PRIVACY POLICY

BIZ RENT sharing economy doo Belgrad-Voždovac, mat. no. 21452092, PIB 111265460, with registered office at Bulevar JNA 123v, 11222 Belgrade (Voždovac) (hereinafter: "BiZ rent", "We") respects the privacy of the data of natural persons with whom it comes into contact. This Privacy Policy (hereinafter: Privacy Policy) contains all information related to the processing of personal data of natural persons that BiZ Rent collects or comes into contact with in its regular business.

This Privacy Policy allows you to find out how BiZ Rent as a controller processes your personal data and what rights you have regarding the processing of your personal data.

ABOUT US

BIZ RENT sharing economy doo Belgrad-Voždovac, is a company established in accordance with the regulations of the Republic of Serbia, registered in the register of companies of the Agency for Commercial Registers for the purpose of carrying out the activity of rental and leasing of equipment for recreation and sports.

This Privacy Policy applies to persons whose data are processed on the territory of the Republic of Serbia in accordance with the Personal Data Protection Act ("Official Gazette of the Republic of Slovenia", no. 87/2018) and applies exclusively to data processed within the framework of BIZ RENT sharing economy doo Belgrad-Voždovac.

BIZ RENT, in most business activities related to the performance of activities, is in the role of manager, and independently or together with other managers determines the purpose and method of data processing, while possibly if the need arises in certain activities it may be a processor who processes personal data on behalf of the operator.

Regardless of the capacity in which we process your personal data, we protect and take care of your data and treat them fairly, transparently and exclusively in accordance with applicable legal regulations as well as international best practice in this field.

BASIC CONCEPTS

- Personality data— any data relating to a natural person whose identity has been determined or determined, directly or indirectly, in particular on the basis of an identity label, such as name and identification number, location data, an identifier in electronic communications networks or one or more features of his physical, physiological, genetic, mental, economic, cultural and social identity;

- Handler— a natural or legal person or a public authority that independently or jointly with others determines the purpose and method of processing;

- Handler- a natural or legal person, that is, a public authority that processes personal data on behalf of the operator;

- Data processing- any action or set of actions performed in an automated or non-automated manner

personal data or sets thereof, such as collection, recording, classification, grouping or structuring, storage, representation or alteration, disclosure, inspection, use, disclosure by transmission or transmission, reproduction, dissemination or otherwise making available, comparing, limiting, deleting or destroying;

- Recipient- a natural or legal person, that is, an authority to which the personal data have been disclosed, regardless of whether it is a third party or not, unless it is a public authority that receives personal data in accordance with the law as part of the investigation of a particular case and processes this data in accordance with the Law;

- Third party- a natural or legal person, i.e., a public authority which is not the data subject, the controller, or the processor, as well as a person authorized to process personal data under the direct supervision of the controller or processor;

- Common handler— the operator who, together with BiZ Rent, determines the purpose and method of processing.

PRINCIPLES OF THE PROCESSING OF PERSONAL DATA

The principles of processing are the basic rules that BiZ Rent adheres to when collecting and processing personal data.

BIZ RENT as well as all employees of BiZ Rent are obliged to ensure full application of the principles of processing when collecting and processing personal data.

BIZ RENT is responsible for applying the principles when collecting and processing personal data.

The collection and processing of personal data BiZ rent is carried out with the obligatory application of the following principles:

· Principle of legality, fairness, and transparency

Personal data must be processed lawfully, fairly and transparently in relation to the data subject, in accordance with the legal regulations governing the processing.

BIZ RENT undertakes that at the time of data collection, it will provide the person with information about the procedure for collecting and processing his data, as well as other information regarding legality, purpose of processing, method of exercising rights and other necessary data all in accordance with the provisions of the Law.

· Principle of limitation in relation to the purpose of processing

BIZ RENT collects data for purposes that are specifically specified, explicit, justified and lawful, and the data thus collected may not be further processed in a way that is not in accordance with these purposes.

BIZ RENT will not process the collected data for any other purpose, unless there are other processing actions that are regulated by law or are necessary for the quality provision of the service.

· Principle of data minimization

The personal data collected must be appropriate, relevant and limited to what is necessary and necessary in relation to the purpose of the processing.

