Pursuant to Article 23 of the Law on Personal Data Protection (“Official Gazette of the Republic of Serbia”, No. 87/2018, hereinafter: the “Law”) and pursuant to the General Data Protection Regulation (EU) 2016/679 (hereinafter: the “GDPR”), the Controller, Belgrade Fair d.o.o. Belgrade, company registration number: 07037457, tax identification number (PIB): 100000792, whose legal representative is Nikola Bankovic, Acting Director (hereinafter: the “Operator”), hereby issues the following:
NOTICE ON THE PROCESSING OF PERSONAL DATA
“Notice”
The purpose of this Notice is for the Operator to ensure the exercise and protection of the right to privacy of individuals who have purchased tickets for various events from the Controller (hereinafter: “customers/users”), as well as to inform them of their rights related to the processing of personal data.
Personal data being processed
First name, last name (surname), delivery address, telephone number, and your email address.
Purpose of the intended processing of data and legal basis for processing
The data are processed for the purpose of concluding and implementing a ticket sale agreement for various events, as well as for sending notifications regarding those events (e.g., changes to the event date, cancellations, etc.).
The processing is necessary for the performance and execution of a contract concluded with the subject to whom data relates or for taking steps at the request of the data subject prior to a contract conclusion.
Provision of personal data as a contractual obligation and a necessary condition for concluding contracts
The data in question constitute a necessary condition for concluding a contract for the purchase of tickets for a specific event.
Data Processor
Belgrade Fair d.o.o. Serbia
Transfer of personal data to another country or an international organization
The data are not transferred to another country or an international organization.
Recipients of the records
/
Data retention period and criteria for its determination
The data shall be retained for a maximum period of 10 years.
Rights of the data subject
The data subject has the right of access, the right to rectification, supplementation, erasure, restriction of processing, and data portability, as well as the right to object and the right not to be subject to automated individual decision-making. The data subject has the right to withdraw consent at any time, whereby the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
In the event of withdrawal of consent, the Operator shall no longer process the personal data of the data subject to whom the withdrawal relates, unless the Operator has a legal basis for the processing. Such requests by the data subject shall be submitted by email to: info@sajam.rs
The Operator shall respond to each request without undue delay, and in any event no later than within 30 days of receipt of the request, in accordance with Article 21 of the Law and Article 12 of the GDPR. The data subject may lodge a complaint regarding the processing of their personal data with the Commissioner for Information of Public Importance and Personal Data Protection.
Provision of personal data as a contractual obligation and a necessary condition for entering into a contract
Technical and organizational measures for the protection of personal data
The Operator and the Processor have implemented technical and organizational protection measures to ensure the security and integrity of personal data, and to protect the data from unauthorized access, malicious actions, loss, or disclosure to unauthorized third parties.
By accepting this Notice, the data subject acknowledges and agrees that their personal data listed in this Notice will be processed by the Operator and the Processor, and that such data may be accessed by employees and engaged personnel of the Operator and the Processor. Persons who access personal data are required to keep the data confidential and secure, and are obliged to use the personal data solely for the purposes described above.
Privacy Policy
Belgrade Fair d.o.o.
Bulevar vojvode Mišića 14, 11000 Belgrade, Serbia
Activity and activity code: 82.30 – Organization of meetings and fairs
Company registration number: 20102446
Tax Identification Number (PIB): 104159848
Website: https://sajam.rs/
E-mail: info@sajam.rs
Encrypted Orders
All your personal data will be transmitted using SSL (Secure Socket Layer) with 128-bit encryption (RSA 1024-bit), and therefore cannot be accessed or misused by third parties. This is currently the latest standard of internet security.
Certificate
Belgrade Fair d.o.o. is certified by Let’s Encrypt (https://letsencrypt.org/). The authorized certificate issuer guarantees the secure transmission of your data and the authenticity of our server.
reCAPTCHA Protection
This website is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Cookies
Cookies are alphanumeric packages of information with variable content sent by a web server and stored on the user’s computer for a predetermined period. The use of cookies allows certain visitor data to be collected and enables tracking of website usage. Cookies help monitor users’ interests, internet usage patterns, and website visit history to ensure an optimal user experience.
Since cookies serve as markers that allow a website to recognize a returning visitor, they can also store the current username and password for that website. If a browser sends a previously stored cookie, the service provider processing the cookie can link the user’s current visit with previous visits, but only in connection with their own content.
