Politika privatnosti

Ova Politika je osmišljena da informiše posetioce veb-sajta o tome kako se lični podaci prikupljaju, koriste, čuvaju ili na drugi način obrađuju tokom pregledanja našeg veb-sajta. Mi smo vlasnik ovog veb-sajta i smatramo se rukovaocem vašim ličnim podacima. Mi smo: Flow Ninja doo, Milutina Milankovića 11g, 11070 Novi Beograd

Ovu Politiku možemo povremeno menjati, kako bismo odrazili promene na našem veb-sajtu i u našim uslugama. Da bismo osigurali transparentnost, molimo vas da je pregledate radi bilo kakvih bitnih ili manjih izmena koje su u međuvremenu mogle biti unete. Naša Politika se takođe pregleda jednom godišnje. Ova Politika privatnosti je pregledana 1^st aprila 2024.

Vrste podataka koje prikupljamo

• Podaci za identifikaciju
• Finansijski podaci
• Profesionalni podaci
• Profesionalne kvalifikacije
• Lični podaci
• Podaci za elektronsku identifikaciju
  

Više detalja o vrstama podataka koje prikupljamo dostupno je u nastavku. 

Kako koristimo vaše podatke

• Regrutacija za radna mesta
• Pružanje i prilagođavanje naše usluge
• Komunikacija sa vama
• Analitika i statistika
• Marketing i promocija
  

Više detalja o tome kako koristimo vaše podatke dostupno je u nastavku.

Treća lica koja obrađuju vaše podatke

Subjekti koji nam pomažu da redovno pružamo i dalje razvijamo naše usluge mogu biti primaoci vaših podataka.

Vaše lične podatke možemo preneti van Republike Srbije i/ili van Evropskog ekonomskog prostora kako bismo redovno pružali naše usluge i/ili ih dalje razvijali.

Ako želite da saznate više detalja u vezi sa obradom vaših ličnih podataka od strane trećih lica, pročitajte u nastavku. 

Koristimo kolačiće

Korišćenje kolačića nam omogućava da poboljšamo navigaciju sajtom, analiziramo ponašanje svih posetilaca veb stranice i promovišemo naše proizvode i usluge. Pomoću kolačića obrađujemo standardne informacije o internet logovima i detalje o obrascima ponašanja posetilaca naše veb stranice. Pročitajte više u našoj Politici kolačića.

Kada i kako prikupljamo podatke

Možemo obrađivati različite kategorije vaših ličnih podataka kako bismo vam pružili naše usluge, zaposlili vas na poziciji u našoj Kompaniji, poboljšali vaše iskustvo sa našim uslugama, dalje ih razvijali i obezbedili i održavali redovno funkcionisanje naše veb stranice, na osnovu:

• Pristanak
• Legitimni interes
• Zaključenje i izvršenje ugovora

Vaše lične podatke ne prikupljamo niti čuvamo duže nego što je to neophodno za svrhe koje smo naveli. Više detalja o tome kako i kada prikupljamo vaše podatke dostupno je u nastavku.

Upoznajte svoja prava

• Pravo na pristup
• Pravo na brisanje
• Pravo na ispravku
• Pravo na prigovor
• Pravo na ograničenje obrade
• Pravo na podnošenje prigovora
  
  

Ako želite da saznate više o svojim pravima i kako da ih ostvarite, pročitajte poseban odeljak politike o tome. Ako imate bilo kakvih nedoumica u vezi sa svojom privatnošću ili želite da ostvarite svoja prava na privatnost, možete nam se obratiti putem imejla za podršku.‍‍

Vrste podataka koje prikupljamo

Korišćenjem naših usluga, možete otkriti različite delove informacija, uključujući i one koje se smatraju ličnim podacima. Kada se vaši lični podaci obrađuju, vi ste lice na koje se podaci odnose i imate pravo da ostvarite svoja prava zagarantovana relevantnim zakonodavstvom o zaštiti podataka, kako je objašnjeno u ovoj Politici. 

S obzirom na to da mi određujemo svrhe i sredstva obrade ličnih podataka na našoj veb stranici, zakonski se smatramo kontrolorom podataka za vaše lične podatke na ovoj veb stranici. Biti kontrolor podataka pruža nam mogućnost da obrađujemo vaše lične podatke, ali nas takođe obavezuje da ih štitimo na način regulisan važećim zakonodavstvom.

Imajte na umu da će se različite kategorije obrađivati u različitim situacijama. Više o svrhama obrade vaših ličnih podataka pročitajte u odeljku „Kako koristimo vaše podatke“ ove Politike. 

U nastavku proverite vrste ličnih podataka koje prikupljamo:

Podaci za identifikaciju

Lični podaci za identifikaciju 

Obrađujemo vašu imejl adresu, ime, broj telefona, adresu, naloge na društvenim mrežama i ID dodeljen od strane kontrolora, kada se prijavljujete za radno mesto u našoj Kompaniji, prijavljujete se za naše usluge, pretplatite se na bilten i drugu komunikaciju od nas i kreirate nalog na našoj veb stranici.

