The Cynology Association of the Republic of Serbia, with headquarters in Belgrade – Voždovac, Bukovička 1, reg. number 07053274, tax ID number (PIB) 100279491, hereinafter “KSS”, aware of the importance of protecting the personal data of individuals in the performance of tasks within its scope of activity, adopts this privacy policy (hereinafter: “Privacy Policy”.).

KSS implements high standards and privacy protection measures in accordance with current regulations that determine the range of rights one has in connection with the processing of one’s personal data: from the right to information about important aspects of processing, to the right to access, change and deletion of personal data, as well as appropriate protection mechanisms.

Please read the Privacy Policy carefully before consenting to the processing of your personal data.

INTRODUCTORY PROVISIONS

The privacy policy of KSS defines how it protects one’s privacy, how it handles one’s personal data and what rights one has in relation to their processing.

KSS processes your personal data when carrying out tasks within its scope, in particular: keeping a central pedigree book, issuing pedigrees, maintaining a database of kennels, making plans for canine events, organizing education, taking exams for canine judges, records of canine judges, protection of national breeds and issuance of charters, regulations, regulations, various cynological publications as well as decisions of great importance for cynology.

Also, when visiting the official website of the association ksrs.rs (hereinafter referred to as the “Site“), you agree to the Privacy Policy and confirm that you have read and understood the conditions under which KSS process your personal data on the Site.

·      Data Processing Operator

KSS collects, processes and stores personal data in accordance with the Law on the Protection of Personal Data (“Official Gazette of the Republic of Serbia”, No. 87/2018) (hereinafter: “the Law“) which protects the rights of every individual when processing their personal data.The operator determines the purpose and methods of processing your personal data, and KSS will be considered the operator for the purposes of this Policy, except when it is expressly excluded.KSS decides as the operator when you use the Site.

§  Data Processors

When processing data in the performance of its duties, KSS may use the services of other legal or natural persons, who actually perform data processing – in the capacity of processor – on behalf of KSS.When carrying out tasks within its scope of activity, KSS uses the services of cynological societies from the territory of Serbia, and on that occasion it processes your personal data, such as collection, recording, classification, grouping, disclosure, inspection, use, disclosure by transmission, and/or delivery, duplicating, disseminating or otherwise making them available.

When you use the Site, KSS uses the services of Host Europe GmbH, c/o WeWork Friesenplatz 4, 50672 Cologne, Germany, HRB 28495, VAT ID: DE187370678, CHE-352.400.650, which performs actual data processing.

INTERNATIONAL COOPERATION AND PROTECTION OF PRIVACY

KSS is aware of the position of a national association and is a member of the International Cynological Federation (hereinafter referred to as “FCI”), as well as the of the nature of cynological activity which implies intensive international cooperation on a global level, and pays particular attention to the protection of individual privacy when transferring personal data outside the borders of the Republic of Serbia. In matters of international cooperation that involve the transfer of personal data to other countries and international organizations, KSS strives to apply the highest privacy protection measures in order to ensure an appropriate level of protection of natural persons in accordance with the Law.

BASIC TERMS

• Types of persons whose data are processed by KSSKSS processes the personal data of individuals when they act in the capacity of: litter breeders, dog owners, judges, trainees, ring secretaries, recorders, breeder agents, delegates for international and national kennel shows, representatives of kennel societies and clubs, as well as in other cases as necessary.

§  Personal data processed by KSS

Personal data processed by KSS in its scope of work as well as on the Site is any data related to a natural person whose identity is determined or determinable, directly or indirectly, and in particular: name and surname, ID card number, e-mail address, postal address (city, street and number), FAX, telephone number, postal code, Unique Master Citizen Number (JMBG), personal signature, as well as passport number and country of issue. Bearing in mind the nature of canine related activities, as information on the basis of which your identity can be indirectly determined, is the JR number and name of the dog, based on which your identity as an owner or breeder can be consequently revealed in the search fields on the Site. Also, as personal data when performing tasks within its scope, KSS also processes the identification number of microchips used to mark dogs in accordance with the Law on Veterinary Medicine and by-laws, on the basis of which the owner’s identity can be indirectly established. On the Site, we process personal data also when it appears as the subject of entries in the search fields of the respective databases (e.g. the owner’s name in the “Champions” search). On the Site, your personal data include electronic data about your location, IP address, as well as other identifiers in electronic communication networks that we collect when using the Site, such as data about the devices from which you access the site, data about the network from which you access, data about your activity on the site, and data possibly collected by cookies.

