Privacy policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
The company Khaoticen processes personal data in accordance with Article 21 of the Law on Personal Data Protection of the Republic of Serbia (ZZPL), Official Gazette 87/2018, with all applicable amendments (available here).
- Visits to our website www.khaoticen.com;
- Entering data into our web forms;
- Sending an email message to our company's domain.
1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA AND WHERE CAN YOU GET MORE INFORMATION?
The controller of your personal data is Khaoticen d.o.o., with its registered office at Kronštatska 5, Belgrade, Serbia. If you would like more information regarding what is stated in this document, please contact us at dpo@khaoticen.com.
2. WHICH OF YOUR PERSONAL DATA DO WE PROCESS?
- IP address;
- Date and time of access;
- Used browser and operating system.
How does the reCAPTCHA v3 work?
reCAPTCHA v3 performs in the background and it does not require you to solve any tasks (such as selecting images or clicking a checkbox). Instead, it analyzes your behavior on our website and assigns a „score“, which signifies the probability of you being a human. This score is used to recognize and prevent bots. Data collected when using reCAPTCHA v3 may include information about your device, IP address, and your behavior while visiting our website.
Data privacy
Google reCAPTCHA is used in line with Google’s Privacy Policy and Terms of Service. For more information on how Google is processing your data, please read the following:
- Email address;
- IP address;
- Host name of the recipient and sender;
- Subject, date, and time of receipt by the server;
- Names of files of all attachments, message size, risk classification related to the sender's established status.
The checking of email messages and filtering of messages containing spam or malware is an automated operation. Only in the case of reasonable suspicion will individual email messages be subject to closer examination by a person with special authority for that area of activity – and only after consultation with the recipient of the email message.
3. WHAT IS THE PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA?
- 3.1. The purpose of processing personal data when visiting the website www.khaoticen.com is to ensure the security of our web platform and to analyze visits. The legal basis in this case is the legitimate interest of the data controller (Khaoticen d.o.o.), as stated in Article 12, paragraph 6 of the Law on Personal Data Protection.
- 3.2. The purpose of processing personal data when entering data into the web form on our website www.khaoticen.com is to collect data for the purpose of conducting the employment procedure. This processing of personal data is necessary for the eventual formation of a contractual form in which the personal data of the respondent is entered or for taking necessary actions at the request of the respondent before a contract is formed, as stated in Article 12, paragraph 2 of the Law on Personal Data Protection.
- 3.3. The purpose of processing personal data when sending an email message to any address on the domain www.khaoticen.com is to provide a response to the request and take further actions depending on the content of the email message. The legal basis in this case is the legitimate interest of the data controller (Khaoticen d.o.o.), as stated in Article 12, paragraph 6 of the Law on Personal Data Protection, or in Article 12, paragraph 2 of the Law on Personal Data Protection, depending on the content of the received email message.
4. WHO ARE THE POSSIBLE RECIPIENTS OF THE DATA?
- 4.1. The processing of all three types of collected personal data is carried out by authorized internal employees.
- 4.2. Personal data is not transferred outside our company, except to our data processors. If there is a request from an authorized institution, empowered by the regulation of the Government of the Republic of Serbia, for access to personal data in the possession of Khaoticen, we will review the legality of the request and act in accordance with the lawfulness, if established. If it is determined that the request is not lawful, the data under the jurisdiction of Khaoticen will not be shared.
- 4.3. Our data processors are carefully selected, and all of them can provide sufficient guarantees for implementing appropriate technical and organizational measures in a way that will meet the requirements of the Law on Personal Data Protection and ensure the protection of the rights of the respondents. If the transfer of personal data to third countries is involved, an appropriate mechanism will be selected in accordance with Articles 6 and 65 of the Law on Personal Data Protection.
5. HOW DOES KHAOTICEN COLLECT YOUR DATA?
Khaoticen collects your personal data directly when you contact us, whether by visiting our website, entering the requested information in our web form, or when you send us an email message.
6. NOTICE ON AUTOMATED INDIVIDUAL DECISION-MAKING
The processing of personal data for the purposes described above does not involve the use of automated decision-making processes that produce legal effects concerning the individuals to whom the personal data relates, in accordance with Article 39 of the Law on Personal Data Protection.
7. WHAT IS THE RETENTION PERIOD OF YOUR DATA?
- 7.1 Personal data collected during your visit to our website is kept for two years.
- 7.2 Personal data collected for the purpose of potential employment is retained for twelve months from the moment of application submission.
- 7.3 Personal data collected when sending an email message is kept for two years.
8. YOUR RIGHTS REGARDING PERSONAL DATA
- 8.1 According to the Law on Personal Data Protection, you have the right to access your personal data at any time, as well as to submit a request for the correction of inaccurately recorded data being processed, in accordance with the provisions of Articles 21 to 40 of this law.
- 8.2 Complaints regarding the processing of your personal data can be submitted via email to dpo@khaoticen.com.
- 8.3 If our responses explaining the legality of the processing of your data and the maintenance of its security are not satisfactory, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection at the address 11120 Belgrade, Bulevar kralja Aleksandra 16.