PRIVACY POLICY

Unipromet d.o.o. Čačak (hereinafter: UNIPROMET), is the processor of the personal data of natural persons that it processes exclusively in accordance with the applicable legal regulations, i.e. primarily in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and the Council on the protection of natural persons with regard to the processing of personal data and the free movement of such data (General Data Protection Regulation – “GDPR”),
  • The Law on Protection of Personal Data (Official Gazette of RS, No. 87/2018, hereinafter: Law) and business needs.

UNIPROMET processes personal data in accordance with this Personal Data Protection Policy – Privacy Policy (hereinafter: Policy) and other internal acts that regulate issues of personal data protection and privacy.

In the following text, the most important terms and procedures that we implement for the protection of your personal data (hereinafter: Users and/or Interested persons) in connection with the collection, processing and storage of personal data are listed.

  1. Supervision

In the process of using personal data, we comply with all prescribed and binding rules and security measures.

  1. Our approach

The protection of personal data is of fundamental importance to us.

  1. Principles of personal data processing that UNIPROMET adheres to:
  2. a) Legality, fairness and transparency

UNIPROMET ensures a legal, fair and transparent way of processing personal data with the help of the following measures:

  • processing is required for the purpose of registering interested persons for employment, work outside the employment relationship or practice in Unipromet doo Čačak;
  • processing is based on the person’s prior consent to the processing of their data;
  • processing is required for the purpose of complying with the legal obligations that UNIPROMET, as a personal data handler, has, or for the execution of legally prescribed powers that UNIPROMET has as a handler;
  • processing is necessary for the realization of the legitimate interest of UNIPROMET.
  1. b) Principle of limitation: the purpose that allows us to collect your personal data only with a clearly defined purpose, i.e. concretely determined, explicit, justified and legal and still cannot be processed in a way that is not in accordance with those purposes.
  2. c) The principle of minimal data processing : requires us to process only personal data that are necessary, relevant and adequate in relation to the purpose of their use.
  3. d) Principle of accuracy : requires us to take all reasonable measures that allow us to regularly update or correct your personal data.

The principle of storage limitation which requires us to store your personal data only for the period necessary for the specific purpose for which it is processed. As soon as the deadline for processing expires or the purpose of processing ceases to exist, we delete your personal data, i.e. we destroy them in the manner prescribed by law.

  1. e) The principle of integrity and confidentiality, indisputability and availability : requires us to protect personal data from unauthorized or illegal processing, loss or destruction with the help of technical and organizational measures to protect your personal data. At the same time, we ensure that access to personal data is granted only to authorized employees.
  2. f) The principle of responsibility : requires us to be able to document compliance with all the above conditions.
  3. Contact for your questions

If there is any ambiguity in any part of this statement or if you have questions or comments regarding the protection of your personal data, you can contact us at: zastitapodataka@unipromet.co.rs .

  1. What category of personal data we process

Personal data is information that allows us to identify you. Therefore, they include information that can be specifically attributed to you.

Personal data does not include anonymous or aggregated data, i.e. data that cannot be clearly attributed to you.

Personal data is classified into categories:

  • Information that Users and/or Interested persons submit by filling out the appropriate forms on our website or submit them through their resume and/or motivation letter, certificates, diplomas.
  • Basic data including your name and surname, date of birth, level of education, titles, information on skills, knowledge of foreign languages, training, list of previous employers;
  • Communication data: e-mail , phone number . A special category of personal data that includes sensitive data of a personal nature: for example, when it comes to the selection process for a workplace with increased risk, in each individual case we inform the candidate that before starting the employment relationship, a previous medical examination provided by the Employer must be performed and that the employment relationship for that workplace can be established after receiving a report from a doctor confirming that the candidate is capable of performing the duties of that workplace.
  1. Legal basis for processing your personal data

We use the personal data that we receive from you only to the extent necessary and to achieve the purpose described here, based on the registration of interested persons for employment, work outside the employment relationship or practice in the company Unipromet doo Čačak.

Basis for processing personal data include:

  • Consent – you give us your consent for the processing of personal data with the submission of a resume for the purpose of further recruitment, selection and notification of open positions/jobs, all for the sake of possible employment and the establishment of an employment relationship.

Hereby we would like to inform you that for the purposes stated here, we will continue to process the data that you have submitted to us through your work resume, motivation letter and/or by filling out a predefined questionnaire in the next 2 years, all in accordance with the Constitution of the Republic of Serbia, the Law, the principles of legality, transparency, expediency, proportionality and security of personal data processing.

  1. Protection of personal data

We care about the protection of your personal data and for this reason we adhere to the following technical and organizational measures that ensure the security of your personal data.

