GDPR Compliance

Introduction:

Our company with the trade name “V+O Serbia” (hereinafter referred to as the “Company”), in its capacity as Data Controller, would hereby like to inform you that it will proceed with the lawful collection and processing of your personal data according to the provisions of the EU General Data Protection Regulation (GDPR) 2016/679, which entered into force on May 25, 2018.

More specifically:

Which personal data do we process?

Our Company collects and processes the following personal data: your full name and other business contact information, including job position, professional title, postal address, landline and mobile telephone number, and e-mail address.

Why do we process your data?

The purpose of collecting and further processing the abovementioned personal data is exclusively to fulfill our contractual obligations towards you and/or your Employer, or when processing is deemed necessary for the preliminary assessment of a new contract/cooperation, always under strict professional terms.

If we receive your explicit consent, we may use your contact details to send informational and other promotional materials related to your industry sector, invitations to events and conferences, and newsletters from our Company and/or other companies within V+O Serbia.

Please be advised that you can revoke your consent at any time by sending an e-mail to: office@vando.rs. In that case, our Company will immediately cease any such communication.

With whom do we share your data?

Our Company may share your personal data with other companies within our Group for the purposes listed above. Furthermore, to the extent deemed necessary under our contractual relationship, our Company may use storage and filing companies, IT support services, lawyers, and consultants.

In such cases, the Company is committed to ensuring that its processors operate under its control and act only on its behalf, are authorized in writing and specifically for that purpose, and are fully bound by confidentiality and other obligations arising from applicable legislation.

How does the Company protect your data?

Our Company guarantees that it has taken all appropriate organizational and technical measures in accordance with relevant technology standards and applicable laws and regulations in order to ensure that the processing of your personal data, either by the Company itself or by third parties acting on its behalf, is lawful, appropriate, and provides an adequate level of security.

These measures are intended to prevent any unauthorized or accidental access, processing, deletion, alteration, or other use of data.

How long do we keep your data?

The personal data processed by the Company is retained for the period required by the purpose of processing and/or applicable law.

Upon expiration of that period, your data may be retained in accordance with applicable legislation governing retention periods following the termination of a professional relationship, or for as long as necessary for the defense of the Company’s legal claims before a Court or other competent Authority.

What are your rights?

In any case, please be advised that pursuant to applicable legislation, you have and may exercise the following rights:

(a) the right to access your personal data, as well as information relating to its processing;

(b) the right to rectify inaccurate or incomplete personal data;

(c) the right to erasure (“the right to be forgotten”);

(d) the right to restrict the processing of your data in cases expressly provided by law;

(e) the right to data portability in a structured, commonly used, and machine-readable format;

(f) the right to have your data transferred to another data controller; and

(g) the right to object to the processing of your personal data in cases expressly provided by law.

You may exercise any of the above rights by submitting the relevant written request to our Company. We will respond within one (1) month following receipt of the request.

Please be advised that this period may be extended by an additional two (2) months depending on the complexity of your request and the overall volume of requests received.

Furthermore, our Company undertakes to notify you, without undue delay, of any breach relating to your personal data that is likely to result in a high risk to your rights and freedoms, unless such notification falls within one of the exceptions expressly provided by law.

In any case, if you become aware of a breach relating to the protection of your personal data, you have the right to lodge a complaint with the competent data protection authority, as well as to initiate court proceedings.

Who can I contact for any questions / issues?

For any queries, clarifications, or requests regarding the protection of your personal data by our Company, you may contact the V+O Serbia office using the following contact details:

Email: office@vando.rs