Integritetspolicy

Denna policy utformades för att informera webbplatsens besökare om hur personuppgifter samlas in, används, lagras eller på annat sätt behandlas när de surfar på vår webbplats. Vi är ägare av denna webbplats och betraktas som personuppgiftsansvarig för dina personuppgifter. Vi är: Flow Ninja doo, Milutina Milankovića 11g, 11070 Novi Beograd

Vi kan komma att ändra denna policy då och då för att återspegla ändringar på vår webbplats och i våra tjänster. För att säkerställa transparens, vänligen granska den för eventuella väsentliga eller mindre ändringar som kan ha gjorts under tiden. Vår policy granskas också en gång om året. Denna integritetspolicy granskades den 1^a april 2024.

Typer av uppgifter vi samlar in

• Identifieringsuppgifter
• Finansiella uppgifter
• Yrkesuppgifter
• Yrkeskvalifikationer
• Personuppgifter
• Elektroniska identifieringsuppgifter
  

Mer information om vilka typer av uppgifter vi samlar in finns nedan. 

Hur vi använder dina uppgifter

• Rekrytering för tjänster
• Leverera och anpassa vår tjänst
• Kommunicera med dig
• Analys och statistik
• Marknadsföring och kampanjer
  

Mer information om hur vi använder dina uppgifter finns nedan.

Tredje parter som behandlar dina uppgifter

Enheter som hjälper oss att regelbundet tillhandahålla och vidareutveckla våra tjänster kan vara mottagare av dina uppgifter.

Vi kan överföra dina personuppgifter utanför Republiken Serbien och/eller utanför Europeiska ekonomiska samarbetsområdet för att regelbundet tillhandahålla våra tjänster och/eller för att vidareutveckla dem.

Om du vill veta mer om behandlingen av dina personuppgifter av tredje parter, kan du läsa det nedan. 

Vi använder cookies

Användningen av cookies gör det möjligt för oss att förbättra webbplatsnavigeringen, analysera beteendet på webbplatsen för alla som besöker den och marknadsföra våra produkter och tjänster. Med cookies behandlar vi standardinformation från internetloggar och detaljer om beteendemönstret hos våra webbplatsbesökare. Läs mer i vår Cookie Policy.

När och hur vi samlar in uppgifter

Vi kan behandla olika kategorier av dina personuppgifter för att tillhandahålla våra tjänster till dig, rekrytera dig till en tjänst i vårt företag, förbättra din upplevelse av våra tjänster, vidareutveckla dem samt för att säkerställa och upprätthålla vår webbplats regelbundna funktionalitet, baserat på:

• Samtycke
• Berättigat intresse
• Fullgörande av avtal

Vi samlar inte in eller behåller dina personuppgifter längre än vad som är nödvändigt för de ändamål vi har angett. Mer information om hur och när vi samlar in dina uppgifter finns nedan.

Känn till dina rättigheter

• Rätt till tillgång
• Rätt till radering
• Rätt till rättelse
• Rätt till invändning
• Rätt till begränsning av behandling
• Rätt till klagomål
  
  

Om du vill veta mer om dina rättigheter och hur du utövar dem, läs det separata avsnittet i policyn om detta. Om du har några funderingar kring din integritet eller vill utöva dina integritetsrättigheter kan du kontakta oss via supportmail.‍‍

Typer av data vi samlar in

Genom att använda våra tjänster kan du komma att lämna ut olika typer av information, inklusive sådan som anses vara personuppgifter. När dina personuppgifter behandlas är du en registrerad och har rätt att utöva dina rättigheter som garanteras av relevant dataskyddslagstiftning, såsom förklaras i denna policy. 

Med tanke på att vi bestämmer ändamålen och medlen för behandlingen av personuppgifter på vår webbplats, anses vi juridiskt vara personuppgiftsansvariga för dina personuppgifter på denna webbplats. Att vara personuppgiftsansvarig ger oss möjlighet att behandla dina personuppgifter, men förpliktar oss också att skydda dem på det sätt som regleras av tillämplig lagstiftning.

Observera att olika kategorier kommer att behandlas i olika situationer. Läs mer om ändamålen med behandlingen av dina personuppgifter i avsnittet "Hur vi använder dina uppgifter" i denna policy. 

Se vilka typer av personuppgifter vi samlar in nedan:

Identifikationsuppgifter

Personligt identifierbar information 

Vi behandlar din e-postadress, namn, telefonnummer, adress, konton i sociala medier och ID som tilldelats av den personuppgiftsansvarige, när du ansöker om en tjänst hos vårt företag, ansöker om våra tjänster, prenumererar på nyhetsbrev och annan kommunikation från oss samt skapar ett konto på vår webbplats.

