Privacy Policy

INFORMATION ON THE COLLECTION AND PROCESSING OF PERSONAL DATA (PRIVACY POLICY)

This information is provided in accordance with the provisions of the Law on Personal Data Protection (Official Gazette of the Republic of Serbia No. 87/2018) (“the Law”).

DATA CONTROLLER

We are the HEROES OF THE BELGRADE MARATHON FOUNDATION, with its registered office at Dr Ive Popovića Đanija 3a, Belgrade (Savski Venac), Republic of Serbia, registration number 28834276 (hereinafter referred to as the “Controller” or “We”).

The Controller is aware and understands that privacy is of great importance to you, and therefore we take the protection of personal data very seriously. Accordingly, as the Controller, by creating this Privacy Policy we aim to make the processing of your personal data transparent and understandable.
The Controller is the entity that determines the purpose and means of data processing, and in cases where two or more controllers jointly determine the purpose and means of processing, they are considered joint controllers.

In this Privacy Policy, we explain how, in our capacity as the Controller, we collect, process, and use your personal data, as well as how you can exercise the rights you have as a data subject.
This Privacy Policy applies to all individuals who access our website www.herojibeogradskogmaratona.rs
(hereinafter: the Website), make donations or contributions, etc.

This Privacy Policy, together with our Cookie Policy, contains information that relates to you or may relate to you. Therefore, we recommend that you read them carefully in order to obtain all the necessary information regarding the processing and protection of your personal data.

If you have any questions regarding this Privacy Policy, please contact us at info@herojibeogradskogmaratona.rs

PERSONAL DATA WE COLLECT

Personal data is any information relating to a natural person whose identity is determined or identifiable, directly or indirectly, in particular on the basis of an identifier such as a name and identification number, location data, identifiers in electronic communication networks, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

The Controller may collect, process, store, and transfer different types of your personal data, which we have grouped as follows:

“Identity Data” includes first and last name, address, and city.

“Contact Data” includes email address and telephone numbers.

“Transaction Data” includes details about payments you have made to us (e.g., when making a donation), including information about your bank accounts or cards used to make such payments to us.

“Technical Data” includes the Internet Protocol (IP) address, browser type and version, and other data/technologies on the devices you use to access our Website.

HOW WE COLLECT YOUR PERSONAL DATA

We use various methods to collect data from you and about you, including:

Automated technologies or interactions. While you interact with the Website, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. We collect this personal data using cookies, server logs, and other similar technologies. Please see our Cookie Policy for more details.

HOW WE USE YOUR PERSONAL DATA

Vaše lične podatke ćemo koristiti samo kada i kako nam to Zakon dozvoljava. Najčešće ćemo koristiti Vaše podatke o ličnosti u sledećim pravnim osnovima: a) u cilju poštovanja pravnih obaveza koje imamo kao Rukovalac, b) kada je to neophodno za naše legitimne interese (ili interese treće strane) a Vaši interesi i osnovna prava ne prevladavaju nad tim interesima, c) kada smo dobili Vaš punovažan pristanak za obradu podataka o ličnosti.

Please contact us to learn more about the legal bases we apply for processing your personal data.

PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA

If we intend to process your personal data for purposes other than those stated above, we will provide you with all necessary information in accordance with the Law before initiating such processing.

HOW LONG WE KEEP YOUR PERSONAL DATA

We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, particularly for the purpose of complying with legal obligations.
When determining the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes for which we process personal data and whether we can achieve those purposes through other means, as well as the applicable legal requirements.
Details about retention periods for different purposes of processing your personal data are provided in the table within the section “Purposes for Which We Use Your Personal Data.”

RECIPIENTS AND CATEGORIES OF RECIPIENTS

The Controller may disclose your personal data to processors with whom it has concluded data processing agreements and who process your data on behalf of the Controller for the purposes of achieving the above-mentioned processing purposes.

For example, processors engaged (or that may be engaged) by the Controller include:
1. companies (service providers) related to the maintenance of the Website or the application used on the Website, and
2. business banks with which we cooperate and with which there is a direct integration for the purpose of enabling payments by payment card and via QR code.

TRANSFER OF PERSONAL DATA OUTSIDE THE TERRITORY OF THE REPUBLIC OF SERBIA

Your personal data is stored at the premises of the Controller as well as on servers located in the Federal Republic of Germany.

The Controller will continuously ensure that any transfer of your personal data outside the Republic of Serbia is carried out exclusively in accordance with the Law and with the provision of an adequate level of protection equivalent to the level guaranteed by the Law. This includes, among other things, transfers of data to countries that have been determined to provide an adequate level of protection (members of the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data) or by ensuring appropriate safeguards (e.g., the application of standard contractual clauses, approval of the Commissioner for data transfer, and similar measures) in accordance with the Law.
If you would like to learn more about these measures, you may contact us via email or send a written request to the address listed in the “Controller” section.