The information sent by cookies facilitates the recognition of web browsers, allowing users to receive relevant and “personalized” content. Cookies make browsing more convenient, including supporting online data security and relevant advertising. Using cookies, the service provider can also generate anonymous statistics on user browsing habits, which helps better tailor the website’s appearance and content.
The service provider’s website uses two types of cookies:
Temporary Cookies (Required) – session cookies (session-id) necessary for using the website. Their use is essential for navigation and for the proper functioning of the website. Without them, the website, or parts of it, may not display correctly, browsing may be disrupted, and adding tickets to the cart or making online payments may not function properly.
Persistent Cookies (Analytical and Marketing/Advertising) – which remain on the device depending on the web browser settings, either for a long period or until the user deletes them. Persistent cookies include internal and external cookies. Internal cookies are created when the service provider’s server installs a cookie and the data is transmitted to its own database. If a cookie is installed by the service provider’s server but the data is transmitted to an external provider, it is an external cookie. Third-party cookies, placed in the user’s browser by a third party (e.g., Google Analytics, Facebook Pixel), are external cookies. They are installed in the browser when the visited website uses services provided by a third party. The purpose of persistent cookies is to ensure that the website functions at the highest level to enhance the user experience.
When visiting the website, the user can give their consent for storing persistent cookies on their device, which the service provider can access by clicking the cookie notice button on the login page.
The user can also configure and block cookie-related activities through their web browser. Using cookie management, the user can typically enable or disable cookies, or access cookie-tracking options in the Privacy / History / Custom Settings menu under Tools/ Settings.
However, please note that without the use of cookies, the user may not be able to use every service offered by the website, particularly payment options. Purpose of data processing: to perform payment transactions with the payment service provider, identification and differentiation of users, identification of the user’s current session, storage of data generated during the session, prevention of data loss, user identification and tracking, and web analytics.
Scope of data processed: identification number, date, time, and previously visited web page. Data processing period: temporary cookies are stored until all websites of the same type are closed. Persistent cookies are stored on the user’s device for one year or until the user deletes them.
Possible consequences of failure to provide data: unavailability of certain website services, failed payment transactions, inaccuracies in analytics.
Belgrade Fair d.o.o. uses your email address only for the purpose of processing ticket orders, as well as for sending important notifications regarding the events for which you have purchased a ticket (such as changes of date, event cancellations, etc.).
Belgrade Fair d.o.o. will send you notifications about significant improvements to our website / web shop / purchasing process only with your prior consent. Promotional messages will also be sent exclusively with your prior consent.
Agreement
Our online service assumes mutual agreement for the use and storage of your data. Any changes in our operations relating to data security and confidentiality will be published on our website.
Protection of Personal Data
Registration, Collection, and Use of Information
During the purchase/registration process, we collect data such as your first name, last name, delivery address, phone number, and email address. In cases where the user registers via a Facebook or Google account, these data are used in accordance with the Facebook or Google Privacy Policy, to which the user has agreed. Your data will be used solely for the purpose of providing our service and processing payments. The first name, last name, and email address are printed on the e-ticket to prevent possible misuse.
Purpose of the intended data processing
The purpose of data processing is the performance of contractual obligations related to the purchase of tickets for various events.
Legal basis for data processing
The legal basis for processing is: the processing is necessary for the execution of a contract concluded with the data subject, or for taking steps at the request of the data subject prior to entering into a contract.
Provision of personal data as a contractual obligation and a necessary condition for entering a contract
The data in question constitute a necessary condition for concluding a contract for the purchase of tickets for a specific event.
Transfer of data to another country or international organization
The data are not transferred to another country or international organization.
Data retention period
The data are retained for 10 years.
Orders
You must provide contact information (such as your name, email address, phone number, and delivery address) and payment information (such as payment card number, expiration date, and cardholder name if you choose to pay by card). Belgrade Fair d.o.o. does not have access to payment card details; the entry of this information is carried out on the payment provider’s platform. We will use this information to issue an invoice and fulfill your order. Depending on the personal data you provide, an invoice will be sent to you with a purchase identification number and all other necessary information. If there are any issues completing your order, we will use this information to contact you.
