SR / EN

PRIVACY POLICY


Company NIKSEN INVESTMENT DOO BEOGRAD-NOVI BEOGRAD, with its registered seat at Savski nasip 7, Beograd-Novi Beograd, register number: 21216585 (hereinafter: Company) makes every effort to comply with the relevant regulations on the protection of personal data and to enable the exercise of the rights of the data subjects. Accordingly, this Privacy Policy is made in accordance with the Data Protection Law of the Republic of Serbia ("Official Gazette of the RS", No. 87/2018), including its by-laws (hereinafter: Relevant laws).

This Privacy Policy provides only the general review of the personal data processing and protection system implemented by the Company. Accordingly, the Company may, if necessary, and in particular at your request, provide you additional information related to the processing of your personal data.
The Company reserves the right to modify and supplement this Privacy Policy if necessary, in particular in the event of change of the relevant laws and/or methods of processing and measures of protection of the personal data.
This Privacy Policy provides information on:

1. METHOD OF COLLECTION AND PROCESSING OF YOUR PERSONAL DATA
2. CATEGORIES OF DATA SUBJECTS COVERED BY THE DATA PROCESSING AND PURPOSES OF DATA PROCESSING
3. PERSONS TO WHO WE DISCLOSE PERSONAL DATA
4. COOKIES
5. DATA TRANSFERS
6. MEASURES FOR PROTECTION OF PERSONAL DATA
7. EXERCISE OF THE RIGHTS OF DATA SUBJECTS
8. COMPANY’S CONTACT DATA

1. METHOD OF COLLECTION AND PROCESSING OF YOUR PERSONAL DATA

The Company seeks to collect personal data directly from the data subject. As a rule, this will be the case when we establish the first contact and cooperation with you. However, in certain cases, collection of personal data directly from the data subject is not possible or is not an effective solution given the nature, legal basis and purposes of the data processing. Accordingly, the Company may collect and process your personal data by using technical means, and as an exception through other parties. Regardless of the way personal data are collected, the Company is focused on establishing and implementing appropriate mechanisms to enable the exercise of the rights of individuals regulated by the relevant laws. When processing your personal data, the Company complies with the basic processing principles defined by the relevant laws. Accordingly, the Company strives for the processing of your personal data to be lawful, fair and transparent, and to be conducted solely to the extent necessary for the accomplishment of expressly specified and justified purposes. Considering the fact that the processing of personal data creates a number of obligations for the Company, the Company has an interest in processing the minimum of personal data necessary for the accomplishment of the purposes of the data processing within the deadlines justified by the purpose of the data processing. We strive to keep your personal data updated and accurate and in this regard we invite you to help us by pointing out the need to correct and supplement your data. The Company undertakes a number of measures and invests considerable resources in order of the establishment of the effective system of protection of your personal data.

2. CATEGORIES OF DATA SUBJECTS COVERED BY THE DATA PROCESSING AND PURPOSES OF DATA PROCESSING

The Company processes data of its employees and other engaged persons, as well as personal data of the candidates for employment, i.e. for establishing business cooperation with the Company, solely for the purposes and to the extent necessary for the fulfillment of the Company's legal obligations in the area of labor, social security, social protection and other legal obligations of the Company related to the establishment of the employment relationship, i.e. establishment of the cooperation with these persons, as well as for the conclusion and execution of the employment contract, or other contract concluded with these persons. The Company also processes personal data of the visitors to the shop park owned by the Data Controller and located in Gornji Milanovac, through the introduced video surveillance system established to protect the individuals, property and property interests of the Data Controller and its tenants, and consequently, to protect business of Data Controller. The Company also processes the personal data of users of the Website for the purpose of enabling more efficient use of the Website, improving the business and work of the Company and the Website.

3. PERSONS TO WHO WE DISCLOSE PERSONAL DATA

The basic policy of the Company from the aspect of sharing or exchange of personal data is to undertake the same only if it is necessary, in compliance with all the rules and obligations established by the relevant laws regarding such transfer. Considering the fact that modern terms of doing business require work division and specialization, your personal data may be transferred to the persons engaged by the Company for providing specialized services, to the extent that such delivery is necessary for the performance of a contract concluded with these subjects. Your personal data may also be disclosed to the competent authorities in proceedings for the exercise of your rights and/or the rights of the Company, as well as for the execution, supervision of execution and proving the fulfillment of your and/or the obligations of the Company established by the law or contract.

