We recommend that you read the General Terms and Conditions of Business and Use before reading this Information.
https://quikrskills.edu.rs/ and https://courses.quikrskills.edu.rs/ (hereinafter: QuikrSkills) respecting the legal regulations in the field of privacy protection of personal data of natural persons, directs and invites you to carefully read this Information, in order to familiarize yourself with the types of personal data we process, for what purposes they are processed, which persons will have access to your data, and what are your rights regarding the processing of personal data. QuikrSkills processes your personal data (hereinafter: Data) lawfully, fairly, transparently, purposefully, in accordance with the principle of data minimization, and the principle of time limitation of storage, up-to-date and accurate, preserving the integrity and confidentiality of the data.
The purpose of this Information is to provide you with the intended purpose of processing and the type of personal data collected directly from you, as well as the way to protect your rights and all other relevant information related to data processing, in the simplest possible way.
In the following text of this Information, you will be informed in detail about all the important facts, with which it is necessary for you to familiarize yourself before communicating your personal data to us.
2. The meaning of the expression
In this Information, QuikrSkills uses the expressions provided by the Personal Data Protection Act (hereinafter: the Act), and:
- personal data is any data related to a natural person whose identity is determined or determinable, so that data, among other things, can be name, surname, address, identification number, but also IP address, account number or landline number and/ or mobile phone.
- processing of personal data is any action or set of actions that are performed automatically or non-automated with personal data or their sets, such as collection, recording, sorting, grouping, i.e. structuring, storing, adapting or changing, revealing, viewing, using, disclosure by transmission, i.e. delivery, duplication, dissemination or otherwise making available, comparison, limitation, deletion or destruction (hereinafter: processing).
- Controller means a natural or legal person, who independently or together with others determines the purpose and method of personal data processing.
- Recipient means a natural or legal person, i.e. a government body to which personal data has been disclosed, regardless of whether it is a third party or not, unless it is a government body that, in accordance with the law, receives personal data in the context of investigating a specific case and process this data in accordance with the rules on the protection of personal data related to the purpose of processing.
QuikrSkills će Vaše podatke o ličnosti obrađivati u svojstvu Rukovaoca. Kada se ragistrujete kod QuikrSkills, Vaše podatke o ličnosti prikupljamo u svojstvu Rukovaoca jer samostalno određujemo svrhu, vrstu i način obrade podataka, bez naloga trećeg lica.
3. Internet and contact details of data handlers/processors
https://quikrskills.edu.rs/ and https://courses.quikrskills.edu.rs/ are internet domains owned by the company EDUCARE DOO BELGRADE. By mentioning QuikrSkills in this Information, it actually means the company EDUCARE DOO BELGRADE, to which all the obligations stipulated in this Information apply and which company fulfills all legal requirements in the process of processing personal data in accordance with the Law and acts as a legal entity that provides information society services.
EDUCARE DOO BEOGRAD
Ul. Savska 17
11000 Beograd-Savski Venac
4. Contact details of the employee in charge of personal data protection
You can contact the employee in charge of personal data protection (hereinafter: Data Protection Officer) for all questions related to the processing of your personal data, i.e. to exercise the rights prescribed by the Law, in one of the following ways:
– to the e-mail address: firstname.lastname@example.org;
– to the address of the QuikrSkills headquarters: EDUCARE DOO BELGRADE, Ul. Savska 17, 11000 Belgrade-Savski Venac, – with reference to the Data Protection Officer.
5. Purpose of processing and legal basis for processing, types of personal data processed
1) Purpose and legal basis for processing
The purpose and legal basis for processing your data is determined by the relationship you establish with QuikrSkills, and your data is processed only to the extent necessary to fulfill the purpose for which it is collected. Your personal data that we process is used exclusively in the process of attending an online education course.
The purpose for which QuikrSkills processes your personal data is to enter basic personal data in the Certificate/Certificate of completed online training.
The legal basis for data processing is to be prescribed by law, and personal data is processed for the purpose of carrying out the online education process, for the purpose of protecting the legitimate interest of QuikrSkills or a third party, or based on your consent, as detailed below in this Information.
(a) The processing of your data is necessary in the process of the Certificate/Certificate of completed online training. If you refuse to provide the data required for this purpose, QuikrSkills will not be able to issue you the said Certificate/Certificate in the education process.
