Data about the operator:
AikBank ad Belgrade, ul.Bulevar Arsenija Čarnojevića 59a, 11070 Novi Beograd, MB 06876366, e-mail: kontakt.centar@aikbank.rs; tel. no.: 0800101015 and 011/785-9999
Personal data for the protection of personal data:
As part of the implementation of personal data protection standards prescribed by the Law, the Bank has designated a personal data protection officer, to whom Individuals may contact regarding issues related to the protection of personal data, as well as regarding the exercise of rights prescribed by the Law, in one of the following ways:
- by sending an email to the address: dpo@aikbank.rs,
- by sending a letter to the address of the Bank's headquarters: Bulevar Arsenija Čarnojevića 59a, 11070 Novi Beograd, with the indication "for the Personal Data Protection Officer",
- by submitting documents at the Bank's branches, with the indication "for the Personal Data Protection Officer".
Categories of personal data we process
Depending on the completed form, the Bank may process the following categories of data:
- first and last name
- phone number
- email address
- place of residence / city
- data about interest in a specific product
- time and source of application (campaign, ad, platform)
The bank does not collect special categories of personal data through advertisement forms.
Purpose and legal basis for processing
Processing of personal data of Individuals based on freely given consent pursuant to Article 12, paragraph 1, item 1 of the Law, for the purpose of acting upon the user's request. The data is processed so that the Bank can:
- contacts the person who expressed interest
- provide the requested product information
- prepare an offer
- make an appointment or start the contracting procedure
The data subject has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Recipients and data processors
For the purpose of implementing the campaign, the Bank may entrust processing to the following categories of processors:
- to ad platform providers (eg Meta Platforms Ireland Ltd.)
- media rental service providers
- hosting and cloud service providers
The Bank applies technical, organizational and contractual protection measures in accordance with the law when entrusting data processing.
The data is not used for automated decision-making that produces legal effects without human participation.
Transfer of personal data to another country or international organization
The use of global digital platforms may result in data being transferred to other countries.
In such cases, the Bank applies appropriate protection measures in accordance with the law and data protection standards.
Personal data retention period
The Bank stores the personal data of the Person to whom the data relates until the consent is revoked or the consent ceases to be valid: 12 months from the date of application, or from the moment of forwarding the data to the Bank.
After the expiration of the retention period for personal data, the Bank will securely delete or anonymize it, or take measures to remove such data.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
The rights of persons to whom the data refer
- The right to access personal data processed by the Bank;
- The right of the Person to request correction, deletion of personal data and restriction of processing;
- The right to revoke consent at any time, provided that the revocation of consent does not affect the admissibility of processing based on consent prior to revocation in accordance with the Law;
- The right to object to the processing of personal data concerning him/her.
- The right to personal data portability, i.e. the right to receive data previously submitted to the Bank from it for transfer to another controller, as well as the right to have data about him/her directly transferred to another controller by the Bank, if technically feasible and if, in accordance with the Bank's assessment, the required standard of security for the transfer of personal data is ensured.
A person may submit a request for exercising rights regarding the processing of personal data to all available addresses of the Bank (listed in item 2), as well as to branches. The request may be submitted in the form provided by the Bank and found on the website or in free form. The request shall be submitted to: dpo@aikbank.rs
Right to complain to the competent authority
A person has the right to file a complaint with the competent authority (the Commissioner for Information of Public Importance and Personal Data Protection) regarding the processing of personal data relating to him by the Bank as the controller, if he believes that the processing of his data is carried out in violation of the provisions of the Law or other applicable regulations.