Privacy Notice on the Processing of Personal Data

 

Our shopping center’s business includes several situations in which we will process your personal data. More details can be found below:

We are Nepi Real Estate Project One doo, with its registered office in Belgrade, Milutina Milankovica 9đ, registered under no. 21165719, unique identification code 109345294 (hereinafter referred to as “Promenada Novi Sad “).

This Memorandum is addressed to all data subjects who visit our shopping centre, access its website, participate in promotional campaigns or similar events carried out by us within the shopping centre or online or data subjects who represent suppliers/partners/collaborators or tenants in the contractual relationship with Promenada Novi Sad .

The way we process your personal data differs depending on your relationship with Promenada Novi Sad.

To receive more information choose the category below that is applicable to you:

In all cases, you have several rights that can be exercised, individually or cumulatively, with respect to personal data that Promenada Novi sad holds in relation to you. Information on these rights as well as how they can be exercised is available in the Rights of data subjects section .

We undertake to process personal data in compliance with applicable legislation on the protection of personal data and good practices in this area. More information is available in the section on Data security and accuracy.

In addition, a Data Protection Officer has been appointed at the NEPI Rockcastle Group level, who can be contacted should there be any concerns about the protection of personal data and the exercise of data protection rights. The Data Protection Officer can be contacted by written, dated and signed request, using the contact details mentioned below:

 

1 Visitors to the shopping centre website

When you access the Promenada Novi Sad  website (the “Website“) or choose to create an account on the Website (the “Account “), some of your personal data will be processed by Promenada Novi Sad mainly to be able to provide you with the requested service, that is the access to the Website or to your Account.

 

1.1 Personal data we process

  • Identification data, such as: first name and last name, date of birth
  • Account access data, such as: password
  • Contact details, such as: email address, phone number
  • Data on your preferences/interests, such as data on areas of interest – e.g., fashion, technology, pets, etc.
  • Data about your interaction with the Website, such as: information about the stores you searched for, the fact that you chose a series of products/services as favourites or that you selected a series of events that you want to participate in, as well as the recurrence with which you visit our Website/access the Account.
  • Demographic data, such as: gender, city and neighbourhood where you live, whether you are married or not, whether you have children or not, the number of children and their age
  • Data on the participation in promotional campaigns and similar events, such as: prizes won, image
  • Financial data, such as: bank account number.
  • Data collected through cookies or other similar technical means (i.e., small text files that are stored on your computer, phone, tablet or mobile device, and contain information about your activity on those sites/applications), e.g.: sub-pages accessed, period spent on a specific page
  • Data from social networks, such as: the unique identification code provided by the Facebook network

The processing of personal data marked as mandatory fields in certain forms available on the Website (i.e., first name, last name, e-mail address, telephone number, location data) is considered necessary for the provision of services accessible through the Account. Thus, it is necessary to communicate such personal data to Promenada Novi Sad, because certain functions provided by the Account can be operated with their help. The refusal to provide such data determines the impossibility of Promenada Novi Sad to ensure the Account functions.

In the case of the Website, we also collect your IP, but this data is not processed or used for any subsequent purpose at this time.

 