These measures include the following forms of protection:

  • Physical access control – we store all data in a way to protect access to it, this means that the places where data is stored provide technical means such as smart cards, keys, doors that can be locked electronically, etc.
  • Controlled access – access to the personal data storage system is not granted to anyone without an appropriate password or two-step verification. So that the data is available only to authorized persons/employees and only to the extent that it is necessary, with the obligation to act in accordance with the normative acts of UNIPROMET which regulate the area of personal data protection;
  • Electronic access control – we have adopted measures that prevent unauthorized reading, copying, modification, removal from the system or other unauthorized access and/or dealing with them.
  • Transfer control – prohibition of transfer of personal data through open communication channels, computer networks that are not under the control of Unipromet.
  1. Your rights
  • The right to provide information about the processing of personal data:

You have the right to know the legal basis for the processing purpose or information about the storage time of your personal data. You will always be informed about the legal basis and purpose of personal data processing before the processing begins, as defined by this Policy, UNIPROMET internal acts and the Law.

  • The right to access personal data:

We undertake to provide information on whether we process your personal data and, if we do, in what sense we process it. At the same time, you have the right to request a copy of the processed personal data. At your request, we are obliged to inform you about the purpose of data processing, recipients of processed personal data and/or other related information.

  • Right to rectification:

You have the right and permission to request that we change any of your personal data that we process if it changes (eg, change of surname, change of address, etc.).

We are not obliged to determine whether the personal data we have collected is current, inaccurate or imprecise, however, when you notify us of such fact, it is our obligation to act in accordance with your comment or request for correction.

  • Right to erasure:

Also called the “right to be forgotten”, it requires us, as the controller of personal data, to destroy your personal data, in the following cases:

  • if the purpose of the processing no longer exists, i.e. the personal data are no longer necessary to achieve the purpose for which they were collected or otherwise processed;
  • if you withdraw your consent to the processing of personal data, and there is no other reason for the processing of your personal data;
  • object to the processing of personal data; and
  • personal data must be deleted in order to fulfill legal obligations (eg obligation to destroy).
  • Right to object

You have the right to submit a complaint to the Commissioner for the Protection of Personal Data if you believe that any of your personal data is being processed in a manner that constitutes a violation of your rights under the relevant regulations.

  • The right to data portability

In the event that you ask us to transfer your personal data, we are obliged to do so in a structured, commonly used and machine-readable format. You can exercise this right only when the processing is based on consent or contract and is automated at the same time, i.e. processing exclusively performed using technical means based on a predetermined algorithm and without any intervention.

  1. The method of exercising the rights of the person to whom the data refer

Users to whom the personal data refer can exercise their rights by completing the request at the following link REQUEST .

The person whose data is processed can submit a request in written or electronic form, to the official postal address Bulevar oslobodilaca Čačka 92a, 32000 Čačak or to zastitapodataka@unipromet.co.rs.

UNIPROMET employees will determine the identity of the applicant by inspecting the personal document. UNIPROMET is obliged to act on the request no later than within 30 calendar days from the date of receipt of the complete request.

If UNIPROMET does not act on the request of the applicant, it must inform the applicant of the reasons for non-existence, without delay, and at the latest within 30 calendar days from the receipt of the request. Along with the notification of non-existence, UNIPROMET must also inform the applicant of the right to submit a complaint to the Commissioner, i.e. a lawsuit to the court in order to exercise his rights.

  1. Rules for sharing your personal data with third parties

The geographical dimension of data processing is limited only to the territory of the Republic of Serbia, i.e. the address of the Controller, namely:

  • Bulevar oslobodilaca Čačak 92a, 32000 Čačak
  • Bulevar Tanaska Rajića no. 2, 32000 Čačak
  • Branch Kraljevo – Ibarski put 83, 36000 Kraljevo.

 

The operator does not transfer personal data outside the territory of the Republic of Serbia.

  1. When you are a data subject

You are a data subject only as a natural person; legal regulation regarding the protection of personal data does not apply to legal entities, cooperatives, associations, etc.

  • I am familiar with the Information on the processing of personal data, that is, with the rights and obligations regarding the processing of personal data at UNIPROMET DOO ČAČAK Information on the processing of personal data.
  • I agree that UNIPROMET DOO ČAČAK can process my personal data submitted through a work resume and/or a filled-in questionnaire for application to the competition, in accordance with the Information on the processing of personal data, the valid Rulebook on the protection of personal data at UNIPROMET DOO ČAČAK and the Law on the Protection of Personal Data (“Official Gazette of RS”, No. 87/2018).
  • I agree that the personal data that I submitted via my work resume and/or the completed application form for the competition will be stored in the database of UNIPROMET DOO ČAČAK for a period of 2 years, for the purpose of reconsidering my work resume in case of future vacancies and the need for employment or engagement outside of employment.