· Principle of accuracy

The personal data must be accurate and, if necessary, updated. Taking into account the purpose of the processing, BiZ rent takes all reasonable measures to ensure that inaccurate personal data are deleted or updated without delay.

The updating of the data is ensured through the procedures of regular controls of the accuracy and timeliness of the collected personal data and the processes of communication with persons through which data corrections can be made in the case when a person notifies BiZ Rent about the change of their data, that is if the person notices that some of the data is not correct.

· The principle of storage limitation

BIZ RENT stores personal data in a form that allows the identification of the person only for the period necessary to achieve the purpose of the processing. Personal data may also be stored for longer in order to comply with BiZ Rent's legal obligation requiring processing or in the event of a legitimate interest (such as filing, exercising or defending against a legal claim).

· Principle of Integrity and Confidentiality

Personal data shall be processed in a manner that ensures adequate data protection, including protection against unauthorised or unlawful processing, as well as in the event of loss, destruction or damage by applying appropriate technical, organisational and personnel measures.

BIZ RENT implements measures aimed at preventing unauthorized disclosure of data, monitoring access to data, limiting access to data in accordance with the needs of the workplace, etc.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

BiZ rent collects personal data in accordance with the Law for a precisely defined purpose and on a precisely defined legal basis. Depending on the purpose of the processing, the legal basis for the processing of personal data may be:

- Treaty— We may process your data on the basis of a contract, ie for the preparation, conclusion and/or execution of the contract;

- Compliance with legal obligations BiZ rent — In certain cases, the legal basis for processing your data may be compliance with legal obligations that BiZ rent is obliged to fulfill;

- Positive legal regulations— Positive legal regulations may be the basis for the processing of your data in cases where such processing is necessary in order to exercise the prescribed powers of BiZ Rent;

- Legitimate interest— The legitimate interests of BiZ Rent or a third party may be the basis for the processing of personal data only if these interests are not overridden by the interests or fundamental rights and freedoms of the data subjects.

- Consent— BiZ rent may process your data based on your consent. Giving consent is always voluntary. Under the consent as a legal basis for the processing of your data, we will also consider your request addressed to BiZ Rent.

DATA COLLECTED, LEGAL BASIS AND PURPOSE OF PROCESSING

Depending on the category of person to whom the personal data relates and the defined purposes of processing this data, BIZ RENT may process different personal data:

· Persons employed or otherwise employed in BIZ RENT

For the purpose of establishing an employment relationship or other form of employment and exercising the rights and obligations arising therefrom, BIZ RENT collects data about its employees in accordance with the Employee Privacy Policy.

·Persons applying to work in BiZ Rent

If you apply to work at BIZ RENT, we process the personal data that you provide to us for these purposes. Data such as name and surname, registration number, gender, date and place of birth, residence address, apartment address, telephone number, email address, professional training and qualifications are collected and processed from job applicants. Bearing in mind that the form of the CV is not specified, if you specify any other data in addition to the above, we may come into possession of this information that we cannot influence. BiZ rent collects and processes this data on the basis of your consent.

After the end of the specific competition, persons who are not employed may decide to have their data available in the HR records of BIZ RENT if the need for their employment is shown in the future. In this case, your data will be stored in the records within one year (1 year) from the date of the end of the competition unless you become part of our team. This means that from the expiration of the specific competition, the processing of personal data will be carried out on the basis of informed consent.

· Persons in a business relationship with BIZ RENT

For the purpose of realizing and/or maintaining a business relationship, i.e. execution of the contract, we process personal data of existing and potential associates such as name and surname, gender, personal number, series and a number of identity card, date, and place of birth, citizenship, nationality, etc.; address of residence/postal address, email address and/or fixed/mobile phone number, etc.; data on financial condition, cash flow statement, proof of solvency, income, etc.; creditworthiness data, monthly payment obligations, balance sheet, payment history and performance payments, etc.; bank details, account number (IBAN), transaction details and/or history, card number, etc.; vehicle identification, license number, chassis series, location, GPS data, etc. We process this data within the period necessary to achieve the purposes for which they are collected.

· Persons accessing the premises of BIZ RENT[Z1]

If you access the premises of BIZ RENT, your entry and/or stay in the premises will be recorded by means of a video surveillance system introduced for the safety and protection of persons and property. Access to cameras located within the office space is provided by _______________________, as well as the firm that works to secure the office space ____________________. Recordings are stored for thirty (30) days from the moment of recording.

