1. The Data Controller

The data controller is Andersen Advisory Ltd, with the address Beograd (Stari grad), Balkanska 2 , sprat 3, stan 1301, 11000 Belgrade, Serbia

We process your personal data under the Personal Data Protection Act (Act) and other relevant data protection regulations.

For any query concerning privacy, please contact us at andersen@rs.andersen.com.

2. Which personal data do we process, and for what purpose? 

To provide you with notices and news, we process your name, surname, and e-mail address.

To contact you regarding your job application, we process your name and surname, e-mail address, telephone, data on the high school/gymnasium, high school/gymnasium’s success, data on faculty, average grade at the faculty, the date and grade of the diploma or master’s thesis, as well as information provided in your annex to the job application.

Cookies used on our website do not collect your personal data, which could be used to identify you.

3. What is the legal basis for processing your personal data?

We collect and process your personal data only on the condition that such collection and processing is based on an appropriate legal basis. Depending on the purpose for which the data is collected and the category of individuals to which the data relates, we process personal data based on:

• the consent of the individual to whom the data relates (Article 12, paragraph 1, point 1 of the Act) after informing the individual to whom the data relates about all essential processing aspects. The consent of the individual to whom the data relates is voluntary, explicit, informed, and unambiguous and can be revoked at any time;
• protection of the legitimate interest of the data controller or the legitimate interest of third parties (Article 12, paragraph 1, point 6 of the Act), only in exceptional cases, to achieve a legitimate interest such as the physical protection of business assets, business premises, ensuring a safe environment for employees, etc., but in a way that protects the basic rights of the individual to whom the data relates (video surveillance, identification, etc.)

4. How long will we retain your data?

We will retain your personal data until you withdraw your consent, but not longer than 5 years after the end of the calendar year in which you have given your consent.

5. Who do we share your information with?  

In accordance with the legal basis and the purpose of recording your personal data, we may disclose your personal data to the following institutions and individuals:

• employees of the data controller,
• certain engaged third parties in accordance with contractual obligations,
• competent authorities.

6. What are your rights regarding personal data processing? 

Depending on the applicable law, you can access your personal data, correct or delete them, or obtain a copy of them. You can also limit their active processing or object to it. Furthermore, you can request that we transfer your personal data to another institution, revoke your consent for their processing, and exercise the right to file a complaint with the competent institution and other rights relevant under the applicable law.

To exercise these rights, you can contact us in writing at our address: Andersen Savetovanje doo Beograd, sa adresom Belgrade (Stari grad), Balkanska 2 , sprat 3, stan 1301, 11000 Belgrade, Serbia or by email at andersen@rs.andersen.com. We will respond to your inquiry in accordance with the applicable law. Please keep in mind that you most likely will not be able to access or use the services related to your personal data if you do not allow us to collect or process the necessary personal data or if you withdraw your consent for processing these data for necessary purposes.

You can withdraw your consent to data processing at any time, whereby the withdrawal does not affect the lawfulness of personal data processing based on this consent in the period before your withdrawal.

In case of a data protection breach, we will notify you under the rules set forth by the applicable legislation.

We will act on your requests without undue delay and, in any case, no later than one month after receiving your request unless the applicable legislation provides otherwise. Given the complexity and volume of requests, this period may be extended for a duration prescribed by the Act. We will inform you of any such extension and the reasons for the delay within the period prescribed by the Act from the receipt of the request. If you believe that we are not processing your personal data in accordance with the applicable legislation, you can file a complaint with the authority responsible for personal data protection in the Republic of Serbia: Commissioner for Information of Public Importance and Personal Data Protection, address: Bulevar Kralja Aleksandra No. 15, 11120 Belgrade, Republic of Serbia; email: office@poverenik.rs.