Privacy Policy

Also, at Coral, we have provided constant contact for any questions or complaints related to our privacy policy or the handling of personal data. You can contact us at any time by mail, e-mail and phone or in person within working hours:

Coral SRB d.o.o. Beograd
Jurija Gagarina 40b
11000 Beograd
Tel:
E-mail: infoces@coralenergy.rs

Data collection

Personal data is any information that can identify an individual. An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more data specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

1) Who is responsible for the security of the personal data collected?

Coral is responsible for the security of the personal data collected.

Your data will be processed by Coral as controller and processor on the basis of a legal transaction concluded with you. In order to protect personal data, enable their processing and exercise your rights as a subject whose personal data is processed, personal data may be transferred to natural and/or legal persons with whom we cooperate on the basis of our contractual or legal obligations (e.g. accounting services, law firms, competent public authorities, etc.).

2) What personal data do we process?

The personal data that we process may include:

• data for concluding contracts and establishing and maintaining contact such as name and surname, name and surname of parents, date and place of birth, type and number of identification document, address of residence, residence, personal identification number, gender, citizenship, occupation-business function, postal address, photographs, landline phone number, mobile phone number, e-mail (e-mail);
• data relating to the issuance of invoices and payment processing
• other information that is strictly necessary for the purpose of performing obligations arising from the contractual relationship or that has been voluntarily provided to us, such as orders, specific requests, etc.;
• previously and independently of our activity, the information we collect through publicly available registers and records;
• details of mutual communication (written correspondence, etc.), as well as conducted conversations, to the extent necessary for the exercise of rights and obligations arising from the contractual relationship.

3) How do we collect personal data?

We collect and process your personal data on the basis of the circumstances, including:

• when and if the collection of personal data is necessary for the purpose of establishing a contractual relationship and exercising the rights and obligations arising therefrom;
• when you contact us directly or through electronic communications or through the contact form available on our website http://coralenergy.rs/ and/or with our employees with the aim of establishing a business relationship or expressing interest for the purpose of establishing a business relationship, and in particular at the time of processing an order for the execution of our services;
• when our employees contact you with the aim of establishing a business relationship or expressing interest for the purpose of establishing a business relationship;
• for the purpose of distributing promotional materials and advertising our products and services
• In certain circumstances, we collect and process your personal data through third parties. For example, we may collect personal data through a legal entity with which you have a business relationship, other legal entities with which your legal entity is business-related, other publicly available registers and records.

Also, our technical solutions can use statistical software. These programs are a standard tool of all internet browsers and are not unique to our sites. Such statistical programs allow us to customize our pages in a way that is as efficient and simple as possible for our visitors (determining the data that are most or least interesting to our users, adapting pages for certain Internet browsers, the efficiency of the structure of our site and the number of visits to our pages).

4) Are you obliged to provide us with personal data?

In general, you provide us with all personal data voluntarily; As a rule, there are no negative or harmful consequences if you decide not to provide us with your personal data. Certain personal data is necessary on a legal or business basis, such as data necessary for the preparation of invoices, etc. Certain services or activities, such as promotional activities, also require certain data of yours that you provide to us exclusively for a specific purpose and you can withdraw it at any time, as explained in more detail below.

Any voluntarily given consent may be withdrawn by making a written statement at any time. An oral statement of refusal of consent shall be taken into account in the event that there are justified circumstances due to which it is not possible to make a written statement.

However, in addition to the above, there are circumstances when Coral cannot take over business activities, including legal actions, without your personal data, for example, when personal data is necessary for the establishment of a legal obligation, the processing of your requests and requests, and for the purpose of sending promotional material.

In all these cases, the collection and processing of your personal data is a prerequisite for the provision of our services, unless there is another legal basis for their collection, such as a legal or contractual basis.

5) The purposes for which we process personal data

We process personal data exclusively for the following purposes:

• For the purpose of establishing a contractual relationship and exercising the rights and obligations arising therefrom;
• For the purpose of marketing, promotion and propaganda, as well as the production and delivery of promotional material;
• For the purpose of management and administration in business processes related to the fulfillment of the contract and the exercise of rights and obligations arising therefrom, including payment processing, bookkeeping purposes, auditing, collection of receivables and support services in connection with the aforementioned;
• For the purpose of harmonizing and fulfilling our legal obligations, as well as obligations that may arise from the law of the European Union and the law of third countries to the extent applicable and to the extent and content in which these rights do not conflict with the law of the Republic of Serbia;
• For the purpose of analysing and improving our services and communicating with you;
• For the purpose of protecting security and managing access to our business premises, IT and communication systems, online platforms, websites;
• For the purpose of complying with court decisions and decisions of public bodies and legal entities with public authority and exercising our rights and legitimate interests;
• For the purpose of keeping records of statistics related to our business
• For any purpose deemed strictly necessary in connection with the achievement of any of the purposes set forth above

In cases where you have given us explicit permission to process your personal data, we may also process your personal data for the following purposes:

• For the purpose of contacting you regarding the products and services we offer, including sending brochures, offers, newsletters, etc.;
• Market analysis and other promotional activities;
• For purposes related to our loyalty club (loyalty program).

For the purpose of communication in relation to marketing services, provided that such an obligation is required by law, we will only send you information in respect of which you have given permission and only for as long as you do not withdraw your permission. We will not use your personal information to take any other actions or create a profile except in the cases set out here.

Depending on the purpose for which we process your personal data, we may process your personal data on the following legal bases:

• If you have given your consent to the processing of your personal data for one or more purposes;
• The processing is necessary for the performance of a contract to which you are a party or in order to take actions at your request prior to entering into a contract;
• The processing is necessary to comply with our legal obligations
• The processing is necessary to protect your vital interests;
• The processing is necessary for the purposes of our legitimate interests in accordance with the Personal Data Protection Act and the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and the Law on the implementation of the General Data Protection Regulation (hereinafter: General Data Protection Regulation).

6) With whom can we share your personal data?

We may share your personal information in the following circumstances:

We may transfer your personal data on a confidential basis when it is necessary for the fulfilment of our contractual obligations, for administrative purposes, for the purpose of invoicing, for the purpose of additional protection of your personal data (backup or "back-up"), for the exercise and protection of our contractual rights and legal interests, as well as in the case of other legitimate business purposes.

We may share your personal data with external contractors such as law firms, accounting services, tax advisors, credit bureaus and financial institutions, business entities with which cooperation is necessary to exercise the rights and obligations arising from the mutual contractual relationship, debt collection agencies, public law bodies and bodies with public authority, when it is necessary for the purpose of protecting contractual rights and/or claims, or when it is in the public interest, i.e. when it is a legal obligation.

We may share your personal data with third parties to whom we have transferred, i.e. assigned, the rights arising from the contractual relationship with you.

We are also authorized to instruct third parties to process your personal data on our behalf and on our behalf and in accordance with our instructions to the controller, in which case we assume responsibility for the confidentiality and security of your personal data. In this case, Coral remains fully responsible to you for the security and confidentiality of your personal data and will use all necessary measures required by applicable law to ensure the integrity and security of your personal data.

We may also use your personal data for statistical purposes, to observe visits and use of our websites, in order to develop our business and improve the quality of the website.

Finally, we may disclose your personal data to a third party only if you give us permission to do so, regardless of whether the permission is contained in a separate document or constitutes a separate clause of a contract, if this is a legal obligation or an obligation to act on the order of a court or other public law body or body with public authority.

7) Personal data of third parties that you provide to us

If you provide us with personal data of some third natural persons, you must guarantee that you are authorized to disclose persona

transfer it without any obligation to take further action, in accordance with the terms and conditions set out in the Privacy Policy.

In particular, you must ensure that the third natural person is aware of the disclosure of their personal data to us and, where applicable, consent has been given to such disclosure, use and transfer of personal data, as well as that they are fully aware of the content of the Privacy Policy, including but not limited to our identity, contact details, purposes of personal data processing, rights in relation to access to personal data, modification of personal data, access to collected personal data, deletion of personal data, transfer of personal data, the right to object to the processing of personal data, as well as the consequences in case of violation of our obligations in relation to the aforementioned.

8) Use of Cookies

In order for our website to work properly and to be able to make further improvements to the site and our business and to improve your experience, our website must transfer a certain amount of information (cookies) to your computer. Over 90% of all websites use this practice, but according to the European Union regulation of March 25, 2011, we are obliged to ask for your consent before transferring cookies. By using the website, you agree to the use of cookies. By blocking cookies, you can still browse the site, but some of its features will not be available to you. More information about cookies can be found on our website http:// /www.coralenergy.rs/.

9) Protection of personal data

We will protect your personal data by applying appropriate technical and organizational-security measures, in accordance with internal regulations and procedures in relation to the storage, disclosure and access to personal data. Personal data may be stored in paper form, be stored in special electronic systems for the protection of personal data by us or by our contractual partners.

10) Transfer of personal data

In the event of the transfer of personal data to the countries of the European Union or the European Economic Area, or to countries that do not ensure the same level of protection of personal data as in the Republic of Serbia, we will take all necessary measures to ensure that the level of protection of your personal data corresponds to the requirements of the Regulation and all applicable regulations of the Republic of Serbia.

11) Changes to personal data

If any of the personal data you have provided to us changes (e.g. your e-mail address, residential address, etc.) or if you become aware that we have inaccurate personal data, please inform us by sending an e-mail to the following e-mail address: infoces@coralenergy.rs Coral is not responsible for any losses resulting from inaccurate, untrue, incomplete or incomplete personal data provided to us.

12) How long do we keep personal data?

Your personal data will be deleted when the reasonable need to keep it for the specified purposes ceases to exist, or to the extent applicable when you withdraw your consent, provided that we are not obliged to keep the personal data on the basis of another legal basis (e.g. legal obligations). In any case, we will keep your personal data as long as there is a need to keep it for the purpose of realizing the rights and obligations from the concluded contract, i.e. business relationship, including the need for forced collection of receivables.

13) Your rights

Subject to the conditions prescribed by the Regulation, i.e. the regulations of the Republic of Serbia, you have: (i) the right to withdraw your consent (if the processing of personal data is based on permission and there is no other legal basis for doing so); (ii) the right to inspect the personal data collected; (iii) the right to access and obtain information; (iv) the right to request the issuance of an extract of the personal data we hold; (c) the right to request the modification/correction of the personal data collected or restriction of processing; (vi) the right to erasure of personal data; (vii) the right to transfer the personal data collected; (viii) the right to object to the processing of personal data. If you wish to do any of the above, please contact us by sending an e-mail to the following e-mail address: infoces@coralenergy.rs.

When sending, we may ask you to prove your identity by providing a copy of an identity document from which your identity can be established in order to comply with applicable regulations and prevent unauthorized disclosure of personal data. We reserve the right to charge you additional fees if you abuse your right to access your personal data. We will consider all your requests and complaints we receive and respond to them in a timely manner.

14) Changes to the Privacy Policy

Coral reserves the right to change this Privacy Policy from time to time to reflect the changed practices and methods of processing personal data or changed legal circumstances. In the event of such changes, we will post the changes on our website or by other appropriate means. Changes will enter into force on the day of publication.

15) How to Contact Us

We care about your opinion on our Privacy Policy. You can contact us by sending an e-mail to the e-mail address: infoces@coralenergy.rs or in writing to the address: Yuri Gagarina 40b, 11000 Belgrade.

This Privacy Policy was last updated on May 25, 2023.