(b) Complying with QuikrSkills’ Legal Obligations Your consent is not required for the processing of data necessary to comply with QuikrSkills’ legal obligations. This processing is carried out e.g. for the purpose of applying regulations in the field of education, taxation, as well as for the purpose of resolving complaints in accordance with current regulations.
(c) Legitimate Interest Needs of QuikrSkills or a Third Party.
In certain cases, QuikrSkills bases the processing of your data on the protection of legitimate interests, either its own or of third parties, with the proviso that these legitimate interests must be stronger than your interests, rights and freedoms and not harm them.
QuikrSkills bases data processing on legitimate interest, e.g. in the following situations:
when the purpose of processing is testing and developing new products and services and improving existing ones.
when the purpose of the processing is to diagnose technical problems that QuikrSkills has on its Internet domains;
when the purpose of the processing is to maintain the Participant’s account and act on your requests;
when the purpose of the processing is to ensure the security of QuikrSkills IT systems and operations, including the security of services offered to Users;
when the processing is carried out for the purpose of preventing and investigating fraud and other criminal acts and abuses to the detriment of QuikrSkills, its Users and/or third parties;
when the processing is necessary for the initiation and conduct of legal proceedings before state authorities in order to exercise the rights and interests of QuikrSkills or other persons.
Data processing may also in other cases be based on the realization of the legitimate interests of QuikrSkills or a third party, if QuikrSkills proves that these interests are not overridden by the interests or fundamental rights and freedoms of the person to whom the data refer, and this is assessed by the Data Protection Officer by implementing the so-called balance test.
In the mentioned cases, your consent for data processing is not required, but you have the right to submit a request to exercise your rights at any time in the manner described in section number 9.
(d) Consent to data processing
Your consent to the processing of personal data by QuikrSkills entitles us to provide you with information as part of the provision of information society services in the process of online education, as well as to contact you for market research or satisfaction with QuikrSkills products and services. The processing for the stated purposes is carried out in order for QuikrSkills to further adapt the offer of the education program to your wishes and needs, timely inform you about new services, receive feedback on the services provided, consider suggestions for improvements, include you in the research and surveys it conducts.
Withholding consent to processing for the stated purposes does not affect the implementation of QuikrSkills’ prescribed obligations, nor processing based on the legitimate interest of QuikrSkills or a third party.
You can revoke your consent at any time by contacting QuikrSkills as described in section 4 of this information.
A minor who has reached the age of 15 can independently give consent for the processing of personal data in the use of information society services. In the case of a minor who has not reached the age of 15, for the processing of personal data, consent must be given by the parent exercising parental rights, or another legal representative of the minor.
2) Types of personal data processed
(A) Basic Identification Data
The basic personal data that we process, and for the purpose of issuing you a Certificate/Certificate of completed online training, are your name and surname, address of residence/residence, for domestic persons the unique identity number of citizens (JMBG), for foreign persons the passport number and country issuing.
(B) Other types of data
The data that we collect and process in order to open a user account of the Participant are shown below:
Every natural person who opens a Student account with QuikrSkills enters the following information: first name, last name, username, password and e-mail. The data is stored until the user account is deactivated or deleted. Deactivation of the user account will be carried out by QuikrSkills, if the Participant does not use his user account continuously for one year, i.e. if QuikrSkills does not continuously register the Participant’s activity for a period of one year (which means the Participant’s logging into his user account, then any other activity on the Internet QuikrSkills pages). Deactivation deletes all Participant data.
6. Categories of recipients to whom your personal data may be provided
The persons to whom your personal data is submitted can act as: (1) independent data handlers, i.e. entities that themselves determine the purpose and method of personal data processing or (2) data processors, i.e. entities that process personal data on behalf of QuikrSkills as a controller. The aforementioned persons are obliged to apply security and protection measures at the level provided by QuikrSkills when processing your personal data.
Depending on the specific purpose of the processing, the properties in which QuikrSkills processes your personal data (as Controller), access to all or only certain personal data may have:
a. QuikrSkills employees and associates on any basis (who undertake to keep
data confidentiality), only to the extent that it is necessary for the needs of specific processing
b. QuikrSkills may share personal information with its affiliates when necessary and
always within the framework of legitimate interest and defined purpose.
c. Entities involved in any way in a status change with QuikrSkills.
d. Business partners of QuikrSkills, who perform certain processing tasks for the purposes of QuikrSkills as processors, such as external collaborators who provide certain services, as well as software companies that create and maintain software or hardware in which your data is stored.
