Privacy policy of the Digital Serbia Initiative Association

Your personal data we collect

Personal data you voluntarily share with us

The Association collects and processes the following personal data you voluntarily share with us:

• Your first and last name,
• Your contact details, such as your email address and/or phone number,
• Information you choose to share with us when completing research questionnaires,
• Information you provide when contacting the Association.

Personal data we collect automatically

When you access or browse the Website, the Association automatically collects certain data about you. This includes:

Visitor data. We collect a certain amount of data from the moment you arrive at the Website. This may include data about your computer’s hard drive or software (IP address, browser, domain, access time, location) which allow us to provide a tailored user experience on the Website.

Information collected via cookies. Cookies are also a source from which we receive data about you as a user. Cookies are small data units that your internet browser stores on the device through which you access our website and sends back to us when you are on our website. We use this data to improve your user experience, to better understand you and your needs, and to tailor the look and content of our website accordingly. Because of the importance of this data, the first notice you receive when you enter our site concerns cookies. Additional information about cookies is contained later in this document under the heading “Cookies”.

Location data. We may obtain and process data related to your location. For example, we may collect data on the unique location of your mobile device (using GPS or Bluetooth technology). We may also obtain your approximate location using your IP address.

Purpose of processing and legal basis

Your personal data are processed in electronic form and may include in particular the following processing operations: collection, classification, use, analysis, disclosure, sharing, storage, and deletion.

We process your data in order to:

• build, maintain, and improve our Website;
• enhance your experience as a user when browsing content on our Website;
• provide you with information that truly interests you and in a form that best matches your needs and preferences;
• analyze trends our users present to us daily as challenges we strive to address;
• keep you regularly informed about all projects, events, and news within the Association (please note that you may unsubscribe from our newsletter at any time).

Your consent to the processing of your personal data is the legal basis for such processing pursuant to Article 12 paragraph 1 item 1) of the Act, and you may withdraw it at any time, provided that the withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. In the event of withdrawal, further processing of your personal data will cease within the shortest reasonably possible time, unless there is another legal basis for processing.

We also collect your data so that you are informed about all projects, events, and news within the Association (hereinafter “Direct Marketing”). We collect and process your data for this purpose pursuant to Article 12 paragraph 1 item 1) of the Act, i.e., on the basis of your consent. However, your consent for us to process your data for Direct Marketing must be given independently and separately from the consent you give for the processing of your personal data in general. In that sense, you may separately withdraw your consent for the use of your personal data for Direct Marketing by sending an email to: inicijativa@dsi.rs. If you do so, your data will no longer be used for Direct Marketing.

The legal basis for processing your personal data may also be the pursuit of the legitimate interests of the Association or a third party (such as, for example, our business partners and/or companies that are members of the Digital Serbia Initiative), all in connection with the functioning of our website and/or actions related to the use of our website.

How do we use your personal data?

We will use your personal data only with your explicit consent, or where there is another basis grounded in the Act. Your personal data will not be used for purposes other than those for which they were collected and of which you have been informed. If the Association intends at any time to further process your personal data for a purpose different from that for which the data were collected, we will inform you of that other purpose as well as of all other elements prescribed by the Act. All members of our team will safeguard your data in accordance with the principle of privacy.

How long do we keep personal data?

We do not keep your personal data longer than necessary to accomplish the purpose for which they were collected, i.e., no longer than the period for which we have your consent.

Sharing your personal data

We will not make your personal data available to third parties without your explicit consent, nor will we exchange them with persons outside the system of preparation, editing, and technical maintenance of the website (who may be employees of the Association or third parties with whom the Association has a contract for the development and maintenance of this website, as well as their subcontractors). Your personal data are protected against misuse, destruction, loss, unauthorized alteration, and access, both when processed directly by us and when processed by such third parties with whom we have concluded contracts, including their subcontractors.

When you share certain information about yourself with us, there is a group of people to whom that information is available.

When you contact us via the contact form on the website or directly by email, the content of that email is accessible only to employees responsible for communicating with you. We do not share, sell, or give away the content of your email to persons who are not our employees. Exceptions are persons who are not part of our team but may have access to your data because they are:

• Our partners. We may share your data with business associates, consultants, and other service providers who need such data to help us carry out daily activities.
• Representatives of our members. Representatives of organizations and companies that are members of the Association will have access to your data if, through your contact with us, you requested contact with a member or the content of your request requires the involvement of a representative of member companies.
• Representatives of state authorities. We will share your data with representatives of state authorities if there is a legal basis and an official request for doing so. In the event we receive such a request, we will notify the data subject as soon as possible unless prohibited by law.

