Privacy policy

Privacy Policy

Last updated: July 21, 2025.

This website is part of a project supported by the European Bank for Reconstruction and Development (EBRD). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

The data controller responsible for processing your personal data is:

TEKON - Tehnokonsalting d.o.o.

2. What Personal Data We Collect

We only collect the following information when you submit a message via our contact form:

  • First name
  • Last name
  • Email address

We do not collect sensitive personal data or use automated decision-making or profiling.

3. Purpose and Legal Basis for Processing

Your data is collected solely for the purpose of responding to your questions or comments related to this project.

The legal basis for processing your data is Article 6(1)(f) of the GDPR — our legitimate interest in maintaining communication with the public and stakeholders.

4. Data Storage and Retention

Your personal data is stored securely and only accessible to authorized personnel.

We retain your data only as long as necessary to respond to your inquiry, and for no longer than 12 months after the last communication, unless legal obligations require longer retention.

5. Data Sharing

We do not share your personal data with third parties, except:

  • If required by law;
  • With EBRD or designated project partners involved in managing public consultations, who are contractually obligated to protect your data.

Your data will not be transferred outside the European Economic Area (EEA).

6. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data;
  • Correct inaccurate or incomplete data;
  • Request deletion of your data ("right to be forgotten");
  • Restrict processing of your data;
  • Object to processing based on legitimate interests;
  • Lodge a complaint with a supervisory authority.

To exercise your rights, reach out to us on our contact page.

If you believe your rights have been violated, you may lodge a complaint with your national Data Protection Authority. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection (https://www.poverenik.rs/).