1.2 Use of personal data

No. Purpose of processing personal data Legal basis of processing personal data
1.   Facilitate access to the Account (including checking the minimum age of 16 to provide access to the Account) Perform the contract concluded regarding the provision of our services (i.e., in accordance with the Terms and Conditions of the Website)
2.   Provide you with the services of the Account (e.g., use of the Account functions) Perform the contract concluded regarding the provision of our services (i.e., in accordance with the Terms and Conditions of the Website)
3.   Contact you in order to inform you about the Account (i.e., no marketing nature – the information related to the Account settings) Perform the contract concluded regarding the provision of our services (i.e., in accordance with the Terms and Conditions of the Account)
4.       Send direct marketing messages, through the means of communication for which you gave us your consent at the time of creating the Account in order to promote our activities, offers and products, the Group, but also the Partners More information about Promenada Novi Sad Partners is available  here Consent   Please note that marketing messages can be sent both as a result of the creation and analysis of profiles, and independently.
5.   Create and analyse profiles about you in order to present content tailored to your preferences and to improve our services See more details on how to identify your preferences here Your consent
6.   Send general direct marketing messages (newsletter) via the e-mail provided when subscribing to the newsletter, in order to promote our activities, offers and products, the Group, but also the Partners           More information about Promenada Novi Sad Partners is available  here Your consent
7.   Organise raffles, competitions or other similar campaigns Perform the contract concluded (i.e., in accordance with the Regulation of the concerned raffle, competition or campaign)
8.   Conduct direct marketing campaigns for specific regions or Waze users Your consent
9.   Manage and operate the accounts on the social networks of the shopping centre; conduct campaigns on social networks Your consent
10.           Conduct surveys or other market research Our legitimate interest in promoting the shopping centre and better understanding the market demands
11.           Carry out internal analyses (including statistical analyses, reports) on the customer portfolio, for the improvement and development of services, as well as conduct studies and market analyses for the improvement and development of Promenada Novi Sad Group and Partners services               More information about the Promenada Novi Sad Group and Partners      is availablehere Our legitimate interest consists in market knowledge, strategic development, development and improvement of our services
12.           Carry out economic, financial and/or administrative management activities Legal obligation
13.           Settlement of disputes, investigations or any other petitions/complaints to which Promenada Novi Sad is a party Legitimate interest in defending our rights in court/in front of any competent authority
14.           Archiving Legal obligation
15.           Carry out risk controls on   Promenada Novi Sad procedures and processes, as well as conduct audits or investigations of Promenada Novi Sad Our legitimate interest in managing risks and ensuring compliance with Mega Mall procedures and processes
16.           Ensure a high level of security of information systems (e.g., applications, network, infrastructure, website) Our legitimate interest in ensuring the security of our computer systems
17.           Provide you with support services when you request so Perform the contract concluded regarding the provision of our services (i.e., in accordance with the Terms and Conditions of the Website)
18.           Document your consent Legal obligation
19.           Use of marketing cookies for the purpose of:     –         conducting profiling activities, also called web profiling which involves the use of cookies   –         to track online the general activity of a user in order to present content tailored to his preferences, –         conducting targeting and retargeting campaigns                     More information on cookies is available in the Cookie Policy: here      Your consent
20.           Create statistics designed to provide information about the performance of the Website and the marketing campaigns displayed (e.g. the number of users who accessed the campaign page, the number of users who saw the campaign banner, etc.), made by using analysis cookies       More information on cookies is available in the Cookie Policy: here  Our legitimate interest in (i) improving the content of the Website and the campaigns conducted on the Website as well as the better evaluation of the performance indicators (KPI) of the commercial campaigns carried out on the Website and (ii) ensuring the operation, access and technical use of the Website and providing you with the services you have explicitly requested
21.             Use of cookies necessary to ensure the operation of the Website More information on cookies is available in the Cookie Policy  here Perform the contract regarding the provision of our services (i.e. ensuring access to the Website)

 

1.3 Additional information on profiling activity

Promenada Novi Sad will create and analyse your profiles based on the personal data we hold about you – data about your preferences/interests, data about your interaction with the Website, data collected through cookies. As a result of analysing such data, we will be able to identify your preferences, interests and capabilities in terms of procurement, and thus relate them to the services we provide or to the products we promote.

Then, through automated procedures, Promenada Novi Sad sets the content of the direct marketing materials that will be sent to you. In the legal language these automated procedures are referred to as “automated individual process“.

Thus, the direct marketing materials that we will send you will be as specific, convincing and applicable as possible to you, and as a consequence may influence you (i.e. in the sense of purchasing the product/service included in the marketing material), as Promenada Novi Sad manages to correctly identify your preferences or characteristics.

With regard to the processing of data by automated individual processes, you have several additional rights, i.e. you can (a) obtain human intervention, (b) express your point of view, (c) get explanations about the decision made and (d) contest that decision. In addition, you can withdraw consent at any time in the manner prescribed in this Memorandum in the section dedicated to Data subjects rights.