§  Purpose of personal data processing

 KSS collects and processes personal data exclusively in accordance with the Law and applicable regulations of the Republic of Serbia, and with the aim of providing services to KSS as a national association and an umbrella canine organization in the country, in order to fulfill legal and internationally assumed obligations, protect its own legitimate interests, improve its services and database search on the Site, as well as to protect the interests of individuals, preserve the security of their data, but also to preserve the public interest and public safety.

KSS processes personal data when:

1. The person to whom the data refer has consented to the processing of his personal data for one or more specifically specified purposes, particularly when it comes to a request for: (a) issue of pedigree (registration of a litter); (b) a mating certificate; (c) protection of the name of a purebred dog breeder with the FCI; (d) obtaining a duplicate of the national pedigree; (e) validation of the pedigree from abroad; (f) issue of an export pedigree; (f) obtaining a hunting dog identification card; (g) absolute champion of Serbia; (h)  “grand” champion of the young of Serbia; (i) “grand” champion of Serbia; (j) the veteran champion; (k) champion of Serbia in reproduction; (l) mature champion of Serbia in beauty; (m) champion of Serbia in work; (n) champion of the young of Serbia; (o) international champion; (p) a judge’s trainee; (q) issue of an export pedigree; (q) FCI,  (r) diplomas, exterior workbook for international national and specialized exhibitions, regional exhibitions and reviews, international and national hunting dog exams, specialized hunting dog exams, service dog exams, as well as any other act that KSS renders in the performance of its duties.    Processing is necessary for the execution of the KSS contract concluded with the person to whom the data refer or for undertaking actions, at the request of the person to whom the data refer, before the conclusion of the contract;

3.    Execution of legal obligations of KSS;

4. Execution of obligations of KSS as a FCI member
5. Pursuing the legitimate interests of KSS or a third party, unless these interests are overridden by your interests or fundamental rights and freedoms that require privacy protection

On the Site, we access your personal data as a Site user through your activity and interaction on the website and direct communication with KSS via e-mail address. You can withdraw the consent you have given for the processing of your personal data at any time with a simple statement, except when the processing is necessary for the execution of legal transactions that you have concluded and the fulfillment of obligations that have been undertaken. Withdrawal of consent does not affect the permissibility of processing that was carried out before you withdrew consent.

§  Data privacy protection measures

KSS has provided appropriate personal data protection measures, and applies technical, organizational and personnel measures to ensure that the processing of your data in the performance of all tasks within its scope as well as on the Site is safe. KSS will ensure that by constantly applying appropriate technical, organizational and personnel measures be processed only the personal data necessary to achieve each individual purpose of processing, in relation to the number of data collected, scope of processing, retention period and their availability. In the event of a breach of your data, which may cause a high risk to your rights and freedoms, KSS will notify you in accordance with the Law.   ·      Impact assessment on personal data protection In the event that KSS assesses that a certain type of processing, especially with the use of new technologies and taking into account the nature, scope, circumstances and purpose of the processing, may cause a high risk for the rights and freedoms of natural persons, KSS will, before starting the processing, carry out an impact assessment of the intended processing actions to protect personal data. In the event that the assessment of the impact on the protection of personal data indicates that the intended processing operations may produce a high risk if measures are not taken to reduce the risk, KSS will request the opinion of the Commissioner before starting the processing operation. ·      Keeping records of processing actions KSS keeps a record of the processing actions for which it is responsible, which contains information such as: contact details of KSS, purpose of processing, persons to whom the data refer and personal data, as well as information on the possible transfer of personal data to other countries or international organizations. ·      Storage time of your personal data We store your personal data for the period necessary to achieve the purpose of the processing or until you withdraw your consent to the processing. KSS keeps the personal data of individuals for the duration of the legal relationship on the basis of which we provide services and carry out work within the scope of KSS and as a member of FCI, the existence of legitimate interest of KSS, for the purpose of defending its legal requirements, as well as legal obligations of KSS.

