GDPR and Terms of Use

NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

VN CONSULTING, as the website operator, processes personal data in accordance with the Law on Personal Data Protection (“Official Gazette of the Republic of Serbia” No. 87/2018) and other regulations governing matters related to the processing of personal data. Through this notice, VN CONSULTING provides users with basic information regarding the processing of personal data, their protection, as well as the rights of individuals whose information is processed.

“Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

“Data subject” is a natural person whose personal data is being processed;
“Processing of personal data” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction (hereinafter referred to as “processing”);
“Controller” is a natural or legal person, or public authority, which alone or jointly with others determines the purposes and means of the processing. The purposes and means of processing may be determined by law;
“Processor” is a natural or legal person, or public authority, which processes personal data on behalf of the controller.

DATA ABOUT THE CONTROLLER

The controller of personal data is: VN CONSULTING VIKTOR KREŠKAI PR 25225 Kruščić, Ise Sekickog 26 Registration number: 66585930 Tax identification number (PIB): 113110167 Email address for correspondence: viktorkreskai@gmail.com

VN CONSULTING currently does not have a data processor. For any inquiries regarding the processing of personal data and the exercise of rights prescribed by the Law on Personal Data Protection, data subjects can contact us in the following ways: By sending an email to: viktorkreskai@gmail.com By sending a letter by mail to the address of VN CONSULTING headquarters: 25225 Kruščić, Ise Sekickog 26 By submitting a letter directly to the above address.

LEGAL BASIS AND PURPOSE OF DATA PROCESSING

VN CONSULTING is obligated to determine a legal basis for each purpose of data processing in accordance with the Law on Personal Data Protection.

The purpose for which VN CONSULTING collects and processes data depends on the products and services for which the individuals, whose data is processed, express interest. These data are processed to fulfill the purpose for which they are collected.

In this regard, below are the legal bases and purposes of processing on which VN CONSULTING collects and processes personal data:

Execution of concluded contracts or taking preliminary actions to conclude a contract

Processing of data necessary for the conclusion and execution of contracts regarding the use of products or services offered by the VN CONSULTING website (advertisements, exercising rights to various privileges, communication with other users, benefits when purchasing various products offered or to be offered by the VN CONSULTING website, etc.), or for VN CONSULTING to take certain factual actions before concluding any contract (as mentioned above). If the individual whose data is collected and/or processed refuses to consent to the use and processing of this data, VN CONSULTING will not be able to proceed with the conclusion of the contract or the provision of the service.

Compliance with Legally Prescribed Obligations of VN CONSULTING

VN CONSULTING processes individuals’ data to fulfill obligations prescribed by laws relating to the activities of VN CONSULTING, as well as to meet the requirements of competent state authorities, prevent abuse, address complaints related to data collection and processing, etc. For the processing and collection of data for these purposes, or data that is necessary to comply with laws and other positive regulations, the consent of the individuals whose data is concerned is not required.

Realization of VN CONSULTING’s Legitimate Interest

In certain situations, the collection and processing of data are necessary to achieve the legitimate interests of VN CONSULTING or a third party. In such situations, VN CONSULTING is obliged to ensure that its interests do not outweigh the rights and interests of the individuals whose data is being processed. VN CONSULTING has a legitimate interest in collecting and processing personal data, especially in the following situations:

Monitoring and maintaining the security of IT systems and VN CONSULTING’s business, including the security of products and services offered to users;
Preventing abuse, fraud, inappropriate behavior, and communication detrimental to VN CONSULTING, other users of products and services, and all third parties;
Initiating and conducting legal proceedings before state authorities when necessary to protect the rights and interests of VN CONSULTING, other users, and third parties;
Responding to questions, comments, and suggestions addressed to VN CONSULTING (electronically, by mail, by phone, etc.);
Conducting research related to user experiences, desires, satisfaction, interests, and needs for specific products or services provided by VN CONSULTING, all aimed at improving and enhancing the offerings of products and services provided by VN CONSULTING;
Exchanging data with corresponding business entities and websites.

For data collection and processing under this basis, the consent of the individuals whose data is collected and processed is not required, but every such individual has the right to protect their rights and interests in accordance with the Law on Personal Data Protection, which will be elaborated on later.

Consent for Processing Personal Data

For one or more specifically defined purposes, VN CONSULTING collects and processes data based on the consent given by the individuals whose data is concerned.

If the individual whose data is collected and processed does not give consent, it does not affect the collection and processing of data related to contracts that the user concludes with VN CONSULTING, compliance with legally and otherwise established obligations, and the collection and processing of data related to the legitimate interests of VN CONSULTING or third parties, except when the Law on Personal Data Protection stipulates that consent is necessary for fulfilling certain obligations.

Once given, consent can be revoked by the user at any time, as described in the controller’s data. Explicit consent is required for the processing of special categories of personal data, which are necessary for providing certain products and services. Consent for the collection and processing of data for minors under the age of 15 is given by the legal guardian.

