DATA PROTECTION NOTICE
Issue Date of the Notice
8th of May 2024
Issue Date of the Notice
Care for personal data and transparency in work are the values on which we base our presence. This Data Protection Notice (Notice) is issued in order to comply with the new Serbian Data Protection Law (SDPL) as well as General Data Protection Regulation (GDPR) if you are from EU.
We process your personal data in order to enable you to take participation in our Digital Day – “Shape the Future of AI” (Event). The purpose of this Notice is to familiarize you with the manner in which IAB uses your personal data. It provides information about how we collect, use, store and otherwise process your personal data.
IAB supports the rights that SDPL and GDPR grant you, as the data subject. We are sure that this is a big step in ensuring your right to fully control your personal data as our customer.
Personal data is any data related to a natural person whose identity is determined or determinable. Personal information is any information about you, on the basis of which we can identify you (e.g. name, surname, but also work status or e-mail address).
Processing is any action or set of actions performed on personal data or sets thereof (e.g. collection, storage, use, reproduction, publication, deletion or destruction).
Changes and amendments
This is the latest version of the Notice (8th of May, 2024). If this Notice is changed or supplemented, we will enter the date of the last version of the document. We will notify you in a timely manner of any changes to the Notice.
About us
In this Notice, “IAB”, “we” and “our” refer to association Interaktivni advertajzing biro Srbija, registration number: 28040385, TIN: 106999823, address: bulevar despota Stefana no. 7, 11000 Belgrade, Serbia.
For the purpose of your participation in our Event, IAB acts as a controller in the processing of your personal data, therefore any questions, complaints, requests to exercise your rights and additional information about this Notice can be obtained by sending to the e-mail address contact@iab.rs or by sending mail to our company address.
Types of Personal Data
In order to achieve the purpose of this Event, we process the following types of personal data:
- Personal identification data – first and last name;
- Contact information – phone number and e-mail address;
Also, we might process following work-related personal information if you represent company as a ticket purchaser:
- Company name where you are employed;
- Job title;
- Work related e-mail address;
Purpose of processing and legal basis for processing
We process your personal data based on:
The Contract
By buying ticket to this Event, you enter into a contractual relationship with us. We process your personal data in order to conclude and fulfil that contract.
Our legal obligations
We can process your personal data if the law requires us to do so.
Protection of your vital interestst
We can also process your personal data if the processing is necessary in order to protect your life interests. If we process your personal data based on our legal obligations or in order to protect your life interests, we will inform you about it. We only use personal data that are necessary for a specific purpose and we always try to limit the processing of personal data to what is necessary for that purpose.
Legitimate Interest of the Controller
In order to achieve our purpose, we process your personal data based on legitimate interest. Of course, we do this only if your interest or your fundamental rights and freedoms do not outweigh our legitimate interest. We use legitimate interest to:
Respond to your requests and possible complaints;
- Protect our business and provide support to our members, partners and colleagues;
- Help us, our partners and sponsors create best products and services for your needs;
- Identify and prevent fraud and other illegal activities;
At any time, you can object to this processing of your personal data by sending to the e-mail address contact@iab.rs or by sending mail to our address. For more information about your rights, we refer you to the ‘Your rights’ section below.
Recipients of personal data
Your personal data is shared internally within the IAB in order to achieve best possible organization of the Event. Also, we share your personal data with sponsors of the Event as described in ‘Legitimate Interest’ section.
We may also share your personal information with the following recipients:
- To subcontractors, external consultants, lawyers, accountants, commercial banks, courier services, research and marketing agencies or printers;
- To service providers in the field of information technology, such as cloud providers, hosting companies, customer support, chat services or software companies;
- To a newly established entity or an entity acquiring ownership of the IAB, if the IAB is involved in a merger, acquisition, purchase, sale of shares or other status change;
- To any other recipient, if we are obliged by law or based on a court decision;
To any other recipient when reasonably necessary, e.g. in case of danger to life.
All recipients are obliged to take appropriate technical, organizational and personnel measures to protect your personal data.
Transfer of Personal Data to Other Countries
Personal data that we process about you are transferred to countries that are considered to have an adequate level of personal data protection – members of the Council of Europe Convention on the Protection of Individuals with regard to Automatic Processing of Personal Data, i.e. to countries that have been determined by the European Union to provide appropriate level of protection.
Processing Period
IAB stores your personal data before and for the duration of the Event. If after ticket purchase you decide to not participate in the Event and inform us on that timely, the purpose of our processing of such data ceases and we shall delete them no later than within 90 days from the date of notice you gave us. On the other hand, if law requires us to retain your data for longer period (for example tax/accounting laws might do so), processing shall stop after such period expires.
Security of personal data
IAB continuously takes appropriate security measures in order to protect your personal data in accordance with the SDPL and GDPR.
We implement appropriate physical, procedural, technical, organizational and personnel measures in order to achieve an appropriate level of protection of your personal data that we process. IAB, along with its partners and sponsors, applies the best industry standards in data protection. Protection refers to the loss, misuse, unauthorized access and inspection, modification and destruction of such personal data. However, no security measure can guarantee that personal data will be 100% protected, but IAB constantly improves all security measures in order to protect your personal data with its controlled processing and high responsibility.
Your rights
You may exercise certain rights in relation to the personal data we process about you in connection with the Event. You can submit a request to exercise these rights at any time.
You have the following rights:
- Information: the right to be informed about how we process your personal data (this right is fulfilled by providing access to this Data Protection Notice);
- Access: the right to request from us access to any of your personal data that we process. If you submit the request electronically, the information is submitted in a commonly used electronic form, unless you request a different submission;
- Correction/Amendment: the right to request that inaccurate or incomplete personal data about you be corrected without delay. Please notify us if you change that personal information or if you become aware that any personal information we hold is inaccurate or incomplete;
- We reserve the right to correct your incomplete or incorrect address data in cooperation with Post of Serbia, in order to ensure communication and further cooperation;
- Erasure: the right to request the erasure of your personal data without delay (subject to the limitations set by law);
- Restriction: the right to request restriction of the processing of your personal data in certain situations;
- Transferability: the right to request the transfer of your personal data: The right to request us to transfer this data to another company, if the processing is based on consent or on the basis of a contract and the processing is carried out by automated means;
- Automated decision-making: the right not to be subject to a decision made solely on the basis of automated processing, which may include profiling, if that decision produces legal consequences or that decision significantly affects your position;
- Objection: the right to object to specific processing of personal data. This includes direct advertising, processing for scientific or historical research purposes or for statistical purposes.
You can exercise your rights by sending request to e-mail address contact@iab.rs, or by sending mail to our address. We will respond to your request as soon as possible, and no later than within 30 days from the date of receipt of the request. In case of complexity or a large number of requests, it is possible that we will need an additional period to respond to the request. That period cannot be longer than 90 days, and we will inform you about it separately.
If your request is clearly unfounded or is repeated frequently, we can refuse it or charge the costs for its realization. It is considered a frequent repetition when you contact us with a request to exercise one of the rights more than once in one year. If you contact us two or more times in one year for the same right, we will respond to your request only if you have a valid reason.
If you believe that any of the aforementioned rights have been denied to you or you believe that we are somehow processing your personal data against the law, you can file a complaint with the Commissioner for Information of Public Importance and Protection of Personal Data or other authority if you find grounds for it at any time.
Your IAB