Elektronski identifikacioni podaci

Kada koristite našu veb stranicu, možemo obrađivati IP adresu uređaja koji koristite, tip i verziju pretraživača i operativnog sistema koji koristite, kao i vreme prijavljivanja. 

Profesionalni podaci

Obrađujemo informacije o vašem obrazovanju, profesionalnim kvalifikacijama, radnom iskustvu i trenutnom zaposlenju kada se prijavljujete za radno mesto u našoj Kompaniji. Profesionalni podaci kao što su naziv kompanije i pozicija mogu biti obrađeni od strane naših potencijalnih klijenata kada se prijave za naše usluge.

Lični podaci

Obrađujemo vaše lične podatke kao što su starost, datum rođenja, nacionalnost, pol, kada se prijavljujete za radno mesto u našoj Kompaniji.

Video snimci 

Video snimci se obrađuju kada se prijavljujete za radno mesto u našoj Kompaniji.

Kako koristimo vaše podatke

Korišćenjem naših usluga, možete otkriti različite kategorije ličnih podataka. Koje kategorije ličnih podataka obrađujemo, možete proveriti u odeljku „Vrste podataka koje prikupljamo“ ove Politike. U nastavku proverite svrhe obrade vaših ličnih podataka.

Podaci za identifikaciju

When you apply for a job position at our Company, we process your email address, name, phone number, address for the purpose of recruitment, getting in contact with the applicants to assess their suitability for the position.

We process email addresses and names when our potential clients apply for our services, for the purpose of business communication and negotiations on possible cooperation.

We may process email addresses and names and ID assigned by the controller, of our website’s visitors for the purpose of communicating with them, sending commercial communication and other materials upon their consent. Same information may be processed when users create an account on our website, for the purpose of delivering our materials, services and courses.

We may process your electronic identification data to enable communication between your device and our server and to determine your approximate geolocation, which may be further used for service customization. Your approximate location may also be used for analytical purposes. The processing of details about the browser and operating system you use is necessary to ensure the regular provision of our services to you. We may also need this data to solve technical problems should they emerge.

Financial data

Information about your credit card number and bank account number are processed when you choose to enroll in our educational courses and masterclasses, for the purpose of processing your payments and providing you with related educational material. 

Professional details

Information about education, professional qualifications, work experience and current employment are processed when you apply for the job position at our Company, for the purpose of recruitment and assessing the applicant's suitability for the position in question. Professional details such as company name and position may be processed from our potential clients when they apply for our services, for the purpose of business communication and negotiations on possible cooperation.

Personal details

Information such as age, date of birth, nationality, sex, date of birth is processed when you apply for the job position in our Company, for the purpose of recruitment and assessing the applicant's suitability for the position in question.

Video recordings

We process video recordings in a form of a Loom video when you apply to the job position at our Company, for the purpose of recruitment and checking the language knowledge level, assessment of personal character, collecting information useful for assessment of a candidate.

Third parties who process your data

We may share your personal data with third-party vendors, and other service providers we engage to perform tasks on our behalf, in certain circumstances. This enables the improvement of our site functionalities, user experience on our products and providing you with our services. The categories of recipients to whom personal data may be disclosed are:

• Entities who help us to regularly provide and further develop our services (e.g., analytics, maintenance, marketing and development). These entities include website analytics companies, commercial communication providers and others. They are allowed to process your information as reasonably necessary to perform delegated tasks. We engage in proper contractual relations with them to ensure secure processing of your personal data. 
• Public authorities and law enforcement agencies when we are legally required or permitted to do so.

We will conclude Data Protection Agreements with recipients of your data where required.  

When and how we collect data

Legal basis

According to applicable regulations, processing shall be lawful when the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Our use of your personal data, specifically electronic identification data, may be based on the legitimate interest to ensure the improvement of our product’s effectiveness and our service, measure the current effectiveness of the advertising campaigns, solve technical problems should they emerge. We rely on our legitimate interest to enable communication between your device and our server and to determine your approximate geolocation, which may be further used for service customization and for analytical purposes.  

Processing shall be lawful when the data subject has given consent to the processing of his or her personal data for one or more specific purposes. We rely on your consent when using your personal data for recruitment, delivering our services, direct marketing purposes, creating your profile.

More about the above-mentioned purposes for processing your personal data can be found in the “How we use your data” section of this Policy.

Retention and security

We do not collect or retain your personal data longer than is necessary for the purposes explained in this Policy. We store your personal data for different time periods depending on the purpose it was collected.

Some personal data may be deleted automatically based on specific schedule. 

We delete personal data when you withdraw previously given consent, such as data collected for direct marketing purposes and recruitment. Those would be your personally identifiable information, personal preferences. 

