Privacy Policy

Our website is intended to provide information to clients and other interested parties about VERIDOS NETSET and other members of international Giesecke+Devrient group we belong to (hereinafter: “Group”), as well as our products and services.

This Privacy Policy is designed to clearly and transparently inform you about the personal data we collect during your visit to our website, the legal basis for processing such data, the purposes of use, retention periods, protection measures and your rights before the Commissioner for Information of Public Importance and Personal Data Protection (hereinafter: “Commissioner”).

The owner of the website www.veridosnetset.com is the company VERIDOS NETSET, with its registered seat at Pariske Komune no. 24, Municipality of New Belgrade, Belgrade, registered with the Business Registers Agency of the Republic of Serbia under company number 17543148 and tax identification number 103376982 (hereinafter: “VERIDOS NETSET”, “Company”, “Controller”, “we”, “our”).

All personal data collected through the use of this website and the actions taken on it are processed by VERIDOS NETSET, in its capacity as the controller of personal data, in accordance with the Law on Personal Data Protection of the Republic of Serbia (“Official Gazette of RS”, no. 87/2018) (hereinafter: the “Law”) and the principles of data processing set out therein.

This Privacy Policy has been prepared in accordance with the rules set out in the Law. For all matters not regulated by this Privacy Policy, the provisions of the Law shall apply, and in the event of any discrepancies, the provisions of the Law shall prevail.

Data We Collect

During your visit to our website, certain personal data may be collected in order to ensure the functionality of the site and to enable communication with you. Data are collected in two ways – directly from you and automatically through the website’s technical systems.

When you contact us through the contact form on our website or by e-mail, we process the data you provide, which may include:

When you simply visit the website, the following data are recorded automatically:

Legal Basis for Data Processing

The legal basis for the processing of personal data is the Law.

We process your personal data for different purposes, depending on the nature of your interaction with our website and on the basis of:

Your Consent

We process personal data based on your consent. This means that processing takes place when you voluntarily provide us with your data, for example through the contact form on our website, by e-mail, by subscribing to a newsletter, or by registering for an event.

Based on your consent, we process data for the following purposes:

responding to your requests or inquiries and providing the requested information,
using cookies and similar technologies to tailor content to your needs and interests,
optimizing our online activities (website traffic reporting, contact management and for purposes of CRM – collection, storage and management of consents for the use of cookies, landing pages and contact forms),
sending newsletters, informational and marketing messages,
informing you about events, services, and products of VERIDOS NETSET and other members of the Group.

You may withdraw the consent you have given at any time with effect for the future, without affecting the lawfulness of processing carried out prior to the withdrawal.

Maintaining legitimate interests

We may also process personal data based on the legitimate interests, where this is necessary to ensure the secure and stable operation of the website, to improve the user experience, or to protect our rights and interests.

In this context, processing is carried out with due regard to your rights and interests, and wherever possible we use anonymized or pseudonymized data. This includes, for example, the analysis of website usage in order to further improve our website.

Fulfillment of contractual obligations

We process personal data where this is necessary for the performance of a contract concluded with you, or to take steps prior to entering into a contract.

This may include, for example, communication initiated through the website that leads to the establishment of a business relationship, as well as responding to your inquiries.

Cookies

Our website uses cookies, which are small text files stored in your browser directories that ensure the proper functioning of the website, enhance the user experience, collect statistical data on website traffic and other purposes.

When you visit our websites for the first time, a cookie banner is loaded. This allows you to accept or reject cookies or similar technologies and services. This gives you control at all times over whether we set cookies on your device, and if so, which ones.

The cookies we use include:

- Essential cookies enabling basic website functionality and cannot be disabled on your systems If the data processed by means of essential cookies is considered personal data, our legitimate interest in operating the website constitutes the legal basis for processing this data.
- Functional cookies improving the website’s functionality and user experience based on collected data about user interactions (e.g. Google Fonts) and services enabling the collection, storage and management of consents for the use of cookies (e.g. Usercentrics CMP). Your consent – if given – constitutes the legal basis for the processing of this data.
- Marketing cookies enabling the tracking of visits for the purpose of displaying relevant advertisements on other platforms (e.g. Google Tag Manager). Your consent – if given – constitutes the legal basis for the processing of this data.