When we engage a third party as a Processor in the capacity of Controller, we regulate relations with the specific Processor by contract, which regulates all essential aspects of personal data processing as well as protection measures.
In some cases, and in order to achieve the purpose of processing, QuikrSkills also provides your data to the following
1) to third parties who process your personal data within:
– provision and management of procedures and IT systems;
− managing communication with Users, as well as archiving data and documentation in paper or electronic form;
– service quality records, market research, information and commercial promotion of QuikrSkills products;
2) competent bodies and organizations (judicial and administrative bodies);
7. Transfer of personal data to another country or international organization
QuikrSkills processes your personal data in the Republic of Serbia, and exceptionally transfers personal data to another country or to an international organization without prior approval if it has been determined that the other country or international organization provides an adequate level of personal data protection.
An adequate level of protection is considered to be provided in countries and international organizations: (a) which are members of the Council of Europe Convention on the Protection of Individuals with regard to Automatic Processing of Personal Data or (b) which the European Commission has determined provide an adequate level of protection or ( c) with which an international agreement on the transfer of personal data has been concluded, or (d) entities from the list from the Decision of the Government of the RS on the list of countries, parts of their territories or one or more sectors of certain activities in those countries and international organizations in which it is considered that an appropriate level of personal data protection is provided.
The transfer of your data to a country or an international organization that does not meet the stated conditions will be carried out only with your express consent and if the other conditions stipulated in Articles 65 and 69 of the Law are met.
8. Method of processing and period of storage of personal data
Your personal data will be processed electronically to ensure security and confidentiality. The processing of the specified purpose is automated.
The storage period for the processing of your personal data is determined by the purpose for which the data was collected, and it is stored until the termination of the purpose of processing for which it was collected.
Regardless of the intended period/term of data storage, it can be interrupted from the moment of revoking the given consent or until the end of the time period for which you gave us consent for processing, after which the data is permanently deleted, i.e. rendered unrecognizable.
The data provided to us by the Participant in order to open a user account are stored until deactivation or deletion.
In exceptional circumstances, we may store your personal data after the expiration of the stipulated period/term of storage, fulfillment of the purpose for which the personal data was processed, as well as after your withdrawal of the given consent, and when it is necessary to fulfill the prescribed obligations or legitimate interests of QuikrSkills.
9. The rights of persons to whom personal data refer
QuikrSkills maintains a fair and transparent business policy, especially in the area of collecting and processing personal data.
As an individual whose data is collected and processed by QuikrSkills, you have the right to:
a. Right of access
The right of access means that you can obtain from QuikrSkills information about whether your personal data is being processed and, if so, consent to access your personal data and obtain information such as: purpose of processing, types of personal data, recipients data, storage period, etc. When personal data is transferred to another country or international organization you have the right to be informed of the safeguards related to the transfer, as set out in Part VII of this information. Upon request, QuikrSkills will provide you with a copy of the personal data it processes. QuikrSkills may charge a reasonable administrative fee for additional requests. If you submit your request electronically and unless otherwise requested, QuikrSkills will provide the information to you electronically.
QuikrSkills processes your personal data in its capacity as a Controller – therefore, you have the right to receive from QuikrSkills all information about the processing in question.
b. The right to correct or supplement data
Upon your request, QuikrSkills will correct your personal data that is incorrect or complete incomplete data.
c. The right to delete data
Upon your request, QuikrSkills will delete your personal data if the conditions from Article 30 of the Law are met (eg if the purpose for which they were collected is met, if consent to processing is withdrawn, and there is no legal basis for processing). QuikrSkills cannot delete your personal data: if the obligation to process them is prescribed by law or the processing is mandatory for reasons of protection of public interest (e.g. acting on the order of a state authority) or is necessary for initiating, filing or defending a legal claim (e.g. filing lawsuits, conducting court or administrative proceedings, etc.).
d. Right to restriction of processing
At your request, QuikrSkills will limit the processing of your personal data if any of the conditions from Article 31 of the Law are met (eg, if you have a valid dispute about the accuracy of your personal data or the legality of the processing, etc.).
e. Right to data portability
Upon your request, QuikrSkills will provide you with personal data in a structured, commonly used and
in an electronically readable form (e.g. on a computer) and enable you to transfer them to another controller without interference by QuikrSkills if all of the following conditions are met: (a) the processing is based on consent or is necessary for the performance of a contract, (b) the processing is automated and (c) the transfer does not adversely affect the exercise of the rights and freedoms of other persons.
