Privacy Policy

1. Introduction

This Privacy Policy explains what personal data we collect when you visit the website spoj.org.rs (the “Website”), how we use that data, and what rights you have in relation to its processing.

Savez za promociju i osnaživanje jednakosti – SPOJ,
Terazije 27/2, 11000 Belgrade, Serbia
Business Registration No. (MBr): 28165013
Tax ID (PIB): 108859816
(“Controller”, “we”, “us”, “our”)

SPOJ operates the Website, the Platform, and related services and determines the purposes and means of processing personal data. SPOJ therefore acts as the controller of personal data.

All processing of personal data is carried out in accordance with the Law on Personal Data Protection of the Republic of Serbia and other applicable regulations. We process data only for legitimate purposes, in a proportionate manner, and with appropriate security measures. We do not sell personal data or make it available to third parties contrary to the law.

By registering an account or accessing the Website, you confirm that you are familiar with and understand this Privacy Policy.
If anything is unclear, contact us at info@spoj.org.rs

.

If you do not agree with this Privacy Policy, please stop using the Website and the Platform. Use of the Website is also governed by our Terms of Use, which we recommend reading carefully.

We may update this Privacy Policy at any time. Changes take effect five (5) business days after publication on the Website or Platform.

2. What Is Personal Data?

Personal data is any information relating to an identified or identifiable natural person, directly or indirectly (such as name, photograph, email address, IP address).

If data is processed in a fully anonymized form and cannot be linked to an identifiable individual, this Privacy Policy and the Law do not apply to that processing.

3. Data We Collect

We collect two categories of data:

A. Data related to Website use

When you visit the Website, we may collect:

  • pages visited, visit order, time spent, and links clicked

  • IP address, browser type, operating system

  • approximate geographic location

  • referral URLs

We also use cookies. More information is available in our Cookie Policy.

If you are not registered, we do not directly collect identifying information, although indirect identification may be possible through combined technical data.

B. Data you provide directly

When you register or interact with the Platform, we may collect:

  • first and last name

  • email address

  • username and encrypted password

  • date of birth

  • place of residence

  • messages, comments, uploaded content, audio/video materials

  • education, occupation, interests (if provided)

  • participation in courses, workshops, lectures, and events

  • feedback, test results, and learning activities

  • data provided via email, forms, surveys, forums, newsletters, or preferences

Some data may be anonymized and used to improve the Website.

In justified cases, we may request additional information to verify identity.

4. Purposes of Processing

We process personal data to:

  • enable Website and Platform functionality

  • personalize content and communications

  • provide access to educational programs and community activities

  • facilitate communication between users

  • analyze usage and improve services

  • prevent misuse and ensure security

  • comply with legal obligations

  • send newsletters and updates (with consent)

  • develop new services aligned with SPOJ’s mission

5. Legal Basis for Processing

Personal data is processed based on:

  • performance of a contract

  • compliance with legal obligations

  • legitimate interests (unless overridden by your rights)

  • your consent (e.g., newsletters, marketing cookies)

6. Data Storage and Retention

Personal data is stored on servers within the European Union (and Serbia, where applicable).

Data is retained only as long as necessary, based on:

  • duration of your relationship with us

  • legal obligations

  • protection of legal claims

If processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect prior lawful processing.

7. Who Can Access Your Data?

Access is limited to:

  • authorized SPOJ staff

  • trusted service providers acting as data processors

  • affiliated organizations involved in educational activities

  • competent authorities when legally required

All processors are contractually bound to protect your data.

8. Your Rights

You have the right to:

  • access your data and receive a copy

  • correct inaccurate or outdated data

  • request deletion (“right to be forgotten”)

  • restrict processing

  • object to processing, including marketing

  • request data portability

  • withdraw consent at any time

To exercise your rights, contact info@spoj.org.rs .

You may also file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of Serbia or a competent court.

9. Account Deletion

You may delete your account at any time via account settings or by emailing us.
Your data will be deleted within 5 business days, except where retention is legally required.

10. Data Security

We apply appropriate technical and organizational measures, including:

  • encryption

  • password protection

  • access control

  • secure data storage

  • contractual safeguards with service providers

11. Cookies

We use cookies to ensure Website functionality, improve performance, analyze usage, and (with consent) for marketing purposes. You can manage cookie preferences upon first visit and in the Cookie Policy.

12. External Websites

The Website may contain links to third-party websites. This Privacy Policy applies only to spoj.org.rs. We are not responsible for third-party privacy practices.

13. Contact

For any questions regarding this Privacy Policy or your rights, contact:
📧 info@spoj.org.rs