transferred to another country or international organization, you have the right to be informed about the appropriate safeguarding measures related to the transfer, in accordance with Article 65 of the Law on Personal Data Protection. You have the right to request that your inaccurate personal data be, without undue delay, rectified. Depending on the purpose of the processing, you have the right to complete your incomplete personal data, which includes providing a supplementary statement.
You have the right to request that we erase your personal data in the following cases:
– personal data are no longer necessary for realisation of purpose for which they were collected or otherwise processed;
– you withdrew your consent based on which processing has been carried out, in compliance with Article 12, paragraph 1, point 1) or Article 17, paragraph 2, point 1) of the Law on Personal Data Protection and there is no other legal ground for the processing;
– when you file a complaint to processing in accordance with Article 37 paragraph 1 or 2 of the Law on Personal Data Protection, and there is no other legal ground for processing which is overriding the legitimate interest, right or freedom of the data subject;
– personal data have been unlawfully processed;
– personal data must be erased with the aim of discharging of our legal obligations;
– personal data were collected in relation to the use of information society services referred to in Article 16, paragraph 1 of the Law on Personal Data Protection.
If we have made personal data public, and if we are obliged to erase the data, we will take all reasonable measures, including technical measures, taking into account available technologies and the potentials to bear the costs of their use, with the aim of informing other controllers which are processing such personal data that you have submitted the request to erase all the copies of such data and references, and/or electronic links to this data.
You have the right to request restriction of processing your personal data if one of the following cases applies:
– you contest the accuracy of the personal data, for a period that enables us to verify the accuracy of the personal data;
– the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
– the controller (we) no longer needs the personal data for the realisation of purposes of the processing, but you request them for the submission, exercise or defence of legal claims; or
– you have submitted an objection to processing pursuant to Article 37, paragraph 1 of the Law on Personal Data Protection, and the verification whether the legitimate grounds for processing by the controller (us) override your interests.
The right to data portability in accordance with Article 36 of the Law on Personal Data Protection You have the right to receive your personal data, which you previously provided to us, in a structured, commonly used and machine readable format and have the right to transmit such data to another controller without hindrance from the controller to which the personal data has been provided, where the following conditions have been aggregately met:
– the processing is based on consent pursuant to Article 12, paragraph 1, point 1) or Article 17, paragraph 2, point 1) of the Law on Personal Data Protection or based on a contract, in compliance with Article 12, paragraph 1, point 2) of this Law; the processing is carried out by automated means.
This right shall additionally include your right to have your personal data transferred directly by us to another controller, where technically feasible.
The right to object in accordance with Article 37 of the Law on Personal Data Protection
The aforementioned general right to object applies to all processing purposes described in these data protection rules, which are processed on the basis of Article 12 paragraph 1, point 6) of the Law on Personal Data Protection. Unlike the right to object to processing of data for commercial purposes (see point 6), we are obliged, in compliance with the Law on Personal Data Protection, to apply the general right to object only if the reasons for this are of great importance, for example, if there is potential danger to life or health. You also have the option to contact the state authority responsible for personal data protection or the authorised person in the association.
Contact for questions or for exercising your rights
If you have any questions or concerns regarding the use of your data as well as regarding our website, please feel free to contact us, and we will do our best to help.
The contact link is udruzenjeota@gmail.com
