Privacy Policy

1.1. This Privacy Policy (hereinafter referred to as the "Policy") establishes the principles and conditions for processing personal data of users of the SmartKartica website.

1.2. We deeply respect the right to privacy and are committed to protecting personal data in accordance with:

• EU General Data Protection Regulation (GDPR) 2016/679;
• Personal Data Protection Act of the Republic of Serbia;
• Other applicable national and international legal provisions.

1.3. Using our website means consent to this Policy.

1.4. If you do not agree with the data processing principles outlined in this Policy, please do not use our website.

2.1. The controller of your personal data is:

2.2. The controller determines the purposes and means of personal data processing and is responsible for compliance with data protection legislation requirements.

2.3. For personal data protection matters, you can contact our Data Protection Officer (DPO) at: dpo@smartkartica.rs

3.1. Personal data provided by you:

• Registration data: first name, last name, email address, phone number;
• Company data: organisation name, tax identification number, legal address;
• Payment information: bank card data processed through secure payment systems;
• Contact details: address, city, country, postal code;
• Professional information: job title, industry.

3.2. Automatically collected data:

• Technical data: IP address, browser type, operating system;
• Usage data: pages visited, session time, referral sources;
• Cookies: session identifiers, user preferences;
• Device data: screen resolution, time zone, language settings.

3.3. Special categories of data:

We do not collect special categories of personal data (racial or ethnic origin, political opinions, religious beliefs, health status, etc.) without explicit consent.

4.1. We process your personal data on the following legal bases:

5.1. Your personal data is processed for the following purposes:

6.1. We collect personal data through the following methods:

• Direct provision: during registration, form completion, subscription;
• Automatic collection: through cookies, web beacons, analytics systems;
• Interaction: when contacting support, participating in surveys;
• Partners: from payment systems, advertising networks (GDPR compliant);
• Public sources: from publicly available company databases.

7.1. We may share your personal data with the following categories of recipients:

7.2. All recipients are required to ensure adequate data protection and comply with GDPR requirements.

8.1. Some of our service providers may be located outside the European Economic Area (EEA).

8.2. International transfers are carried out with the following safeguards:

• European Commission adequacy decisions;
• Standard Contractual Clauses (SCCs);
• Certification programmes (e.g., Privacy Shield successors);
• Binding Corporate Rules (BCRs).

8.3. You can obtain copies of the relevant safeguards by contacting us at: privacy@smartkartica.rs

9.1. We retain your personal data no longer than necessary to achieve the processing purposes:

9.2. After retention periods expire, data is deleted or anonymised.

10.1. Under GDPR, you have the following rights:

10.2. To exercise your rights, contact us at: privacy@smartkartica.rs

10.3. We respond to requests within 30 days of receipt.

10.4. You also have the right to lodge a complaint with a data protection supervisory authority.

11.1. We implement modern technical and organisational security measures:

11.2. In case of a data security breach, we will notify you and supervisory authorities in accordance with GDPR requirements.

12.1. We use various types of cookies:

12.2. You can manage cookies through browser settings or our consent panel.

13.1. Our service is intended for persons over 16 years of age (in accordance with GDPR).

13.2. We do not knowingly collect personal data of children under 16 without parental consent.

13.3. If we become aware of collecting a child's data without proper consent, we will immediately delete such information.

13.4. If you believe we may have collected a child's data, contact us at: privacy@smartkartica.rs

14.1. We may periodically update this Policy to reflect changes in our practices or legislation.

14.2. We will notify you of material changes by:

• Posting a notice on the website;
• Sending email notifications;
• Requesting new consent when necessary.

14.3. We recommend periodically reviewing this page to stay informed of the current Policy version.

15.1. For all matters related to personal data processing, contact: