This privacy policy explains what personal data the SEE ENERGY 2026 – International Energy Conference, Exhibition & B2B Platform website (https://events-serbio.rs/) collects, for what purposes it processes that data, with whom it is shared, and what rights you have regarding your data.
The policy is prepared in accordance with the Personal Data Protection Act of the Republic of Serbia (Official Gazette RS, no. 87/2018 — hereinafter: the PDPA).
Data controller
The controller of your personal data is:
Nacionalna asocijacija za biomasu "SERBIO"
Vladike Ćirića 2, 21000 Novi Sad, Serbia
Tax ID (PIB): 107872646 · Registration number (matični broj): 28099827
E-mail: office@serbio.rs
Phone: +381 62 179 0 383
What data we collect
Depending on how you use the website, we may process the following categories of data:
- Data you provide to us directly — full name, e-mail address, phone number, address and the content of your message when you contact us through a contact form, e-mail or by phone.
- Order data — data needed to conclude and perform the contract (delivery address, chosen products, payment data), where the website enables purchases.
- Technical data — IP address, device and browser type, data collected through cookies. Learn more in our Cookie policy.
We do not collect special categories of personal data (data about health, religious beliefs and similar), and we ask you not to provide us with such data.
Purposes and legal basis for processing
We process data only where there is a legal basis under Article 12 of the PDPA:
- Performance of the contract — processing orders, delivery, complaints and communication related to a purchase.
- Legal obligation — keeping accounting records, handling complaints and requests of competent authorities.
- Legitimate interest — basic website security, preventing abuse, and responding to inquiries.
- Consent — sending notifications (newsletter) and using cookies that are not strictly necessary. You may withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
Who we share data with
We do not sell or rent your data to third parties. We share data only with processors who provide services necessary for the operation of the website and business, based on contracts that oblige them to protect data:
- the hosting provider on which the website runs;
- courier services, for order delivery;
- a bookkeeping agency, to fulfil statutory obligations;
- competent state authorities, where we are required to do so by regulation.
Roles of the website owner, the software and suppliers
The owner or operator of this website determines the purposes and means of processing and, as a rule, has the role of controller. RXN Legal Kit is locally installed software and is not an independent controller or processor. RXN Web Solutions does not become a processor merely because it developed the plugin. Hosting, SMTP, cloud, backup, security and other suppliers may have the role of processor if they process data according to the instructions of the website owner. Where RXN Web Solutions accesses a client’s production data within agreed maintenance, the roles and obligations must be governed by an appropriate data processing agreement.
Transfer of data outside the Republic of Serbia
As a rule, we process data on the territory of the Republic of Serbia. If data is transferred to other countries (for example, where the service provider’s servers are located abroad), the transfer is carried out in accordance with the conditions of the PDPA — to countries for which an adequate level of protection has been established or with appropriate safeguards.
How long we keep data
We keep data only as long as necessary to achieve the purpose for which it was collected:
- order and invoice data — for the periods prescribed by tax and accounting regulations;
- inquiries and correspondence — while communication lasts and for a reasonable period afterwards;
- data processed on the basis of consent — until the consent is withdrawn.
After the period expires, the data is deleted or anonymised.
Legal forms and attachments
When you submit a withdrawal, complaint, or data request form, we keep the data you entered, the case number, the course of resolution, and any attachment for processing the request, proving receipt, and fulfilling legal obligations. Attachments are stored in a protected space and are not sent by e-mail. The confirmation to the submitter contains a reference, a safe summary, and a time-limited link to a copy of the statement. Retention periods that are not expressly prescribed by law represent a documented default policy of the controller and are reviewed against the actual purposes, contracts and special rules of the website. An active Legal Hold prevents deletion and anonymisation.
Your rights
In accordance with the PDPA you may request access, correction, deletion, restriction of processing, objection, data portability, and withdrawal of consent, as well as describe another request. Choosing a right does not mean the request will automatically be granted; the controller verifies identity, the legal basis and applicable exceptions, and informs you of the outcome.
You may submit a request by e-mail at office@serbio.rs or through the form on the Personal data requests page. We respond to requests without delay, and no later than within 30 days.
If you consider that your data is being processed contrary to the law, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs.
Data security
We apply reasonable technical and organisational measures to protect data from loss, misuse and unauthorised access: an encrypted connection (HTTPS), restricted access to data, and regular system updates. No transmission of data over the internet is completely secure, but we protect data in line with good practice.
Changes to this policy
We may change this privacy policy from time to time, mainly due to changes in legislation or the way the website operates. The current version is always published on this page, with the date of the last change.
Translation note — the Serbian version is authoritative
This English text is an informative translation of the original Serbian document for easier understanding and is not the official version. The legally binding text is the Serbian version of this page. This text is a structural processing of the Consumer Protection Act (Official Gazette RS, no. 35/2026) and/or the Personal Data Protection Act (Official Gazette RS, no. 87/2018). For the official version compare with the Official Gazette of the Republic of Serbia. Generated: 2026-08-07 · Next recommended review: 2027-02-07.
