Data processing

NOTICE ON THE PROCESSING OF PERSONAL DATA BY THE DATA CONTROLLER

This notice relates to the processing of personal data by the controller "Banja Komerc Bekament" DOO Banja.
"Banja Komerc Bekament" DOO Banja processes the personal data of only those data subjects with whom it comes into contact for the purpose of conducting its business, either by collecting the data directly from these individuals, through their employers, co-contractors, business partners, or, where applicable, third parties.
The personal data is always processed by "Banja Komerc Bekament" DOO Banja in accordance with the principle of storage limitation, for the minimum period necessary to fulfill the specific purpose for which the data was collected, ensuring that the individuals to whom the data pertains can be identified.
The rules on personal data processing by "Banja Komerc Bekament" DOO Banja include, but are not limited to, the following main categories of data subjects and types of personal data:

1. Employees and persons engaged outside of employment, former employees, and retirees
   "Banja Komerc Bekament" DOO Banja processes the personal data of employees and persons engaged outside of employment, as well as the personal data of former employees, retirees, and their family members, primarily to comply with relevant regulations governing this type of data, including but not limited to regulations in the field of labor, employment records, pensions, disability insurance, health and social insurance, tax and accounting regulations, health and safety regulations, and relevant sector-specific regulations in the pharmaceutical industry and other sectors.
   The personal data of employees and other engaged individuals is also processed to the extent necessary to conclude and fulfill contracts with these individuals. This data may also be processed based on the individual’s consent where required, or based on legitimate interests where such interests exist.
2. Applicants for employment or engagement outside of employment
   Personal data of individuals applying for employment or engagement outside of employment or for internships is processed only to the extent necessary for the recruitment and selection process to be conducted efficiently, respecting the interests of "Banja Komerc Bekament" DOO Banja and the rights and interests of the candidates. Candidates who are not selected retain all rights provided by applicable regulations.
3. Individuals buying or selling real estate where "Banja Komerc Bekament" DOO Banja is the buyer or seller
   Personal data of individuals buying or selling real estate is processed only to the extent necessary to lawfully complete the sale and the contract finalization, respecting the interests of "Banja Komerc Bekament" DOO Banja and the rights and interests of the parties involved.
4. Individuals entering the business premises of "Banja Komerc Bekament" DOO Banja
   "Banja Komerc Bekament" DOO Banja has a legitimate interest in processing the personal data of all individuals entering its business premises, regardless of location, and maintains records of these visits in accordance with all relevant regulations, including but not limited to security and video surveillance regulations.
5. Experts
   "Banja Komerc Bekament" DOO Banja processes personal data of individuals from the expert community based on their consent, to maintain internal records for collaboration and communication purposes. Consent is not required if the data processing is necessary to execute a contract, or if it is required by law or based on legitimate interest.
6. Individuals filing product complaints
   Personal data of individuals filing product complaints is processed solely in accordance with applicable regulations and for the purpose of fulfilling contracts with relevant partners.
7. Business partners and individuals engaged by business partners – legal entities
   To organize its business operations, "Banja Komerc Bekament" DOO Banja collects personal data of both individuals acting independently and individuals employed by business partners (legal entities) or engaged by them for other purposes. The processing is conducted to conclude contracts and fulfill contractual and legal obligations. If the contractual party is a legal entity, "Banja Komerc Bekament" DOO Banja processes personal data to the extent necessary to execute the contract.
8. Individuals with regular or occasional business and partnership relations
   "Banja Komerc Bekament" DOO Banja processes personal data of individuals with whom it maintains regular or occasional business and partnership relations, ensuring such processing is necessary and appropriate for these purposes (such as sending event invitations, gifts, and promotional materials) while complying with all data processing principles, regulations, and internal rules.
9. Individuals participating in surveys and contests
   "Banja Komerc Bekament" DOO Banja processes personal data for donations, sponsorships, and participation in contests or surveys it organizes, based either on legitimate interest or consent, depending on the category of individuals and the type of survey.
10. Photography of individuals at events organized by "Banja Komerc Bekament" DOO Banja
    At events organized by "Banja Komerc Bekament" DOO Banja, photographs may be taken of participants, including employees, engaged individuals, and third parties. This processing is considered a legitimate interest of the company, in line with business practices, and all rights of the individuals are respected.