4. COOKIES

For more efficient and better use of the functions of our Website, as well as in order to improve the Company's Website and business, the Company uses Cookies: session cookies and third-party cookies. You can find more information about the processing of personally data via Cookies HERE.

5. DATA TRANSFERS

We would like to inform you that the Company does not transfer personal data outside the borders of the Republic of Serbia, except for the information collected through third-party cookies that may be stored on servers outside the Republic of Serbia. When considering the nature, legal basis and purposes of processing, the need for the transfer of personal data to other countries and international organizations arises, if such countries and international organizations do not provide an adequate level of protection in accordance with the relevant regulations, the Company will endeavor to provide implementation of appropriate personal data protection measures.

6. MEASURES FOR PROTECTION OF PERSONAL DATA

The Company is taking significant steps related to education of its employees and other engaged persons on issues relevant to the personal data protection. All persons involved in the processing of personal data carry out the processing on the basis of the authority given by the Company in which restrictions on access and processing of personal data, conditions and responsibilities regarding the processing of personal data are regulated. Accordingly, the need-to-know-basis principle applies within the Company. At the same time, all persons involved in the processing are obliged to keep the confidentiality of the data related to the processing. In order to ensure compliance with relevant regulations, the Company has brought internal procedures and acts applicable to the processing of personal data within the Company. The Company takes appropriate measures of physical and technical protection of personal data which prevents unauthorized access and processing of personal data, but at the same time protects the integrity of personal data. The personal data protection measures applied are tested by the Company in order to assess the need for improvement and modification of such measures.

7. EXERCISE OF THE RIGHTS OF DATA SUBJECTS

For more information on personal data processing carried out in relation with this Website click HERE. For more information on personal data processing carried out in relation with the video surveillance at the shop park Gornji Milanovac click HERE. Internal procedures within the Company, as well as contracts concluded by the Company with other persons, establish mechanisms to enable the exercise of the rights of persons whose personal data are processed. If the Company is not authorized to respond to your request in the specific case, the Company will forward your request to the authorized person.

8. CONTACT US

For all additional questions, especially for submission of the request for exercise of your rights arising from data processing, please contact us through the following contact data: NIKSEN INVESTMENT DOO BEOGRAD-NOVI BEOGRAD
Savski nasip 7, Beograd-Novi Beograd
Phone number: 00 381 63 297237
e-mail: uprava@shop-park.rs



NOTIFICATION ON DATA PROCESSING


In order to comply with the relevant regulations of the Republic of Serbia in the field of personal data protection and your rights as person whose personal data are processed, the Company NIKSEN INVESTMENT DOO BEOGRAD-NOVI BEOGRAD, with its registered seat at Savski nasip 7, Beograd - Novi Beograd, register number 21216585 (hereinafter: 'Company' or 'Data Controller') is providing you the information related to the processing of your personal data.

I DATA CONTROLLER:

Company NIKSEN INVESTMENT DOO BEOGRAD - NOVI BEOGRAD, with its registered seat at Savski nasip 7, Beograd - Novi Beograd, register number 21216585, is the Data Controller.
e-mail: uprava@shop-park.rs
phone number: 00 381 63 297237
address: Savski nasip 7, Belgrade
If the Data Controller performs the processing through another natural or legal person (hereinafter: 'Data Processor'), processing by such person will be regulated by contract or other legally binding act.

II PURPOSES OF DATA PROCESSING:

Data Controller processes your personal data to act in accordance with your requests submitted through our Website, including advertising the need to hire new people and acting on your application for the establishment of the employment at the Company. At the same time, Data Controller uses the following Cookies: Session cookies – permanent and temporary cookies that provide record of your activities on the Website, with the purpose of making the Website more efficient and faster; Third-Party Cookies – includes the use of analytics tools that provide statistics data in aggregated form that contribute to the performance and presentation of the Website and improve the services provided by the Company through the Website, as well as improve the Company's operations.