Customer Relations
The personal information you provide will help us get in touch with you, respond to your inquiries, provide the services you have selected, and manage your account. If necessary, we may contact you by email or telephone.
Profile
We collect information received through cookies and log files, but we do not create any “profile” of your preferences. We may link your personal data to your purchases, but we will not share it with third parties.
Use and Disclosure of Data
We sometimes share your personal data with third parties and service providers. We use third parties to provide delivery services as well as to process credit card payments through our website. These companies store and use personal data in accordance with their own data protection policies.
If any third party that is not our agent or service provider requests information, you will be notified, and you will have the option to decide whether you want to provide your personal data to that client.
Disclaimer
We reserve the right to disclose your personal data if required by law, and if we believe that such disclosure is necessary to protect our rights and/or to comply with a legal investigation, court order, or legal process.
Opt-out / Unsubscribe
Upon request regarding your personal data, you also have the option to “opt-out” of using this information for certain purposes.
Log Files
In accordance with the practices of most websites, we automatically collect certain information and store it in log files. This information includes Internet Protocol (IP) addresses, browser type, Internet Service Provider (ISP), the pages from which you accessed our site, the page you visit next from our system, date and time of access, and clickstream data.
This information, which does not identify individual users, is used to analyze trends, administer the site, track user movement, and gather demographic information about our users in general. We do not link this data to personal data.
Links to Other Websites
This website contains links to websites that are not owned or controlled by Belgrade Fair d.o.o. We are not responsible for the privacy practices of these websites. We recommend that you review the privacy policy of each site that collects personal data and exercise caution when leaving our website. Our privacy policy applies only to the information collected on this website.
Access to Personal Information
If your personal information changes, you can correct or update it by entering the changes in the “User Account” field, or by sending an email to info@sajam.rs or by sending a letter to:
Belgrade Fair d.o.o., Bulevar Vojvode Mišića 14, 11000 Belgrade, Serbia.
Security
The security of your personal data is important to us. All your personal data will be transmitted using SSL (Secure Socket Layer) with 128-bit encryption (RSA 1024-bit), and therefore cannot be accessed or misused by third parties. This is currently the latest standard of internet security. Belgrade Fair d.o.o. is certified by Let’s Encrypt (https://letsencrypt.org/). The authorized certificate issuer guarantees secure transmission of your data and the authenticity of our server.
We use industry-accepted standards to protect your personal data, both during transmission and once it reaches us. However, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, despite the use of generally accepted standards and methods to protect your personal data, we cannot guarantee absolute security. To learn more about security on our website, you can contact us by email at info@sajam.rs or by mail at Belgrade Fair d.o.o., Bulevar vojvode Mišića 14, 11000 Belgrade, Serbia.
Business Changes
If Belgrade Fair d.o.o. undergoes business changes, such as mergers, acquisitions of another company, or the sale of a substantial part of its assets, your personal data will likely be part of the transferred assets. You will be notified of any significant change in ownership or control of your personal data via email or through an urgent notice on our website 30 days prior to the change.
Changes to the Privacy Statement
If we decide to change our privacy policy, we will publish these changes on our website and on other sites we consider appropriate. This will help you understand how data is collected and used, and under what circumstances it may be disclosed.
We reserve the right to modify this Privacy Statement, so please review it regularly. You will be notified of changes to our privacy policy either by email or via a notice on our website.
Rights of Data Subjects
Data subjects have the right to access, correct, supplement, delete, restrict, and transfer their data, as well as the right to object and the right not to be subject to automated individual decision-making. Data subjects have the right to withdraw consent at any time, and the withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.
In the event of withdrawal of consent, the Operator will not process the data of the data subject to whom the withdrawal relates, unless the Operator has a legal basis for processing.
Such requests should be submitted by email to: info@sajam.rs
The Operator will respond to each request without undue delay, and in any case, no later than 30 days from receipt of the request, in accordance with Article 21 of the Law and Article 12 of the GDPR.
Data subjects may lodge a complaint regarding the processing of their personal data with the Commissioner for Information of Public Importance and Personal Data Protection.
Contact Us
If you have any questions or suggestions regarding our privacy policy, you can send us an email at info@sajam.rs or by mail to: Belgrade Fair d.o.o., Bulevar vojvode Mišića 14, 11000 Belgrade, Serbia.