Elektroniska identifikationsuppgifter

När du använder vår webbplats kan vi behandla IP-adressen för den enhet du använder, typ och version av webbläsare och operativsystem du använder, samt tidpunkten för inloggning. 

Yrkesmässiga uppgifter

Vi behandlar information om din utbildning, yrkeskvalifikationer, arbetslivserfarenhet och nuvarande anställning när du ansöker om en tjänst hos vårt företag. Yrkesmässiga uppgifter som företagsnamn och befattning kan behandlas från våra potentiella kunder när de ansöker om våra tjänster.

Personuppgifter

Vi behandlar dina personuppgifter såsom ålder, födelsedatum, nationalitet och kön när du ansöker om en tjänst hos vårt företag.

Videoinspelningar 

Videoinspelningar behandlas när du ansöker om en tjänst hos vårt företag.

Hur vi använder dina uppgifter

Genom att använda våra tjänster kan du komma att lämna ut olika kategorier av personuppgifter. Du kan se vilka kategorier av personuppgifter vi behandlar i avsnittet "Typer av data vi samlar in" i denna policy. Se nedan för ändamålen med behandlingen av dina personuppgifter.

Identifikationsuppgifter

When you apply for a job position at our Company, we process your email address, name, phone number, address for the purpose of recruitment, getting in contact with the applicants to assess their suitability for the position.

We process email addresses and names when our potential clients apply for our services, for the purpose of business communication and negotiations on possible cooperation.

We may process email addresses and names and ID assigned by the controller, of our website’s visitors for the purpose of communicating with them, sending commercial communication and other materials upon their consent. Same information may be processed when users create an account on our website, for the purpose of delivering our materials, services and courses.

We may process your electronic identification data to enable communication between your device and our server and to determine your approximate geolocation, which may be further used for service customization. Your approximate location may also be used for analytical purposes. The processing of details about the browser and operating system you use is necessary to ensure the regular provision of our services to you. We may also need this data to solve technical problems should they emerge.

Financial data

Information about your credit card number and bank account number are processed when you choose to enroll in our educational courses and masterclasses, for the purpose of processing your payments and providing you with related educational material. 

Professional details

Information about education, professional qualifications, work experience and current employment are processed when you apply for the job position at our Company, for the purpose of recruitment and assessing the applicant's suitability for the position in question. Professional details such as company name and position may be processed from our potential clients when they apply for our services, for the purpose of business communication and negotiations on possible cooperation.

Personal details

Information such as age, date of birth, nationality, sex, date of birth is processed when you apply for the job position in our Company, for the purpose of recruitment and assessing the applicant's suitability for the position in question.

Video recordings

We process video recordings in a form of a Loom video when you apply to the job position at our Company, for the purpose of recruitment and checking the language knowledge level, assessment of personal character, collecting information useful for assessment of a candidate.

Third parties who process your data

We may share your personal data with third-party vendors, and other service providers we engage to perform tasks on our behalf, in certain circumstances. This enables the improvement of our site functionalities, user experience on our products and providing you with our services. The categories of recipients to whom personal data may be disclosed are:

• Entities who help us to regularly provide and further develop our services (e.g., analytics, maintenance, marketing and development). These entities include website analytics companies, commercial communication providers and others. They are allowed to process your information as reasonably necessary to perform delegated tasks. We engage in proper contractual relations with them to ensure secure processing of your personal data. 
• Public authorities and law enforcement agencies when we are legally required or permitted to do so.

We will conclude Data Protection Agreements with recipients of your data where required.  

When and how we collect data

Legal basis

According to applicable regulations, processing shall be lawful when the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Our use of your personal data, specifically electronic identification data, may be based on the legitimate interest to ensure the improvement of our product’s effectiveness and our service, measure the current effectiveness of the advertising campaigns, solve technical problems should they emerge. We rely on our legitimate interest to enable communication between your device and our server and to determine your approximate geolocation, which may be further used for service customization and for analytical purposes.  

Processing shall be lawful when the data subject has given consent to the processing of his or her personal data for one or more specific purposes. We rely on your consent when using your personal data for recruitment, delivering our services, direct marketing purposes, creating your profile.

More about the above-mentioned purposes for processing your personal data can be found in the “How we use your data” section of this Policy.

Retention and security

We do not collect or retain your personal data longer than is necessary for the purposes explained in this Policy. We store your personal data for different time periods depending on the purpose it was collected.

Some personal data may be deleted automatically based on specific schedule. 

We delete personal data when you withdraw previously given consent, such as data collected for direct marketing purposes and recruitment. Those would be your personally identifiable information, personal preferences. 

Personal data we hold about you will be deleted when you choose to exercise your right to deletion. 

We may further retain some personal data for business practices based on our legitimate interests, such as for the product and services improvement and misuse prevention.