III LEGAL BASIS FOR DATA PROCESSING:

The processing of your personal data is necessary for the fulfillment of the purposes described in Part II of this notification. We will process your personal data only on the basis of your consent. By submitting your personal data through the communication channels established on the Website, you are deemed to have consented to the processing of personal data on the terms and in the manner described in this notification. When accessing the Website, you are provided with a short cookie notification with a link to this notification. Access and use of this Website implies that you have agreed with the use of Cookies unless you have disabled them. If you do not provide consent to the processing of your personal data, i.e. if your do not provide personal data, we will not be able to act in accordance with your request. If you use the option to disable Cookies, they will not be used. However, we point out that turning off Cookies may slow down or disable some features of the Website. You can disable Cookies via your browser’s menu where regularly you can choose to turn of the acceptance of the Cookies and/or choose to delete all Cookies on your device. You have the right to withdraw your consent for data processing at any time. After withdrawal of the consent, processing of your personal data is prohibited and your personal data will be deleted. However, withdrawal of consent does not affect the lawfulness of data processing conducted prior withdrawal. In case of withdrawal of consent, further processing of your request submitted through Website will be suspended and the use of Cookies will be disabled.

IV CATEGORIES OF PERSONAL DATA:

Based on your consent provided in accordance with this notification, we will process the following personal data: first and last name, e-mail address, contact phone and other information that you provide to the Company in the form of message, IP address, previous visits to the Website, time of your access to the Website and time of termination of the use of Website, actions taken on the Website, location, information on device and software from which the Website was accessed.

V DATA PROCESSING:

In relation to the above mentioned personal data, and for the purposes stated above, we can take the following processing actions: collecting by taking a photo or video, recording, duplicating, copying, transmitting, searching, sorting, storing, separating, crossing, merging, rendering, editing, providing, using, disclosing, disclosing by uploading or posting or otherwise making available, concealing, displacing or otherwise making them unavailable.

VI RECEPIENTS:

Considering the nature, scope, circumstances and purpose of the processing, your personal data can be made available to the: Employees and other engaged persons within the Company, Competent state authorities and other authorized persons, to the extent necessary for the fulfillment of the Company's legal obligations, i.e., for the preparation of the conclusion and the execution of the contract concluded with you, Third-party cookies providers.

VII DATA TRANSFERS:

Please be informed that your personal data collected in connection with the submission of a request to the Company are not transferred outside the Republic of Serbia. Please be informed that your personal data collected through third-party cookies may be stored on servers outside the borders of the Republic of Serbia. If there is a need for data transfer to the countries which are not contractual parties of the Council of Europe’s Convention on the Protection of Individuals with Regard to Automatic Processing of Personal Data, or which do not provide an adequate level of protection in accordance with the relevant regulations in the field of personal data protection of the Republic of Serbia, Data Controllers and third parties will take measures of personal data protection and act in accordance with the procedure established by the relevant personal data protection regulations.

VIII DATA RETENTION PERIOD:

Personal data collected in accordance with this notification will be stored and processed for the period required to process and act in accordance with your requests. Data collected through session cookies are processed during a period of 24 months at longest. Data collected through third-party cookies will be processed within deadlines regulated by the retention policy of the third party.

IX RIGHTS ARISING FROM THE PROCESSING:

1. the right to be informed about the processing of personal data, or the right to request and receive additional information related to the processing of your personal data,
2. the right of access, i.e. insight to the personal data we process about you,
3. the right to receive a copy of the personal data we process about you,
4. the right to request the correction, supplementation and update of the personal data we process about you,
5. the right to request the deletion of your personal data,
6. the right to restrict the processing of your personal data,
7. the right to portability of your personal data, which includes your right to receive the data you previously provided to us in a structured, commonly used and electronically readable form, as well as to pass on the data to another person or to request that the Data Controller directly transmit the data to another person.
Certain rights may be restricted in accordance with the relevant regulations of the Republic of Serbia in the field of personal data protection, especially to the extent that restriction of your rights is necessary to protect the rights and freedoms of others, or to ensure compliance with the legal requirements of Data Controller for the processing of data, as well as the submission, realization or defense of a legal request.
In addition to the above rights, you have the right to file a complaint to the Commissioner for Information of Public Importance and Personal Data Protection.
For more information on the Company's privacy policy, see our Privacy Policy.


