Last modified date of the Personal Data Processing Notice: 02. October 2024.

Privacy Policy

The Policy contains the following information by the Law on Personal Data Protection of the Republic of Serbia, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation or GDPR):

The purpose of the Personal Data Protection Policy (hereinafter referred to as the Policy) is to inform individuals, users, and other parties (hereinafter referred to as Data Subjects) about the purpose and legal basis for processing personal data by "Taraba Tech" Taraba d.o.o., Belgrade, Bulevar Maršala Tolbuhina 44/10, 11070 Novi Beograd (hereinafter referred to as Taraba Tech), as well as the rights of Data Subjects in this area.

The Policy contains the following information in accordance with the Law on Personal Data Protection of the Republic of Serbia, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals about the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation or GDPR):

Contact information for Taraba Tech and contact details of the Data Protection Officer,
Purposes, legal bases, and types of processing of various types of personal data of Data Subjects, including profiling of Data Subjects' personal data,
Transfer of data to third parties and to third countries,
Retention periods for certain types of personal data,
Data Subjects; rights regarding the processing of personal data,
The right to lodge a complaint regarding the processing of personal data.

The controller of personal data of Data Subjects processed in accordance with the Personal Data Protection Policy is Taraba d.o.o., Within Taraba Tech, a Data Protection Officer has been appointed, a data protection officer, who is available via email: privacy@taraba.tech.

Given the legal regulations in the field of personal data privacy of individuals, primarily the new Law on Personal Data Protection (hereinafter referred to as the LPDP), it is very important that you carefully read this Notice to be informed about the types of personal data we most commonly process, for what purposes we process your personal data, who has access to your data, and especially to be informed about your rights regarding the processing of personal data. We take care to protect your personal data and fully support your rights as users provided by the LPDP.

Personal data is any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier such as name and identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Questions, complaints, requests, and additional information about the Privacy Notice, personal data protection, and exercising your rights can be addressed by sending an email to: privacy@taraba.tech.

Our Websites:

Taraba Tech - Tailored Web Solutions to Boost Your Business Performance
Oakly - Stop wrestling with event management software.
Bolt - No QR code left behind
Taraba Education - We learn, we do, we teach.
Testiranje - QA conference
Taraba Portal - For some, it's a hashtag, for some, it's тараба.

By visiting our websites, you accept our privacy guidelines.

Changes to the Privacy Policy:

Our Privacy Policy may be updated periodically, so please check to ensure you are familiar with the latest version. We will endeavor to post information about such changes related to the application of the Privacy Policy at least 30 days before we apply them. Additionally, you should periodically review other terms relating to your use of the websites.

Data Collection

We collect various types of information, including:

Personal data (e.g., name, email address, phone number)
Technical information (e.g., IP address, browser type, device details)
Usage data (e.g., website visits, interactions with our services)

Our Legitimate Interest

To achieve our business purposes, we process your personal data based on legitimate interest. Of course, we do this only if your interests or fundamental rights and freedoms do not outweigh our legitimate interests. We use legitimate interest to:

Diagnose technical issues with the Service.
Maintain your user account, respond to your requests, and address any complaints.
Better understand you as users through your behaviors, interests, and preferences.
Protect our business and provide support to our users.
Test and develop new products and services and improve existing ones.
Identify and protect users of the Service and the Service itself from fraud or illegal activities.

Legal Basis for Data Processing

We rely on the following legal bases for data processing:

Consent (where applicable)
Contractual necessity
Legal obligations
Legitimate interests

Your Rights Regarding the Personal Data We Process

As a data subject, you have the right to:

Access your personal data
Correct inaccurate information
Erasure of data (subject to legal requirements)
Object to processing
Restrict processing
Data portability
Lodge a complaint with the competent authority: the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection – Bulevar kralja Aleksandra 15, 11120 Beograd, phone: +38111 3408 900, email: office@poverenik.rs.
All other rights provided by legal regulations: The data subject may exercise their rights by sending a request to the email address privacy@taraba.tech.

Compliance with the GDPR General Data Protection Regulation.