We regularly make sure that your data is kept up to date and stored securely. To achieve that we apply different technical and organizational measures to ensure the protection of your personal data against accidental or unlawful loss, alteration, theft, unauthorized disclosure or access, unauthorized use, potential data breaches and against all other unlawful forms of data processing.

Based on business needs and security requirements we apply restrictions of access control to your personal data. Access to your personal data is only granted to trained staff with authorization, whose knowledge and skills are necessary to process personal data we gather adequately.

Information security policy

Flow Ninja DOO is committed to implementing and continuously improving its Information Security Management System (ISMS) in order to protect the organization’s information and assets, in accordance with the principles and requirements of ISO/IEC 27001:2022, which include:

• Confidentiality - Information is accessible only to authorized persons.
• Integrity - Data must be accurate, complete, and protected from unauthorized modification.
• Availability - Information, systems, and services must be available when needed.
• Legality and Compliance - Adherence to all applicable laws, regulations, and contractual
• Accountability - Every employee is responsible for applying the established security rules and procedures.
• Least Privilege - Access is granted only to the extent necessary to perform one’s duties.
• Continuous Improvement - The policy is regularly reviewed and enhanced in line with emerging risks and new technologies.

The organization is committed to:

• Fulfilling all applicable requirements and control measures related to information security.
• Continuously modernizing equipment and ensuring ongoing professional development and education of all employees to improve knowledge, data security, capabilities, competencies, and skills.
• Conducting information security training for all employees and relevant stakeholders to ensure information protection within the organization and for clients.
• Defining and managing processes that contribute to client satisfaction and information security.
• Building strong partnerships with clients, suppliers, and other interested parties.
• Ensuring the confidentiality of information and preventing unauthorized disclosure.
• Reviewing the environmental impact of its activities to reduce greenhouse gas emissions.
• Achieving the defined quality and information security objectives.

Find signed document here.

Know your rights

Processing of personal data that may occur on this website is about you and your personal data. Therefore, you are regarded as a data subject, under the relevant data protection laws. 

As a data subject you are entitled to exercise the rights listed below:

Right of access

You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, information about the processing of your data, your rights and where applicable to request access to the data.

Right to erasure (right to be forgotten)

In certain circumstances you have the right to request that we erase the information we hold about you. These are as follows:

• Where the data is no longer needed for the purposes, it was collected
• Where you have withdrawn consent for the processing of your data and there is no other lawful basis on which we can continue to process your data
• Where you objected to the processing and there are no overriding legitimate grounds to continue
• Where the data has been unlawfully processed
• Where the data must be erased for the purpose of compliance with a legal obligation.

We will be exempt from this obligation if it is impossible to comply with or if the identity of the requester cannot be verified, as we are able to act only upon verifiable consumers’ requests.

Right to rectification

You have the right to ask us to delete inaccurate personal data concerning you. Taking into account the purposes of the data processing, you have the right to have incomplete personal data completed and inaccurate data corrected.

Right to object to the processing of your personal data

At any time, you have the right to object to our processing of your data on grounds relating to your situation. Upon your objection, we will stop processing your data unless we can demonstrate compelling legitimate grounds for continuing the processing which override interests of your fundamental freedoms and rights, or if further processing is necessary for the establishment, exercise or defense of legal claims.

Right to restriction of processing

You have the right to seek the restriction of the processing of your personal data in the following circumstances:

• If the accuracy of the data is contested, processing may be restricted for the period necessary to allow us to verify its’ accuracy;
• The processing is unlawful, and you request restriction instead of erasure;
• We no longer need the data for the purposes it was collected, but data is still needed in connection with establishing, exercising and defending legal rights.
• If you objected to the processing of your personal data while awaiting verification on whether our legitimate interests for processing your data overrides the interest of your fundamental rights and freedoms.

Right not to be the subject of automated decision making

You have the right to object to our processing of your data for automated decision making, including profiling, where such processing produces legal effects concerning you or similarly significantly affects you. Upon your legitimate objection, your personal data will no longer be processed for automated decision making.

Right to data portability

Under certain circumstances you have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format (i.e., in digital form). You have the right to request the transmission of that data to another entity without hindrance from us, if such transmission is technically feasible.

Right to withdraw consent

We rely on your consent to process some categories of your personal data. You can withdraw your consent at any time without giving any reason to us and without any charge to you.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its’ withdrawal.

Right to lodge a complaint

If you feel that your personal data rights have been breached, you have the right to lodge a complaint with your local data protection authority.

As we are established in Serbia you may choose to contact the Commissioner for information of public importance and personal data protection.

How to exercise your rights

If you have any questions regarding the processing of your personal data explained in this Policy or wish to exercise any of your rights listed above, please contact us via support mail.