Categories of Personal Data Processed

The basic personal and identification data collected and processed by VN CONSULTING include: email address, name and surname, as well as data about the computer and internet provider, mobile phone model, and country of origin.

VN CONSULTING also collects data from users regarding: gender, date of birth, membership on certain pages/websites, and social networks (GDPR).

VN CONSULTING collects data from concluded contracts regarding the use of services or the purchase/sale of products offered by VN CONSULTING.

Manner of Collecting Personal Data

VN CONSULTING collects data from the individuals whose data is concerned or from third parties. If data is collected through third parties, VN CONSULTING is obligated to inform the individual whose data is collected and processed no later than 30 days from the day the data was collected, or at the time of establishing the first communication.

Access to Personal Data

The following entities have access to the data collected and processed by VN CONSULTING:

Within the company VN CONSULTING, individuals who, by the nature of their work, must have access to such data in order to fulfill contractual obligations, pursue the legitimate interests of VN CONSULTING and third parties, and improve the products and services offered by VN CONSULTING;
Governmental authorities and organizations (judicial and administrative authorities, etc.);
Third parties with whom VN CONSULTING has concluded appropriate business cooperation agreements (e.g., postal services, internet providers, telecommunication services, IT system maintenance, corresponding business entities, etc.), which agreements are necessary for the functioning of the VN CONSULTING website, as well as agreements with users of products and services.

Transfer of Personal Data to Another Country or International Organization

VN CONSULTING processes personal data in the Republic of Serbia, and only exceptionally transfers personal data to another country or international organization without prior approval from the individuals whose data is concerned if it is determined that the other country and/or international organization provides an adequate level of data protection. Transfer of data to another country and/or international organization that does not meet the necessary conditions for the protection of personal data may only be carried out by VN CONSULTING with the explicit consent of the individuals whose data is collected and processed (concerned individuals) or if other conditions prescribed by law are met.

Method of Processing Personal Data

VN CONSULTING processes personal data manually and electronically in a manner that ensures confidentiality.

During the processing of personal data, VN CONSULTING conducts automated and/or semi-automated processing, including profiling. In such cases, VN CONSULTING conducts additional checks on the results of the processing.

Security of Personal Data

VN CONSULTING has defined information security management, which involves the implementation of state-of-the-art technical tools and compliance with standards. VN CONSULTING treats collected data as business secrets, applying all technical and organizational security measures in accordance with applicable regulations and internal policies.

Retention Period of Personal Data

VN CONSULTING retains the collected personal data for the purposes mentioned above until the termination of the user relationship, except in situations where VN CONSULTING is obliged, based on positive regulations, the consent of the individuals whose data is concerned (or until revoked by that individual), or for the purpose of pursuing its legitimate interests.

Rights of Individuals whose Data is Collected and Processed

The right to access data by the individuals whose data is concerned implies that they can at any time request information from VN CONSULTING regarding whether their personal data is being processed, access their data, and obtain information about the processing of their data. VN CONSULTING will provide a copy of the personal data being processed upon request. If the request is submitted electronically, VN CONSULTING will provide the requested information to the individual electronically. This service is provided free of charge.

The right to correction, supplementation, and deletion of data is held by the individuals whose data is processed, so VN CONSULTING is obliged to delete (if the legal conditions for deletion are met – e.g., if the purpose for which they were collected has been fulfilled, consent for processing has been withdrawn, and there is no legal basis for processing, etc.), correct (if the data is inaccurate), or supplement (if the data is incomplete) upon the request of that individual.

If the individual whose data is processed submits a request to restrict the processing of their data in cases prescribed by positive regulations (e.g., if the accuracy of the data is reasonably contested, if the lawfulness of processing is contested, if the purpose of processing has ceased, etc.).

Upon request, VN CONSULTING will provide the requested data to the individual in a machine-readable format (via computer) and allow them to transfer it to another controller, if the processing is based on the consent of that individual or is necessary for the performance of a contract and if the processing is automated. At the request of the individual, VN CONSULTING is obliged to transfer the data to the new controller, as designated by the individual, if it is technically feasible.

The individual whose data is processed has the right to object at any time to the processing of their personal data based on the legitimate interests of VN CONSULTING, processing necessary for the performance of tasks carried out in the public interest, or for the exercise of official authority vested in VN CONSULTING. If an objection is raised, VN CONSULTING is obliged to cease the processing of personal data for that individual, except in cases where there is a legal basis for processing that outweighs the personal interests of the individual concerned, or if processing is necessary for judicial, administrative, or similar proceedings.

The individual whose data is processed has the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection if they believe that the processing of their personal data is contrary to the provisions of the Law on Personal Data Protection and other regulations.

All individuals whose data is collected and processed by VN CONSULTING can address VN CONSULTING at any time (as indicated above under “Data about the controller”) to exercise their rights regarding the collection and processing of personal data.

All measures taken by VN CONSULTING regarding the exercise of the rights of individuals whose data is processed are free of charge. Only in the case of unfounded and excessive requests, especially frequent requests, VN CONSULTING may charge a fee for necessary and useful costs incurred in processing the request.