This right includes the ability to request that QuikrSkills transfer personal data directly to another controller if technically feasible.
f. The right to object
You may at any time object to the processing of personal data based on a legitimate interest or necessary for the purpose of carrying out tasks in the public interest or exercising statutory powers QuikrSkills will suspend further processing of such data, unless there is an overriding lawful basis for the processing over your interests or freedoms or if the processing is carried out for the purpose of initiating, submitting or defending against a legal claim (e.g. filing a lawsuit, counterclaim, etc.).
Mr. The right to complain to the Commissioner for Personal Data Protection and the right to administrative and judicial protection
If you believe that the processing of your personal data is carried out contrary to the provisions of the Law or other valid regulations, you can file a complaint with the Commissioner for Information of Public Importance and Protection of Personal Data. If you are not satisfied with the Commissioner’s decision, you can file an administrative dispute against it within 30 days of receiving the decision. Filing a claim in an administrative dispute does not affect the right to initiate other administrative or judicial protection procedures.
Commissioner for access to information of public importance and protection of personal data – Bulevar kralja Aleksandra number 15, 11120 Belgrade, phone: +38111 3408 900, e-mail: email@example.com.
In order to exercise the rights of the Data Subject – your rights, QuikrSkills will provide you with all the necessary support in the spirit of good business policy and in accordance with the conditions and in the manner prescribed by the Law.
In order to protect your rights as a person whose data is collected and processed, you can contact the Data Protection Officer at any time in one of the ways listed in part IV of this Information.
We will deal with your inquiries and requests within short deadlines, which may vary depending on the complexity of the specific inquiry or request, and other circumstances, but the deadline for processing the request or request by QuikrSkills will not exceed 60 days.
10. Security of your personal information
In order to secure the data we process, we always strive to apply the necessary standards in the protection of personal data, and to apply all necessary technical, organizational and personnel protection measures in accordance with the requirements of the applicable law, including, but not limited to: technical protection measures, protection measures related to physical access to the place where your data is stored, measures to protect the information security of your data in accordance with current regulations, and other measures that are suitable for processing and necessary to ensure the protection of specific personal data.
Third parties that process data are also obliged to implement all necessary technical, organizational and personnel measures that provide the required level of security of your personal data.
QuikrSkills has taken appropriate technical, organizational and personnel measures to ensure that the processing is carried out in accordance with the Law, taking into account the nature, scope, circumstances and purpose of the processing, as well as the likelihood of risk occurrence and the level of risk to the rights and freedoms of natural persons whose collect and process personal data.
11. Delivery of goods
Since these are digital products, after the customer’s payment and verification that everything went well, the customer immediately gets access to the digital material.
12. Statement of Conversion
All payments will be made in the local currency of the Republic of Serbia – dinar (RSD). For informative display of prices in other currencies, the middle exchange rate of the National Bank of Serbia is used. The amount for which your payment card will be charged will be expressed in your local currency through conversion to the same at the exchange rate used by the card organizations, which cannot be known to us at the time of the transaction. As a result of this conversion, there is a possibility of a slight difference from the original price listed on our website.
13. Declaration on VAT
VAT included in the price and there are no hidden costs.
In the case of returning goods and refunding funds to a customer who previously paid with one of the payment cards, partially or in full, and regardless of the reason for the return, Educare d.o.o. is obliged to make refunds exclusively through VISA, EC/MC, Maestro, Amex and Dina payment methods, which means that the bank will refund the funds to the account of the card user at the seller’s request.
15. Protection of Confidential Transaction Data
When entering payment card data, confidential information is transmitted via a public network in a protected (encrypted) form using the SSL protocol and the PKI system, as currently the most modern cryptographic technology. Data security during purchases is guaranteed by the payment card processor, Banca Intesa ad Beograd, so the entire payment process is carried out on the bank’s website. Payment card information is not available to our system at any moment.
16. Final regulations
This Information on the collection of access and processing of personal data is issued by QuikrSkills today
If there are changes or additions to this Information, all QuikrSkills Users will be notified in a timely manner.
In Belgrade, on July 25, 2022.