 

1.4 Storage period

The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.

If you have an account, your personal data is processed and stored by Promenada Novi Sad from the moment you choose to create an Account on the Website until the moment you choose to delete your Account. Once you choose to delete your Account, your data will be stored by Promenada Novi Sad for an additional period of 3 years, in the legitimate interest of Promenada Novi Sad so that it is able to access and provide the necessary documentation in case of a potential lawsuit, complaints, investigations.

Regarding the use of your personal data for direct marketing activities, they will be stored by Promenada Novi Sad from the moment you gave us your consent for this processing until the date you withdrew it. After the moment you choose to withdraw your consent, your data will be stored by Promenada Novi Sad, for an additional period of 3 years, in the legitimate interest of Promenada Novi Sad so that it is able to access and provide the necessary documentation in case of a potential lawsuit, complaints, investigations carried out (i.e., but not used for the transmission of direct marketing materials).

 

1.5 Third party access

Access to your data will be provided only to those persons or entities with whom we collaborate in fulfilling the purposes of processing, and for whom we (we or the intended recipients) can justify a legitimate reason or if we have a legal obligation to provide your data.

The following entities and their employees will have access to your data:

  • IT service providers (e.g., software maintenance and development, site maintenance and development),
  • Marketing service providers, including market research service providers, marketing communications service providers, online tool traffic and behaviour monitoring service providers, various marketing customization service providers, providers of marketing services through social media resources, providers of services for the preparation of the content of marketing forms,
  • Group companies

As  is part of the Nepi Rockcastle group of Promenada Novi Sad companies (the “Group“), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (Promenada Novi Sad or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of the Group companies can be found at the following address:  https://megamallbucuresti.ro/wp-content/uploads/2018/05/Societati-GRUP.pdf

  • Promenada Novi Sad partners

Your personal data will also be processed in relation to a number of third party partners (“Partners“). They are the partners that Promenada Novi Sad promotes in its relationship with you by direct marketing and are usually the tenants of Promenada Novi Sad The partners do not have access to your personal data, except if  Promenada Novi Sad obtained your prior agreement in this respect. The complete list of Partners is updated on a quarterly basis and can be consulted here https://promenadanovisad.rs/wp-content/uploads/2020/06/Third-Party-and-Associate-Partners.pdf

We will contractually require these entities, as well as their staff, to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

As a rule, Promenada Novi Sad will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, Promenada Novi Sad will take appropriate protection measures to ensure the protection of the personal data transferred.

 

2 Visitors and customers of the shopping centre

 

2.1 Personal data we process

  • Identification data, such as: first name and last name, date of birth
  • Special identification data, that is personal identity number
  • Contact details, such as: email address, phone number
  • Image
  • Data on the vehicle for which a parking space is granted in the car park of the shopping centre, e.g.: make, type and registration number
  • Data on access to the shopping centre car park, e.g.: arrival time, departure time, length of stay
  • Device MAC (mobile, laptop, tablet)
  • Data on participation in promotional campaigns and similar events, e.g.: prizes won
  • Financial data, e.g.: bank account number

 