FUNDAMENTAL RIGHTS

§  Right of access to information

The person to whom the data refer has the right to request information from KSS                                                                                                                            has the right to request information from KSS on whether it processes his personal data, access to that data, as well as the following information: on the identity and contact details of KSS as well as on its representative, on the purpose of the intended processing and the legal basis for processing, on the period of storage of personal data, on the existence of the right to request from the operator access, correction or deletion of his personal data, i.e. the existence of the right to limit processing. They also have the right to request information about the right to data portability, about the existence of the right to revoke consent at any time, about the right to object, about the right to file a complaint with the Commissioner, about whether the provision of personal data is a legal or contractual obligation or is the provision of data a necessary condition for the conclusion of the contract, as well as whether the person to whom the data refer has the obligation to provide information about his personality and the possible consequences if the data is not provided. Persons whose personal data are transferred have the right to be informed about the recipient or types of recipients, especially recipients in other countries or international organizations. KSS can limit the right to access information in accordance with the Law, in whole or in part, to the extent and for the duration in which such partial or full restriction is necessary and represents a proportionate measure, while respecting the fundamental rights and legitimate interests of the person whose data is processed, in situations such as enabling the smooth conduct of investigations and the detection of criminal acts, the protection of public and national security, as well as the protection of the rights and freedoms of other persons.KSS will notify the person to whom the data refer of the restriction of the right to access information, unless this would call into question the achievement of the purpose for which access was denied or limited.

If personal data are transferred to another country, FCI or other international organization or national association, the person the data relate to has the right to be informed about the appropriate protection measures related to the transfer, in accordance with the Law.

§  The right to amendment and supplement

You can ask KSS to correct your inaccurate personal data without delay or complete incomplete ones, in accordance with your statement. ·      Right to expunge personal data and limitation of processing You can ask KSS to expunge your personal data or limit the processing. KSS may limit this right to the extent that the processing is necessary to protect the interests of KSS in connection with the defense of its legal claims, the performance of its legal obligations, as well as the observance of legitimate public interests prescribed by law.

§  Right to recourse

You have the right to submit an objection to KSS to the processing of your personal data by KSS in order to achieve its legitimate interests. KSS is obliged to stop processing data about the person who submitted the complaint, unless it has shown that there are legal reasons for processing that prevail over the interests, rights or freedoms of the person to whom the data refer or are related to the submission, realization or defense of legal required by KSS. ·      The right to protection before the commissioner and the court You have the right to complain to the Commissioner, who acts according to the provisions of the law regulating inspection supervision, so submitting a complaint to the Commissioner does not affect the right to initiate other administrative or judicial protection procedures. You also have the right to court protection if you believe that, contrary to the Law, your right prescribed by the Law has been violated by KSS or the processor by processing your personal data.

CONTACTING KSS REGARDING WITH REGARD TO THE PROTECTION OF YOUR PERSONAL DATA For all information regarding the processing of your data as well as the rights you have in connection with their processing, you can contact the address

E-mail: kinoloskisrbije@gmail.com

Postal address: Bukovička br. 1

11 000 Belgrade, Serbia

Contact telephone: +381113933888

TRANSFER OF PERSONAL DATA TO OTHER COUNTRIES

Bearing in mind the KSS scope of activity within international cooperation affair, transfer of personal data to another country or to international organizations such as FCI, national associations or other organizations without the prior approval of the state authorities can be carried out if it has been established that other country or a certain international organization ensures an appropriate level of personal data protection.

It is considered that the appropriate level of protection from the previous paragraph is provided in the countries and international organizations that are members of the Convention of the Council of Europe on the Protection of Individuals in relation to the automatic processing of personal data, i.e. in the countries that have been determined by the European Union to provide an appropriate level protection. The decision of the Government of the Republic of Serbia (“Official Gazette of the Republic of Serbia”, No. 55/2019) established a list of countries (hereinafter referred to as the “List”) and international organizations in which it is considered that an adequate level of protection is provided in accordance with the Law. A list of countries can be found in the Privacy Policy Appendix.

COOPERATION WITH FCI

When cooperating with FCI, KSS acts in accordance with the provisions of the Law, the Decision and other binding legal acts, as well as all internally implemented measures for the protection of individual privacy.  Further processing of personal data by FCI is the responsibility of FCI as the controller and its processors who are responsible under the rules of the GDPR (General Data Protection Regulation of the European Union). In the case of further processing of personal data by FCI during cooperation with national kennel organizations from countries that are not members of FCI, nor are on the List of countries that provide an adequate level of protection or in relation to which there are no other binding acts that determine an adequate level of privacy protection in accordance with the Act, the GDPR rules apply to the responsibility of FCI as a controller and such canine organizations for the processing of personal data, and individuals will be notified in advance in accordance with this Policy.