Also, information about your visit or stay will be recorded in the visitor record [ZM2] which contains the name and surname, registration number and number of the identity card or other identification document and the date of the visit, and which records were established for the protection of persons and property. We collect this data on the basis of legitimate interest, which is reflected in the prevention and detection of criminal activities and antisocial behavior, since in the premises of BiZ Rent there are assets of great value in relation to which the processing of data has a minimal impact on the privacy of the individual.

• Persons hired by third parties who perform work on the premises of BIZ RENT

If you are employed by another legal entity that is in a contractual relationship with BIZ RENT as a subcontractor, and you perform the work on the premises of BIZ RENT, we may come into direct contact with your personal data such as: name and surname, registration number, data on employment with another legal entity, data on health status. These data are collected by BIZ RENT in order to comply with legal obligations, i.e. positive regulations in the field of work and protection of health and safety at work.

In cases where we process your data as a processor, the type of data processed as well as the purpose and actions of the processing are determined by the controller of your data, in which case you need to contact the controller in order to be informed about the purpose and legal basis of the processing.

PROCESSING OF SPECIAL PERSONAL DATA

As a rule, BIZ RENT does not collect or process personal data revealing racial or ethnic origin, political opinion, religious or philosophical belief or trade union membership, nor does it process genetic data, biometric data for the purpose of unique facial identification, health data or data on the sexual life or sexual orientation of a natural person.

METHOD OF COLLECTING PERSONAL DATA

The method of collecting your data depends on the category of persons whose data is processed by BiZ rent, so your personal data may be collected by BiZ rent in the following ways:

• Directly from you;

• By accessing our website at https://www.bizrent.rs/

• By sending an inquiry through the site https://www.bizrent.rs/

• By accessing and using our app ____________ [ZM3].

• From third parties — from recruitment agencies — (e.g., when a recruitment agency contacts us to identify you as a potential candidate) or through publicly available online sources — (e.g. from your current employer's website or from professional social networks such as LinkedIn); and

• from previous and/or current handlers of your data.

COOKIES

The technologies we use for automatic data collection may include the use of cookies. Cookies are small text files, which are placed on your computer, mobile phone or other device that you use to access the Internet while browsing websites.

We use cookies to tailor content to your interests/needs and provide you with a better user experience. With the help of cookies, we obtain information about your browsing habits, which we can use to personalize your actions and establish user movement patterns. We do this in order to determine the usefulness of the information on Biz rent websites, to see the effectiveness of our navigation system, and to help users get to the information they are looking for. In this way, we continuously improve the presentation of information and services Biz rent.

In accordance with the legal regulations related to the protection of personal data, we inform you about the use or storage of cookies on your computers, mobile phones or other devices that you use to access the Internet.

When you access the Biz rent websites, you will be notified of the acceptance of cookies. The different types of cookies are described below. You are completely free to choose whether you want your device to accept and store all types of cookies and you can set this in your internet browser. Every internet browser is different so, in the browser itself, you should check through the "Help" option how to change your cookie settings. Your device's operating system may include additional cookie controls.

Please note that if you do not accept cookies, you will not be able to take full advantage of all the functionalities of the Biz rent websites.

Websites use several types of cookies [ZM4], which are used for different purposes:

Necessary cookies - help visitors use the site, enabling basic functions such as navigating through the site and accessing protected areas. The site cannot function properly without these cookies.

Functional cookies allow for improved functionality and site personalization. If you do not allow these cookies, certain functionalities of the site may be disabled that help to use the site effectively by remembering information on the basis of which certain functions or the appearance of the site change (such as the choice of the language of the site).

Statistical cookies - help us understand how site visitors use our site by anonymously collecting and reporting data.

Marketing cookies - help us provide you with a good user experience, customize the content of the site, and allow us to improve the site continuously.

OTHER INTERNET SITES

Our website may contain links to other websites that are not under our control and which are not subject to this Privacy Policy. If you access other websites using the links provided, the operators of these websites may request information from you to use in accordance with their privacy policies, which may differ from ours.