2.2 Use of personal data

No. Purpose of processing personal data Legal basis of processing personal data
1.             Video surveillance by means of the cctv system installed inside the shopping centre, in the common areas, access roads, as well as car park areas Legitimate interest in ensuring the security of persons and property inside the shopping centre
2.    Facilitate access to the car park of the shopping centre Perform the contract regarding the provision of our services (i.e. Granting access to the facilities and services provided by the shopping centre)
3.    Take and use photos (which also include your image) in order to promote the shopping centre Your consent
4.    Solve requests for data and information received from the competent authorities and institutions Legal obligation
5.    Grant access to the free WiFi network Perform the contract regarding the provision of our services (i.e. granting access to the facilities and services provided by the shopping centre)
6.    Organise raffles, competitions, events or marketing campaigns in the shopping centre, including handing out prizes won Perform the contract concluded (i.e., in accordance with the Regulation of the concerned raffle, competition or campaign)
7.    Management of notifications/complaints submitted within the shopping centre Our legitimate interest in resolving complaints sent to us and in maintaining good relations with visitors/customers of the shopping centre
8.    Management of requests regarding lost objects, filed inside the shopping centre Perform the contract regarding the provision of our services (i.e. granting access to the facilities and services provided by the shopping centre)
9.    Carry out economic, financial and/or administrative management activities Legal obligation
10.           Settlement of disputes, investigations or any other petitions/complaints to which Promenada Novi Sad is a party Legitimate interest in defending our rights in court/in front of any competent authority
11.           Archiving Legal obligation
12.           Carry out risk controls on  Promenada Novi Sad procedures and processes, as well as conduct audits or investigations of Promenada Novi Sad Our legitimate interest in managing risks and ensuring compliance with Promenada Novi Sad  procedures and processes

 

2.3 Storage period:

The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.

Depending on the context in which we process your personal data, the following rules for determining the storage period will apply:

  • CCTV system: Video recordings stored by the CCTV system are usually kept for a period of 30 (thirty) days, unless the extension of their processing period is required by law or justified by legal procedures.
  • WiFi network: The device’s MAC is only stored during the period when it uses our WiFi network.

 

2.4 Third party access:

Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the Data Protection Law or if we have an obligation legal to provide your data.

The following entities and their employees will have access to your data:

  • Security and security service providers – To ensure CCTV video surveillance and access control system in parking spaces, Promenada Novi Sad collaborates with specialised companies, authorised by law to carry out security and surveillance activities.
  • Other service providers – With regard to participation in campaigns and events, as well as the handling of complaints, grievances and/or requests regarding lost items addressed to the staff of the Info Desk offices within the shopping centres, Promenada Novi Sad usually collaborates with specialised service companies.
  • Group companies

As Promenada Novi Sad is part of the Nepi Rockcastle group of companies (the “Group“), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (Promenada Novi Sad or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of Group companies can be found at the following address:  https://megamallbucuresti.ro/wp-content/uploads/2018/05/Societati-GRUP.pdf

  • Promenada Novi Sad partners

Your personal data will also be processed in relation to a number of third party partners (“Partners“). They are the partners that Promenada Novi Sad promotes in its relationship with you by direct marketing and are usually the tenants of Promenada Novi Sad .The partners do not have access to your personal data, except if Promenada Novi Sad obtained your prior agreement in this respect. The complete list of Partners is updated on a quarterly basis and can be consulted here – https://promenadanovisad.rs/wp-content/uploads/2020/06/Third-Party-and-Associate-Partners.pdf

  • Promenada Novi Sad Property Manager.

We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

As a rule, Promenada Novi Sad will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, Promenada Novi Sad will take appropriate protection measures to ensure the protection of the personal data transferred.

 

3 Representatives of the contractual partners (suppliers/tenants of shopping centres/collaborators)

 

3.1 Personal data we process

  • Identification data, such as: first name and last name, date of birth
  • Contact details, such as: email address, phone number
  • Occupational data, such as: position held, company in which you are employed or which you represent

 

3.2 Use of personal data

No. Purpose of processing personal data Legal basis of processing personal data
1. Concluding and executing leases or other commercial contracts Legitimate interest in carrying out our activity and validly concluding commercial contracts agreements specific to our field of activity (i.e. commercial spaces lease agreements)
2. Contacting possible future tenants of the shopping centre (prospective tenants) Legitimate interest in promoting our business and promoting the shopping centre to potential tenants (prospective tenants)
3. Carry out know-your-customer (KYC) checks in relation to potential contractual partners Legal obligation
4. Carry out economic, financial and/or administrative management activities Legal obligation
5. Settlement of disputes, investigations or any other petitions/complaints to which Promenada Novi Sad is a party Legitimate interest in defending our rights in court/in front of any competent authority
6. Archiving Legal obligation
7. Carry out risk controls on Promenada Novi Sad procedures and processes, as well as conduct audits or investigations of Promenada Novi Sad Our legitimate interest in managing risks and ensuring compliance with Promenada Novi Sad procedures and processes

 

3.3 Storage period

The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.