COOPERATION OF KSS WITH NATIONAL CYNELOGICAL ORGANIZATIONS

When transferring the data of individual persons, such as judges, delegates, dog owners, etc. in the case of direct cooperation of KSS with national FCI member organizations that are not on the List of countries or in relation to which there are no other binding acts that determine the appropriate level of privacy protection in accordance with the Law, these data can only be transferred if it is one of the following cases provided for in Article 69 of the Law:               1. the person to whom the data refer expressly agreed to the proposed transfer, since, due to the lack of a decision on the appropriate level of protection and appropriate protection measures, he was informed about the possible risks related to that transfer2. the transfer is necessary for the execution of the contract between the person the data refer to and the operator or for the implementation of pre-contractual measures taken at the request of the person the data refer to; 3. the transfer is necessary for the conclusion or execution of a contract concluded in the interest of the person to whom the data relate between the operator and another natural or legal person;4. the transfer is necessary for the realization of an important public interest prescribed by the law of the Republic of Serbia, provided that the transfer of certain types of personal data is not limited by this law;

5. transfer is necessary for submitting, exercising or defending a legal claim;     the transfer is necessary to protect vital interests of the person the data refer to or of another natural person, if the person the data refer to is physically or legally unable to give consent. During the direct cooperation of KSS with national FCI member organizations that are not on the List of countries or in relation to which there are no other binding acts that determine the appropriate level of privacy protection in accordance with the Law, it will be considered that the persons whose data are available in that case have expressly agreed in terms of the aforementioned provisions from Article 69 of the Law and this Policy to find their data in catalogs, certificates, databases or any official act of exhibitions in which they applied to participate under the auspices of such an organization.

In the event that the transfer cannot be carried out in accordance with the stated provisions of Article 69 of the Law, and it is about countries that are not on the List of countries or in relation to which there are no other binding acts that determine the appropriate level of privacy protection in accordance with the Law, personal data can be exceptionally transferred if the following conditions are met:

1. data transmission is not repeated; the data of a limited number of natural persons are transferred;      the transfer is necessary in order to realize the legitimate interest of KSS as an operator that prevails over the interests, i.e. the rights or freedoms of the person to whom the data refer;      KSS ensured the application of appropriate personal data protection measures based on a prior assessment of all circumstances related to the transfer of this data.     On that occasion, KSS will provide the person to whom the data refer, relevant information about the transfer of data in accordance with the mentioned exception, including information on what legitimate interest of KSS is achieved by such transfer, in accordance with the right to information.

THE WEB SITE

The processor may be associated with persons or representative offices abroad: EU members, i.e. member states of the Council of Europe Convention 108, and the USA, in which there is an exemplary level of protection when processing personal data, in accordance with the law.

PRIVACY POLICY AMENDMENTS

KSS may amend the Privacy Policy.  In the event of important changes that affect your rights regarding the processing of personal data, you will be notified thereof in a timely manner by posting on the Site or in another appropriate way.  In case of changes to the Privacy Policy, all previous versions will be publicly available in the archive.

ENCLOSURE

LIST

States and international organizations that are members of the Convention of the Council of Europe on the protection of individuals in relation to the automatic processing of personal data:

• Republic of Azerbaijan;
• Republic of Albania;
• Principality of Andorra;
• Republic of Argentina;
• Republic of Austria;
• Kingdom of Belgium;
• Bosnia and Herzegovina;
• Republic of Bulgaria;
• United Kingdom of Great Britain and Northern Ireland;
• Georgia;
• Republic of Greece;
• Kingdom of Denmark;
• Republic of Estonia;
• Ireland;
• Republic of Iceland;
• Republic of Italy;
• Republic of Armenia;
• Republic of Cape Verde;
• Republic of Cyprus;
• Republic of Latvia;
• Republic of Lithuania;
• Principality of Liechtenstein;
• Grand Duchy of Luxembourg;
• Hungary;
• Republic of Malta;
• Kingdom of Morocco;
• Republic of Mauritius;
• United Mexican States;
• Republic of Moldova;
• Principality of Monaco;
• Federal Republic of Germany;
• Kingdom of Norway;
• Republic of Poland;
• Republic of Portugal;
• Romania;
• Russian Federation;
• Republic of San Marino;
• Republic of North Macedonia;
• Republic of Senegal;
• The Republic of Slovakia;
• Republic of Slovenia;
• Republic of Tunisia;
• Republic of Turkey;
• Ukraine;
• Eastern Republic of Uruguay;
• Republic of Finland;
• Republic of France;
• Kingdom of the Netherlands;
• Republic of Croatia;
• Montenegro;
• Czech Republic;
• Swiss Confederation;
• Kingdom of Sweden;
• Kingdom of Spain

II

States, parts of their territories or one or more sectors of certain activities in those states and international organizations that have been determined by the European Union to provide an adequate level of protection:

• Guernsey Island;

2)    State of Israel;

3)    Japan;

4)    Canada (companies);

5)    Isle of Man;

6)    New Zealand;

7)    United States of America (limited to “Privacy Shield Framework”);

8)    Faroe Islands;

9)    Isle of Jersey.