RECIPIENTS AND TRANSFER OF PERSONAL DATA

Within the scope of business and when carrying out business processes and activities related to the registered activity of BiZ rent, your personal data may be provided in accordance with the Law in the following categories:

• authorities, such as state bodies, bodies of territorial autonomy and units of local self-government, courts, public enterprises, institutions and other public services, organizations and other legal or natural persons exercising public powers and others;

• external associates entrusted by BiZ Rent to perform certain actions and processing activities in accordance with concluded contracts (which includes, but is not limited to auditors, lawyers, commercial banks, as well as other associates who provide services for sending and delivering shipments, archiving, telecommunication services, IT support, etc.). External collaborators can have the status of operator, joint operator, processor, sub-processor, recipient or third party.

BiZ rent in its capacity as an operator may provide personal data to third parties listed in the previous point, some of which are processors, recipients of the data, i.e. third parties.

BiZ rent can be designated as a processor only the person who fully guarantees the implementation of the appropriate technical, organizational and personnel measures, in a way that ensures that the processing is carried out in accordance with the regulations and that the protection of the rights of the persons to whom the data relate is ensured.

The processor may entrust the processing to another processor only if BiZ rent authorizes him to do so, i.e. if he agrees to the choice, i.e. to replace the other processor.

The processing by the processor is regulated by a contract or other legally binding act, which binds the processor to BiZ rent as the operator and which regulates the subject and duration of the processing, the nature and purpose of the processing, the type of personal data and the type of persons about whom the data are processed, the obligation to preserve the confidentiality of the data, etc.

If there is a need, the transfer to other countries or international organizations will be carried out exclusively under the conditions specified in the Law, which regulate the transfer of personal data.

DATA RETENTION PERIOD

BiZ rent stores and processes personal data for the period in which it is necessary to carry out the specific purpose of processing personal data.

In relation to special categories of persons whose data are processed:

- Data on employees under the Labor Records Act are stored permanently, while in other situations where data processing is based on another legal basis for data processing that does not imply data processing in order to comply with legal obligations, the data retention period is limited to the duration of the employment relationship or to the achievement of the purpose for which such data were collected.

- Information about job applicants in BiZ rent is stored within one year (1 year) from the date of the end of the competition or until the revocation of informed consent.

- The data collected for the conclusion or execution of the contract, are stored for a period of 10 years (the general period for the limitation of claims in accordance with the law governing binding relations), or in another period, if a different period is prescribed by law or in a specific notice on the processing of personal data.

- Data on [ZM5] collected using video surveillance in the business premises of BiZ rent are stored for a period of 30 days from the moment of recording while visitor records are kept within 5 years (general limitation period for damages) from the date of collection.

- Data on persons hired by third parties who perform work on the premises of BiZ rent are stored for a period of 12 months from the date of termination of work on the premises of BiZ Rent.

RIGHTS OF PERSONS IN RELATION TO THE PROCESSING OF PERSONAL DATA

As a person whose data is processed by BiZ Rent, you have the right to the following:

▪ Right of access to data: You have the right to be informed about the data we process, as well as the right to request an inspection and a copy thereof.

▪ Right to revoke consent: The right of each person to whom the data relates is to consent

revokes. The revocation of consent does not affect the admissibility of the processing that was carried out before the withdrawal of consent. The revocation can be given in writing, including by sending an email.

▪ Right to rectification and supplementation: You have the right to request correction, supplementation and updating if the data is incomplete or inaccurate.

▪ Right to erasure: You have the right to request the deletion of data after the expiration of the stipulated period

storage, in case of absence/termination of the purpose or in case of revocation of consent.

▪ Right to restriction of processing: You have the right to request the restriction of processing if you believe that the data is inaccurate, that the processing is illegal (and you object to the deletion of the data), that the data is no longer necessary for the purpose, as well as in cases where you have submitted an objection and an assessment is in progress whether the legal basis of the processing outweighs your interests.

▪ Right to portability: You have the right to obtain the personal data that you have previously provided to us as well as to request that we transfer it to another operator, in accordance with the Law.

▪ Right to object: If the processing is based on legitimate interests or is necessary in order to perform activities in the public interest or to comply with the legal regulations of BiZ Rent, you have the right to lodge an objection, after which we will suspend further processing of this data, except in the case where there is a legal basis for processing that outweighs your interests, rights or freedoms, or in the case where the processing is necessary for filing or exercising a legal claim or defending it.