 

3.4 Third party access

Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the Data Protection Law or if we have an obligation legal to provide your data.

The following entities and their employees will have access to your data:

  • Group companies

As Promenada Novi Sad is part of the Nepi Rockcastle group of companies (the “Group“), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (Promenada Novi Sad or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of the Group companies can be found at the following address: https://megamallbucuresti.ro/wp-content/uploads/2018/05/Societati-GRUP.pdf

We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

As a rule, Promenada Novi Sad will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, Promenada Novi Sad will take appropriate protection measures to ensure the protection of the personal data transferred.

 

4 Staff of suppliers, collaborators or tenants of the shopping centre

 

4.1 Personal data we process

  • Identification data, such as: first name and last name, date of birth
  • Contact details, such as: email address, phone number
  • Image
  • Device MAC (mobile, laptop, tablet)

 

4.2 Use of personal data

No. Purpose of processing personal data Legal basis of processing personal data
1. Video surveillance by means of the CCTV system installed inside the shopping centre, in the common areas, access roads, as well as car park areas Legitimate interest in ensuring the security of persons and property inside the shopping centre
2. Legitimate interest in ensuring the security of persons and property inside the shopping centre Grant access to tenants’ staff inside the shopping area outside the hours when the shopping centre is open
3. Solve requests for data and information received from the competent authorities and institutions Legal obligation
4. Grant access to the free WiFi network Perform the contract regarding the provision of our services (i.e. granting access to the facilities and services provided by the shopping centre)
5. Management of notifications/complaints submitted within the shopping centre Our legitimate interest in resolving complaints sent to us and in maintaining good relations with visitors/customers of the shopping centre
6. Management of requests regarding lost objects, filed inside the shopping centre Our legitimate interest in resolving complaints sent to us and in maintaining good relations with visitors/customers of the shopping centre
7. Carry out know-your-customer (KYC) checks in relation to potential contractual partners Legal obligation
8. Carry out economic, financial and/or administrative management activities Legal obligation
9. Settlement of disputes, investigations or any other petitions/complaints to which Promenada Novi Sad is a party Legitimate interest in defending our rights in court/in front of any competent authority
10. Archiving Legal obligation
11. Carry out risk controls on Mega Mall procedures and processes, as well as conduct audits or investigations of Promenada Novi Sad Our legitimate interest in managing risks and ensuring compliance with Promenada Novi Sad procedures and processes

 

4.3 Storage period

The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.

Depending on the context in which we process your personal data, the following rules for determining the storage period will apply:

  • CCTV system: Video recordings stored by the CCTV system are usually kept for a period of 30 (thirty) days, unless the extension of their processing period is required by law or justified by legal procedures.
  • WiFi network: The device’s MAC is only stored during the period when it uses our WiFi network.

 

4.4 Third party access

Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the Data Protection Law or if we have an obligation legal to provide your data.

The following entities and their employees will have access to your data:

  • Security and security service providers – To ensure CCTV video surveillance and access control system in parking spaces, the landlord collaborates with specialised companies, authorised by law to carry out security and surveillance activities.
  • Other service providers – With regard to the handling of complaints, grievances and/or requests regarding lost items addressed to the staff of the Info Desk offices within the shopping centres, Promenada Novi Sad usually collaborates with specialised service companies.
  • Promenada Novi Sad Property Manager.

We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

As a rule, Mega Mall will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, Promenada Novi Sad will take appropriate protection measures to ensure the protection of the personal data transferred.

 

5 Security and accuracy of personal data

We will take all necessary security measures to protect your personal data transmitted, stored or otherwiseprocessed against destruction, loss, unlawful or accidental change, unauthorised disclosure or unauthorised access, as well as against any other unlawful processing. The security measures we implement with regard to your personal data can ensure the confidentiality, integrity, availability and continued resilience of processing systems and services, as well as the capacity to restore the availability of and access to personal data in a timely manner if a physical or technical incident occurs.