We may also use your data to initiate and conduct appropriate legal proceedings if your activity on our website and/or in connection therewith constitutes a breach of this Privacy Policy, the rules of use of our website, other existing rules and procedures, and/or the laws or other legal regulations of the Republic of Serbia, all in order to protect our rights, the rights of the companies that are our members and/or other users of our website, or any other person.

When preparing various reports on trends on our website, your data may be incorporated into aggregated views of individual trends, but in such a way that it will in no case be possible to identify you as a user.

Your rights under the Act

In accordance with the applicable Act, you have the following rights regarding the processing of your personal data:

• Right of access to personal data
  You have the right to obtain from us confirmation as to whether or not we process personal data concerning you, and, where appropriate, to request access to the relevant personal data.
• Right to rectification and completion of personal data
  As the data subject, you have the right to have inaccurate personal data concerning you rectified without undue delay. Depending on the purpose of processing, you have the right to have your incomplete personal data completed.
• Right to erasure of personal data
  In accordance with the Act, you have the right to request that we erase your personal data. In such cases, however, the purpose for which your data were collected may not be achievable.
• Right to restriction of processing of personal data
  In accordance with the Act, you have the right to request the restriction of the processing of your personal data. In that case, such personal data will be marked and we will be able to process them only for specific purposes.
• Right to data portability
  In accordance with the Act, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format (i.e., digitally) and you have the right to transmit those data to another controller or to request that such data be transferred to another person without any hindrance on our part, if such transfer is technically feasible.
• Right to object to the processing of personal data
  In accordance with the Act, you have the right, for reasons related to the processing of your personal data, to object at any time to our processing of your personal data and to request that we no longer process your personal data. You have the right to object at any time to the processing of your personal data for the purposes of Direct Marketing.
• Right to withdraw consent for the processing of personal data
  In accordance with the Act, in cases where the processing of your personal data is based on your consent, you may withdraw your consent at any time free of charge and without providing any explanation. Withdrawal of consent will not affect the lawfulness of processing based on consent before such withdrawal. If you withdraw your consent for the processing of your personal data by the Association, we may not be able (in whole or in part) to provide the services you request or to achieve the purpose for which consent for the collection and processing of your personal data was given.
• Right to lodge a complaint with supervisory authorities
  In accordance with the Act, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection if you believe that the processing of personal data has been carried out contrary to the provisions of the Act. Submitting a complaint to the Commissioner does not affect your right to initiate other administrative or judicial protection proceedings.

To exercise your rights regarding the processing of personal data, please contact us at: inicijativa@dsi.rs.

How the Association protects your personal data

We use appropriate technical, organizational, and personnel measures to protect the personal data we collect and process about you. The measures we use are designed to provide an adequate level of security so that the processing of your personal data is carried out in accordance with the provisions of the Act and to ensure the protection of your rights, as well as the rights of the data subjects to whom the personal data relate.

To which countries are your data transferred?

Your personal data are transferred to companies in other countries both within the EU and outside the EU. Appropriate countries outside the EU may not be able to provide the same level of personal data protection as in your country. In such cases, the Association will ensure that the recipient in such a country adequately protects the personal data.

Adequate protection includes signing a contract with the recipient under which such recipient must maintain the same high level of privacy and data security practiced by the Association. The said contracts incorporate standard contractual clauses prepared by the Commissioner in accordance with Article 45 of the Act, which fully regulate the relationship between the Association as the controller of your data and the processor. You can consult the relevant provisions at the following link: https://www.poverenik.rs/en/.

Cookies

Our website www.dsi.rs uses cookies. Cookies are small data units that your internet browser stores on the device through which you access our website and sends back to us when you are on our website.

We use only the cookies listed in the table below. Their purpose and retention period are also stated in the table. You can choose cookie settings at the following link.

 

By configuring your internet browser, you can block these cookies, but please note that in that case you will not be able to use the functionalities of our website, or you will not be able to use them in full.

Also, if you have not blocked them, please note that during later use of our website you can delete the initially enabled cookies at any time; however, after such deletion, you will no longer be able to use the functionalities of our website, or you will not be able to use them in full. In any case, you can learn more about how this works by clicking the appropriate option in your internet browser menu.

Changes to our Privacy Policy

The Association reserves the right to update and/or amend this Privacy Policy from time to time, in order to keep pace with changes in legislation and technological innovations. All changes will take effect at the moment the amended and/or supplemented Privacy Policy is published on the Website. We suggest that you periodically review our Privacy Policy. If we have your email address, we will send you a notice of such changes. If you do not agree with our Privacy Policy, please stop using the Website immediately.

Contact us

If you wish to exercise any of your rights as a data subject whose personal data we collect, or if you have any other questions regarding our Privacy Policy, please contact us at: inicijativa@dsi.rs.