Personal data we hold about you will be deleted when you choose to exercise your right to deletion. 

We may further retain some personal data for business practices based on our legitimate interests, such as for the product and services improvement and misuse prevention.

We regularly make sure that your data is kept up to date and stored securely. To achieve that we apply different technical and organizational measures to ensure the protection of your personal data against accidental or unlawful loss, alteration, theft, unauthorized disclosure or access, unauthorized use, potential data breaches and against all other unlawful forms of data processing.

Based on business needs and security requirements we apply restrictions of access control to your personal data. Access to your personal data is only granted to trained staff with authorization, whose knowledge and skills are necessary to process personal data we gather adequately.

Information security policy

Flow Ninja DOO is committed to implementing and continuously improving its Information Security Management System (ISMS) in order to protect the organization’s information and assets, in accordance with the principles and requirements of ISO/IEC 27001:2022, which include:

• Confidentiality - Information is accessible only to authorized persons.
• Integrity - Data must be accurate, complete, and protected from unauthorized modification.
• Availability - Information, systems, and services must be available when needed.
• Legality and Compliance - Adherence to all applicable laws, regulations, and contractual
• Accountability - Every employee is responsible for applying the established security rules and procedures.
• Least Privilege - Access is granted only to the extent necessary to perform one’s duties.
• Continuous Improvement - The policy is regularly reviewed and enhanced in line with emerging risks and new technologies.

The organization is committed to:

• Fulfilling all applicable requirements and control measures related to information security.
• Continuously modernizing equipment and ensuring ongoing professional development and education of all employees to improve knowledge, data security, capabilities, competencies, and skills.
• Conducting information security training for all employees and relevant stakeholders to ensure information protection within the organization and for clients.
• Defining and managing processes that contribute to client satisfaction and information security.
• Building strong partnerships with clients, suppliers, and other interested parties.
• Ensuring the confidentiality of information and preventing unauthorized disclosure.
• Reviewing the environmental impact of its activities to reduce greenhouse gas emissions.
• Achieving the defined quality and information security objectives.

Find signed document here.

Know your rights

Processing of personal data that may occur on this website is about you and your personal data. Therefore, you are regarded as a data subject, under the relevant data protection laws. 

As a data subject you are entitled to exercise the rights listed below:

Right of access

You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, information about the processing of your data, your rights and where applicable to request access to the data.

Right to erasure (right to be forgotten)

In certain circumstances you have the right to request that we erase the information we hold about you. These are as follows:

• Where the data is no longer needed for the purposes, it was collected
• Where you have withdrawn consent for the processing of your data and there is no other lawful basis on which we can continue to process your data
• Where you objected to the processing and there are no overriding legitimate grounds to continue
• Where the data has been unlawfully processed
• Where the data must be erased for the purpose of compliance with a legal obligation.

We will be exempt from this obligation if it is impossible to comply with or if the identity of the requester cannot be verified, as we are able to act only upon verifiable consumers’ requests.

Right to rectification

You have the right to ask us to delete inaccurate personal data concerning you. Taking into account the purposes of the data processing, you have the right to have incomplete personal data completed and inaccurate data corrected.

Right to object to the processing of your personal data

At any time, you have the right to object to our processing of your data on grounds relating to your situation. Upon your objection, we will stop processing your data unless we can demonstrate compelling legitimate grounds for continuing the processing which override interests of your fundamental freedoms and rights, or if further processing is necessary for the establishment, exercise or defense of legal claims.

Right to restriction of processing

You have the right to seek the restriction of the processing of your personal data in the following circumstances:

• If the accuracy of the data is contested, processing may be restricted for the period necessary to allow us to verify its’ accuracy;
• The processing is unlawful, and you request restriction instead of erasure;
• We no longer need the data for the purposes it was collected, but data is still needed in connection with establishing, exercising and defending legal rights.
• If you objected to the processing of your personal data while awaiting verification on whether our legitimate interests for processing your data overrides the interest of your fundamental rights and freedoms.

Right not to be the subject of automated decision making

You have the right to object to our processing of your data for automated decision making, including profiling, where such processing produces legal effects concerning you or similarly significantly affects you. Upon your legitimate objection, your personal data will no longer be processed for automated decision making.

Right to data portability

Under certain circumstances you have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format (i.e., in digital form). You have the right to request the transmission of that data to another entity without hindrance from us, if such transmission is technically feasible.

Right to withdraw consent

We rely on your consent to process some categories of your personal data. You can withdraw your consent at any time without giving any reason to us and without any charge to you.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its’ withdrawal.

Right to lodge a complaint

If you feel that your personal data rights have been breached, you have the right to lodge a complaint with your local data protection authority.

As we are established in Serbia you may choose to contact the Commissioner for information of public importance and personal data protection.

How to exercise your rights

If you have any questions regarding the processing of your personal data explained in this Policy or wish to exercise any of your rights listed above, please contact us via support mail.