All personal data will be processed through secure pages using the SSL encryption system, marked with a padlock symbol, located at the top of the browser window.

For more information on security standards on the Website, go to the “Help” section.

In addition, for the security of the data and the confidentiality of the information transmitted through the Account, it is password protected. Promenada Novi Sad makes all necessary efforts and uses appropriate IT technologies to ensure the protection and security of the data you provide us.

In the cases provided by the Data Protection Law in connection with personal data breaches, Promenada Novi Sad will properly inform the relevant authorities and relevant persons.

Promenada Novi Sad processes personal data that is accurate and has an updated procedure in place. Thus, Promenada Novi Sad takes all necessary steps to ensure that inaccurate personal data, in view of the processing purposes, are erased or rectified without delay.

 

6 Rights of the data subjects with respect to the processing of personal data:

(a) Right of access – the right to request confirmation that the personal data are processed or not by us, and if so, the data subject may request access to the data, as well as certain information about such data. Upon request in this respect, we will also issue a copy of the processed personal data. Request for additional copies will be charged on the basis of the costs actually incurred.

(b) Right to rectification– the right to get the inaccurate personal data rectified, as well as to supplement incomplete data, including by providing additional information.

(c) Right to delete data (“the right to be forgotten“) – in situations expressly regulated by law, the right to obtain from us the deletion of the data. Thus, the deletion of personal data can be requested if:

  • the data are no longer necessary for the purposes for which they were collected or processed;
  • withdrawal of the consent on the basis of which processing is carried out;
  • the data subject opposes to the processing under the right of opposition;
  • processing of personal data is illegal;
  • the data must be deleted for the purpose of complying with a legal obligation incumbent on us.

(d) Right to restrict processing– the right to request the restriction of processing of personal data in certain circumstances expressly regulated by the law, as follows:

  • the accuracy of the data is contested, for the period when the accuracy of the concerned data is checked;
  • the processing is unlawful and the data subject opposes to the deletion of data;
  • the data subject needs these data to establish, exercise or defend certain rights in court, and our company no longer needs such data;
  • the data subject opposes to the processing of personal data for the period in which we check if our legitimate interests prevail over their interests, rights and freedoms.

In these circumstances, except for storage, the data will not be processed anymore.

(e) Right to object to the processing of personal data – the right to object at any time, for reasons related to the particular situation of the data subject, to the processing (including the creation of profiles) based on our legitimate interest.

(f) Right to data portability– the right to receive the personal data provided in a structured, automated readable format, and the right to request that the data be passed to another controller. This right applies only to personal data provided directly by the data subject to the controller, and only if the processing of personal data is done by automated means and is legally based on either the execution of a contract or the consent of that person

(g) The right to lodge a complaint – the right to lodge a complaint in relation to the methods of personal data processing. The complaint will be submitted to the National Authority for the Supervision of Personal Data Processing (“ANSPDCP“) – details at ro.

(h) Right of withdrawal of consent – the right to withdraw, at any time, the consent to the processing of personal data in cases where processing is based on consent. Withdrawal of the consent will only have effect for the future, and processing prior to the withdrawal remains valid.

(i) Additional rights related to automated decisions used in the delivery of services – if automated decisions are made about personal data and these decisions significantly affect the data subject, the data subject can (a) obtain human intervention with respect to said processing, (b) express their point of views on such processing, (c) obtain explanations regarding the decision made and (d) contest such decision.

These rights (except the right to contact ANSPDCP, which can be exercised under the conditions established by this authority – in this regard you can see the official website www.poverenik.rs) may be exercised, anytime, either individually or by aggregation, sending a letter/message in the following ways:

You can exercise the right to withdraw your consent for the transmission of direct marketing messages (newsletter) by e-mail, by accessing the dedicated unsubscribe link (unsubscribe), included in each message of this kind.