PRIVACY POLICY

The policy applies to all personal data of users that we collect and process. Personal data is any data relating to an individual whose identity is determined or can be determined, directly or indirectly. Data processing is any action performed on personal data such as collection, storage, use, access, and transfer of personal data. Anonymous data is data that cannot be linked to a specific individual, and this Policy does not apply to such data. "POBJEDA-RUDET" d.d. Goražde respects the privacy of its clients and visitors to its website. "POBJEDA-RUDET" d.d. Goražde may, in accordance with the law, collect certain data about users obtained through the use of the website via cookies that do not contain personal data, as well as IP addresses that are automatically recorded in access logs. Blocking cookies is possible, but it disables access to all website content. Your data will be processed for the purpose of providing information about our offers, news, and events. All e-mails include the option to unsubscribe from the recipient list. The company collects the following personal data: • First and last name • Address • e-mail • Personal ID number (JMBG) • Contact number • Data on employees and their family members, for the purpose of their employment and salary payment and other material rights • Employee salary data • Personal data of job candidates and • Other data you share with us. • We collect personal data for a specific and lawful purpose: • Sending notifications about events, offers, and other useful information • Performing contracted services (maintaining records of customers and suppliers) • Maintaining records and accounting information related to employees Further data processing is in accordance with the purpose of collection, unless otherwise prescribed by law or based on the user’s consent. In accordance with personal data protection rights (GDPR – General Data Protection Regulation), upon your request you will be provided access to all your personal data we hold, information on processing methods, and the possibility to restrict processing, change, or delete data, unless another law prescribes otherwise. Protection of your data privacy is permanent, and "POBJEDA-RUDET" d.d. Goražde undertakes all necessary measures for their protection in accordance with applicable legal regulations. Personal data is processed in a secure manner, including protection from unauthorized and unlawful processing and from loss. Protection of your personal data means that: • Your personal data will not be used for any purpose other than the one stated here or contractually agreed • We will not provide your contact or personal data to any third party • Your contact and personal data may be disclosed to a third party only at your request (right to transfer), at the request of inspection authorities, or with a court order • You may unsubscribe from the e-mail list at any time unless legal provisions require otherwise. Data retention period We store and process personal data only as long as necessary to fulfil a specific legitimate purpose, unless a longer retention period is prescribed by applicable laws. In the case of providing consent to receive notifications and useful information, the data is stored until the consent is withdrawn. In cases where consent for further communication, sending notifications, and useful information is not given, the data is removed immediately. If you request deletion, it will be carried out immediately. Rights of data subjects Every data subject, in accordance with the GDPR law, has certain rights: Right to object – the data subject has the right to object to data processing, unless otherwise prescribed by law Right of access – the data subject has the right to obtain confirmation of the processing of personal data and access to such data in accordance with the law Right to erasure – the data subject has the right to request deletion of personal data relating to him/her without unnecessary delay and under the conditions set out in applicable data protection laws Right to rectification – the data subject has the right to request correction of inaccurate personal data Right to data portability – the data subject has the right to receive data in a machine-readable format if feasible. Data subjects may exercise their rights by contacting info@pobjeda.com. Personal data breach Any person who suspects that a personal data breach has occurred due to theft or exposure of personal data must immediately report the incident with a description of the event. Notification of the incident may be sent via e-mail to info@pobjeda.com or by phone at +387 (0)38 221 150. "POBJEDA-RUDET" d.d. Goražde will investigate all reported incidents to confirm whether a personal data breach has occurred and will take all legal measures to protect personal data. Lawfulness of processing "POBJEDA-RUDET" d.d. Goražde will process your data in a lawful and secure manner. If you believe that your data is being handled unlawfully and the issue cannot be resolved through communication, you have the right to file a complaint with the Supervisory Authority.