Privacy Policy

Following the principles of legality, loyalty and transparency, we make this Privacy Policy available to you.

1. Who is the data controller?

Data Controller: Citronix - BER doo Beograd
Address: Bulevar Mihaila Pupina 115, 8 floor, 11070 New Belgrade, Serbia
Email address: info@citronix-ber.com

2. For what purpose do we process your personal data?

At Citronix - BER doo Beograd, depending on the category of interested party involved, we process the information you provide us with for the following purposes:

Data subjects and Purposes of processing

Potential customers: Manage the potential commercial and/or professional relationship, manage the sending of requested information and/or resolve queries, provide offers of our services and/or products of interest.

Customers: Manage the commercial and/or professional relationship, provide offers of our services and/or products of interest.

Providers: Manage the commercial and/or professional relationship.

Candidates: Manage the staff selection process.

Web Users: Manage the analysis of browsing data

3. What is the legitimacy for the processing of your data?

The legal basis for the processing of your personal data, depending on the category of interested party in question, may be:

Legal basis by Data subjects (article 6 GDPR)

Potential customer:

• Art. 6.1.b GDPR: implementation, at the request of the interested party, of pre-contractual measures (estimates, order forms, service offers, etc.).
• Art. 6.1.f GDPR: Legitimate interest (sending requested information, responding to queries, etc.).
• Art. 6.1.a GDPR: consent of the interested party (providing offers for our services and/or products).

Customers: Art. 6.1.b GDPR: execution of a contract to which the data subject is a party.

Providers: Art. 6.1.b GDPR: execution of a contract to which the data subject is a party.

Candidates: Art. 6.1.a GDPR: consent of the data subject.

Web Users: Art. 6.1.a GDPR: consent of the data subject.

The data we request from you is appropriate, pertinent and strictly necessary and you are under no obligation to provide it to us, but failure to provide it may affect the purpose of the service or the impossibility of providing it.

4. How long will we retain your personal data?

Your data will be retained for the minimum time necessary for the correct provision of the service offered, as well as to meet the responsibilities that may arise from it and any other legal requirement.

5. To which recipients will your data be communicated?

Citronix - BER doo Beograd will not communicate your data to any third party, unless expressly informed of this. Additionally, we inform you that certain data, by virtue of current regulations or the contractual relationship you have with Citronix - BER doo Beograd, may be communicated to:

• Banks and financial institutions for the collection of contracted services and/or purchased products.
• Public administrations with jurisdiction in the sectors of activity of Citronix - BER doo Beograd, when established by current regulations.

6. Are data transfers carried out internationally?

Citronix - BER doo Beograd may carry out international transfers of data derived from the acceptance of cookies from this Website:

• Cloudflare Inc. transfers data to the United States based on user consent when accepting cookies and for the provision of web security and optimization services. Cloudflare adheres to the EU-US Data Privacy Framework.
• Google LLC and Google Ireland Limited transfer data to the United States based on user consent when accepting cookies.
• Our servers are located in Germany, a member country of the European Union, so the data stored on them is subject to the General Data Protection Regulation (GDPR) and other applicable European regulations, thus ensuring an adequate level of data protection.

By accepting the cookies of these entities, the user consents that their personal data that may be collected through the loading and reading of the cookies may be transferred to the United States, a country in which a level of protection comparable to that of Europe is offered, only in those American companies included in the EU-US data privacy list, in the so-called "Data Privacy Framework" (hereinafter, "DPF"). In the event that American companies are not adhered to the DPF, it will be understood that they do not guarantee a level of protection comparable to that of Europe.

If the user does not consent to this international transfer of data to the United States, they must reject these cookies, and the functionalities or services offered with these cookies will not be provided or obtained.

You can find out about transfers to third countries that, where applicable, are carried out by third parties identified in the cookie policy in their corresponding policies.

7. What are your rights when you provide us with your data?

The data protection rights that interested parties may exercise, where applicable, are:

Data subjects may exercise their rights to personal data protection by sending a written communication to the registered office of Citronix - BER doo Beograd at Bulevar Mihaila Pupina 115, 8 floor, 11070 New Belgrade, Serbia or to the email address provided for this purpose: info@citronix-ber.com

You can use the following templates to exercise your rights:

• Access to template to exercise the right of access
• Access to the model to exercise the right of rectification
• Access to the model to exercise the right of deletion
• Access to the model to exercise the right of object
• Access to the model to exercise the right to limit processing
• Access to the model to exercise the right of portability
• Access to the model to exercise the right not to be subject to automated individual decisions

More information on the exercise of rights can be found on the official website of the Agencia Española de Protección de Datos, (hereinafter, "AEPD"), at the following link.

8. Can I withdraw my consent?

You have the right and the possibility to withdraw consent for any specific purpose granted at any time, without affecting the legality of the processing based on consent prior to its withdrawal.

9. Where can I file a complaint if I believe that my data is not being processed correctly?

If any interested party believes that their data is not being processed correctly by Citronix - BER doo Beograd or that requests to exercise their rights have not been satisfactorily addressed, they may file a complaint with the corresponding data protection authority, the Agencia Española de Protección de Datos (AEPD) being the one indicated in the national territory. More information is available on their website: www.aepd.es.

10. Security and updating of your personal data

In order to safeguard the security of your personal data, we inform you that we have adopted all the technical and organisational measures necessary to guarantee the security of the personal data provided. All of this is to prevent its alteration, loss, and/or unauthorised processing or access, as required by law, although absolute security does not exist.

It is important that, so that we can keep your personal data up to date, you inform us whenever there is a change in it.

11. Confidentiality

Citronix - BER doo Beograd informs you that your data will be processed with the utmost care and confidentiality by all personnel involved in any of the processing phases. We will not transfer or communicate your data to any third party, except in cases provided for by law, or unless the interested party has expressly authorized us to do so.