NOTIFICATION ON DATA PROCESSING



In order to comply with the relevant regulations of the Republic of Serbia in the field of personal data protection and your rights as person whose personal data are processed, the Company NIKSEN INVESTMENT DOO BEOGRAD-NOVI BEOGRAD, with its registered seat at Savski nasip 7, Beograd - Novi Beograd, register number 21216585 (hereinafter: 'Company' or 'Data Controller') is providing you the information related to the processing of your personal data.

I DATA CONTROLLER:

Company NIKSEN INVESTMENT DOO BEOGRAD-NOVI BEOGRAD, with its registered seat at Savski nasip 7, Beograd - Novi Beograd, register number 21216585, is the Data Controller.
e-mail: uprava@shop-park.rs
phone number: 00 381 63 297237
address: Savski nasip 7, Belgrade
If the Data Controller performs the processing through another natural or legal person (hereinafter: "Data Processor"), processing by such person will be regulated by contract or other legally binding act.

II LEGAL BASIS AND PURPOSES OF DATA PROCESSING:

The Data Controller is the owner of the shopping center in Gornji Milanovac, which is designed as a shop park with 24 facilities in which international and domestic brands are represented. Having in mind the large area covered by the shop park, and the fact that access to the shop park is provided to a indefinite number of people, the Data Controller has introduced a video surveillance system which includes parking space, entrances to the shop park and facilities, as well as common areas facility (such as hallways), all for the protection of persons, property and property interests of both the Data Controller and its tenants and consequently the protection of the business of the Data Controller. Given the above, the processing of your personal data is carried out in order to protect the persons, property and property interests of the Data Controller and his tenants and consequently to protect the business of the Data Controller. Consequently, the processing of your personal data is necessary for the realization of the legitimate interests of the Data Controller, whereby when deciding on this type of data processing, the Data Controller assessed all the circumstances of data processing and previously determined that the basic rights and freedoms of persons whose data are processed do not prevail over the above described legitimate interests of the Data Controller.

III CATEGORIES OF PERSONAL DATA:

Given the described manner and purpose of processing personal data, the Data Controller may process your personal data contained in videos obtained under video surveillance.

IV DATA PROCESSING:

In relation to the above mentioned personal data, and for the purposes stated above, we can take the following processing actions: collecting by taking a photo or video, recording, duplicating, copying, transmitting, searching, sorting, storing, separating, crossing, merging, rendering, editing, providing, using, disclosing, disclosing by uploading or posting or otherwise making available, concealing, displacing or otherwise making them unavailable.

V RECEPIENTS:

Considering the nature, scope, circumstances and purpose of the processing, your personal data can be made available to the competent state authorities and other authorized persons with regard to the inspection supervision, persons who maintain video surveillance, as well as in connection with the initiation and conduct of other legally prescribed procedures.

VI DATA TRANSFERS:

The above-mentioned personal data will be stored in an internal database with the location of the server in Serbia. For transfers of personal data that are made to countries that are not members of the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, ie that are not members of the European Union, the Data Controller will take personal data protection measures and act in accordance with regulations of the Republic of Serbia for the protection of personal data.

VII DATA RETENTION PERIOD:

The collected videos are kept by the Data Controller for a period of 30 days from the collection, after which they are deleted.
The above does not apply in the case when further processing of the data contained in a particular video is necessary in order to submit, realize or defend a legal claim.

VIII RIGHTS ARISING FROM THE PROCESSING:

1. the right to be informed about the processing of personal data, or the right to request and receive additional information related to the processing of your personal data,
2. the right of access, i.e. insight to the personal data we process about you,
3. the right to receive a copy of the personal data we process about you,
4. the right to request the correction, supplementation and update of the personal data we process about you,
5. the right to request the deletion of your personal data,
6. the right to restrict the processing of your personal data,
7. the right to portability of your personal data, which includes your right to receive the data you previously provided to us in a structured, commonly used and electronically readable form, as well as to pass on the data to another person or to request that the Data Controller directly transmit the data to another person;
8. the right to objection.
Certain rights may be restricted in accordance with the relevant regulations of the Republic of Serbia in the field of personal data protection, especially to the extent that restriction of your rights is necessary to protect the rights and freedoms of others, or to ensure compliance with the legal requirements of Data Controller for the processing of data, as well as the submission, realization or defense of a legal request.
In addition to the above rights, you have the right to file a complaint to the Commissioner for Information of Public Importance and Personal Data Protection.
For more information on the Company's privacy policy, see our Privacy Policy.