▪ Right to lodge a complaint: If you believe that your rights to the protection of personal data have been violated, you can contact the Commissioner for Information of Public Importance and Personal Data Protection with a complaint: https://www.poverenik.rs

THE WAY OF EXERCISING THE RIGHT

BiZ Rent is obliged to provide the data subject with information on the action taken on the basis of the request for the exercise of said rights without delay, and no later than 30 days from the date of receipt of the request, whereby this period may be extended by another 60 days (if necessary, taking into account the complexity and number of requests). BiZ Rent is obliged to notify the person to whom the data relate about the extension of the term and the reasons for such extension within 30 days from the date of receipt of the request.

If BiZ Rent does not act on the request of the person to whom the data relate, it is obliged to inform that person about the reasons for the non-action without delay, and no later than 30 days from the date of receipt of the request, as well as about the right to submit a complaint to the Commissioner, ie a lawsuit to the court. BiZ rent provides information on the collection and processing of data, that is, information related to the exercise of rights free of charge. If the request of the data subject is manifestly unfounded or excessive, and in particular if the same request is repeated frequently, BiZ Rent may charge the necessary administrative costs of providing the information, i.e. acting on the request (e.g. in the case of a request to provide a copy of the data) or refuse to act on the request.

In case of violation of the rights guaranteed to him by the positive regulations of the Republic of Serbia, as well as this Privacy Policy, he will have the right to contact the Commissioner for Information of Public Importance and Protection of Personal Data.

NOTIFICATION OF A PERSONAL DATA BREACH

BiZ Rent is obliged to notify the Commissioner about a personal data breach that may produce a risk to the rights and freedoms of natural persons without undue delay, or, if possible, within 72 hours of becoming aware of the breach.

If BiZ Rent does not act within 72 hours of becoming aware of the breach, it is obliged to explain the reasons why it did not act within that period.

In case of entrusting processing operations, the processor is obliged to inform BiZ Rent about the breach of personal data without undue delay after becoming aware of the personal data breach.

If a breach of personal data may produce a high risk to the rights and freedoms of natural persons, BiZ Rent is obliged to inform the data subject of the breach without undue delay and describe the nature of the data breach in a clear and understandable manner.

BiZ Rent is not obliged to notify a person of a personal data breach if:

• appropriate technical, organizational and personnel protection measures have been taken in relation to personal data whose security has been breached, and in particular if crypto protection or other measures prevent the intelligibility of the data to all persons who are not authorized to access this data;

• measures have subsequently been taken to ensure that a breach of personal data with a high risk to the rights and freedoms of the person to whom the data relate can no longer produce consequences for that person;

• notifying the data subject would constitute a disproportionate expenditure of time and resources, in which case it is necessary to ensure the provision of the notification to the data subject through public notification or in another effective way.

SECURITY OF PERSONAL DATA

In accordance with the provisions of the Law and the established standards, BiZ rent has adopted technical, organizational and personnel measures to ensure the integrity and confidentiality of your personal data. Said security measures include prevention against misuse, loss, damage, unauthorized alteration, access or processing and other risks to which they may be exposed by human action, the physical or natural environment. We continuously make efforts to comply with all regulations governing the issue of personal data security and to ensure the highest level of protection of your data.

PERIOD OF VALIDITY OF THE PRIVACY POLICY

This Privacy Policy is subject to change. All changes to this Privacy Policy will be posted on the bulletin board and on the official website of BiZ rent.

Please note that changes to this Privacy Policy will not affect the level of protection of your data.

ENTRY INTO FORCE OF THE PRIVACY POLICY

This Privacy Policy is published on the bulletin board of BiZ Rent on the day of its adoption, and comes into force on the eighth day from the date of publication, and it will be highlighted in prominent places in the premises and on the official website of BiZ rent.

The persons whose personal data are processed by BiZ Rent hereby confirm that they have read, understood, and accepted the processing of personal data described above in accordance with the provisions of this Privacy Policy.

In Belgrade on __ days. ___.2024

BiZ rent sharing economy doo Belgrade

____________________________

Director Zoran Zeljković

[ZM1] If you do not use this method of data collection, you can delete it from the privacy policy.

[ZM2] If you do not have a visitor record, you can also delete this part.

[ZM3] You can specify the name of the application.

[ZM4] Check that the website uses all the above types of cookies and if necessary to display the actual state.

[ZM5] Delete if data is not collected in this way

‍