We respect the principles of the GDPR, including:

Transparency: Our privacy guidelines explain how we handle data.
Lawfulness: We process data in a lawful and transparent manner.
Purpose limitation: We collect data only for specific purposes.
Data minimization: We collect only necessary data.
Accuracy: We maintain data accuracy.
Storage limitation: We keep data only for as long as necessary.
Security: We protect data with appropriate measures.

Data Retention Policy

The data retention policy refers to the rules and guidelines the company applies regarding the retention and deletion of data.

This process defines how long specific data will be kept before being permanently erased or archived. Here are a few key points regarding the data retention policy:

Legal requirements: The data retention policy must comply with laws and regulations related to data retention. For example, some laws require financial data to be kept for a certain number of years.
Types of data: Different types of data may have different retention periods. For example, the personal data of clients may be kept longer than data on business transactions.
Business needs: The data retention policy should consider the company's needs. For example, data needed for business analysis may be kept longer.
Security: It's important to ensure that data remains secure throughout the retention period. This includes protection against unauthorized access and data loss.
Archiving: After the retention period expires, data may be archived or permanently deleted, depending on the company's policy.

Access to Your Data - Data Processors

Depending on the specific purpose, certain personal data of users may be accessed by:

Employees of the Company, as well as freelance and similar associates (who are committed to confidentiality), only to the extent necessary for processing purposes.
The Company, as part of a group of business entities, may share data with its related entities, when necessary and always within the scope of our legitimate interests and defined purposes.
Newly established entities or entities acquiring ownership of the Company, if the Company is involved in mergers, acquisitions, share purchases, sales, or other corporate changes.
Our partners, who perform certain processing tasks for the Company as processors, such as external collaborators providing specific services, as well as software companies that develop and maintain software where data is stored.
Exceptionally, personal data may be provided to competent state authorities if it is a legal obligation of the Data Controller, and only to the extent necessary to fulfill a specific legal obligation.
Any other recipient when reasonably necessary, e.g., in case of danger to life.

All recipients are obliged to take appropriate technical, organizational, and personnel measures to protect your personal data. In situations where we act as data controllers and data processing is carried out by a third legal entity as a processor on our behalf, we regulate relationships with processors by contract, which governs all essential aspects of personal data processing as well as protection measures.

In situations where advertising is carried out by Employment Agencies or related legal entities of Employers, sharing candidate data with other legal entities by the Employer is entirely within the competence of the Employer or the advertising Agency.

Transfer of Personal Data to Other Countries

Certain processors who may access personal data are based in foreign countries, primarily in EU member states or states party to the Council of Europe Convention 108. Data transfer to these countries is based on the default level of appropriate protection of personal data in those countries, in accordance with the law.

If certain processors are based outside the aforementioned group of countries, data transfer would only be possible with the application of the provisions of Article 65 of the ZZPL, regulating transfers with the application of appropriate protection measures.

Security of Your Data

In order to ensure the security of the data we process, we always strive to apply necessary standards in the protection of personal data, and to apply all necessary technical, organizational, and personnel protection measures in accordance with the requirements of the applicable ZZPL, including but not limited to: technical protection measures, protection measures relating to physical access to the place where your data is stored, information security measures for your data in accordance with applicable regulations, and other measures appropriate to the processing and necessary to ensure the protection of specific personal data.

Third-party processing data also has an obligation to apply all necessary technical, organizational, and personnel measures.

Cookie Policy

Cookies are small text files that websites place on visitors' computers to store various information. These cookies enable modern websites to function just as users expect – with higher levels of personalization and richer interactive functionality.

Different types of cookies are used for different purposes. For example:

Essential cookies enable basic website functions, such as logging into a user account or managing products and subscriptions.
Analytical cookies help track how you use the website, which helps solve problems and monitor performance.
Persistent cookies remain stored on the device until they are deleted or until their expiration date.

We always strive to apply necessary standards in the protection of personal data in accordance with laws and regulations. For more information about our cookie policy, you can visit this page. If you have any further questions, feel free to contact us at the email address: privacy@taraba.tech.

Consent and Withdrawal of Consent

If you have given us consent for processing, you can withdraw it at any time. In case you withdraw your consent, we will cease further processing of your personal data and delete such personal data within a maximum period of 90 days from the date you sent the withdrawal of consent. The withdrawal of consent is free, and you can submit it to the following email address: privacy@taraba.tech.

Back to Contact