Purpose of Data Processing

The personal data we collect are processed for the purposes of:

responding to your inquiries and maintaining further contact,
ensuring the stable and secure operation of the website,
conducting basic statistical analysis of website traffic and improving the user experience.
carrying out marketing activities, such as sending newsletters and providing information about events

Storage period

We retain your personal data only for as long as necessary to fulfil the purpose of processing, unless applicable legal requirements mandate a longer retention period.

Once the need for processing ceases, the data are deleted or anonymized at the earliest possible time, and the accompanying documentation is permanently destroyed.

Data processed in connection with disputes or legal proceedings are retained for the duration of the proceedings or the statutory limitation period, whichever is longer.

Where we process data on behalf of our clients, the retention periods are determined by the contract and the client’s instructions.

Disclosure of data to third parties and data transfers

We do not share your personal data with third parties without your prior consent or other legal basis.

Data may be made available exclusively to:

our technical support and hosting service providers, to the extent necessary for the maintenance and functioning of the website,
state authorities or other competent bodies, if required by law or a final decision of a competent authority,
if your request or inquiry relates to the business of Group members and when you voluntarily provide us with your data (for example through the contact form on our website or by email), the data may be transferred to the Group members based in EU countries and/or countries that are parties to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

In all cases, we take appropriate measures to ensure that third parties act in compliance with data protection regulations.

Your rights

In accordance with the Law, you have the following rights regarding the processing of your data:

Right to be informed – to be informed about which data we collect, for what purposes, and how we process them.
Right of access – to request confirmation of whether we process your data and to receive a copy of such data.
Right to rectification – to request that your data be corrected or supplemented if they are inaccurate or incomplete.
Right to erasure – to request the deletion of your data where there is no longer a legal basis for processing them.
Right to restriction of processing – to request, in certain situations, that the processing of your data be temporarily suspended.
Right to data portability – to request a copy of your data in a structured format and transfer it to another controller.
Right to object – to object to the processing of your data when such processing is based on legitimate interest.

You also have the right to lodge a complaint with the Commissioner if you believe that your rights have been violated.

Data Security

The Company implements appropriate technical and organizational measures to ensure the protection of personal data against unauthorized access, misuse, alteration, loss, or destruction. These measures include the use of secure servers, data encryption during transmission, restricting access to data solely to authorized persons, and engaging qualified personnel responsible for security.

Protective measures are regularly adapted in line with technological developments and best practices in the field of data protection. Nevertheless, given the nature of the Internet, data transmission can never be entirely risk-free. For this reason, we cannot guarantee absolute security of data during transmission over the Internet to our website. Once we receive your data, we take all reasonably necessary measures to ensure their continued protection.

Commissioner for Personal Data Protection

The supervisory authority for personal data protection in the Republic of Serbia is the Commissioner. You can contact the Commissioner at Bulevar kralja Aleksandra 15, 11000 Belgrade, Republic of Serbia, by e-mail at office@poverenik.rs, or by phone at +381 11 3408 900.

Notification of the Commissioner on Personal Data Breaches

The Controller is obliged to notify the Commissioner of any personal data breach that may result in a risk to the rights and freedoms of natural persons without undue delay and, where feasible, no later than 72 hours after becoming aware of the breach. The minimum content of the notification is prescribed in Article 52 of the Law on Personal Data Protection.

Changes to the Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in the way we process data or to reflect changes in legal and regulatory requirements. All amendments will be published on this page, indicating the date of the latest version. We recommend that you review this document periodically in order to remain informed about which of your data we process and how we protect the data collected.

Contact

If you have any questions, requests, or complaints regarding the processing of your personal data, you may contact us by sending a written request to the Company’s registered address:

VERIDOS NETSET

Address: Pariske Komune br. 24, 11070 Novi Beograd, Beograd, Srbija