NOTICE ON PERSONAL DATA PROCESSING

Introduction

This notice provides information on how your personal data are collected, used, stored and protected when using the website and/or the digital platform of the Regional Migration Training Centre.

The processing of data is carried out in accordance with the applicable Law on Personal Data Protection (“Official Gazette of RS”, No. 87/2018) and, where applicable, with the General Data Protection Regulation (GDPR – EU 2016/679).

Types of Processing

Use of the website

The website contents are available without registration. Data are collected only in the following cases:

• Use of the contact form (first name, surname, email address) for the purpose of responding to an enquiry.
• Trainer registration for the database: in such a case, personal data are processed for the purpose of assessing qualifications, inclusion in the trainer database and assignment of roles in the implementation of trainings. For this purpose, the following data are collected: First name and surname, date of birth, country and place of residence, contact details, experience in the field of migration, CV.
• Additional data for accredited trainers: Title of the subject for which the trainer is accredited, name of the certificate and the issuing institution, digital copy of the certificate, knowledge of foreign languages.
• Additional data for non-accredited trainers: Highest level and title of completed education, name of the diploma or corresponding academic degree, subject and specialisation in the field of migration, number and proof of conducted trainings in the field of migration, participation in train-the-trainer courses, certificate of completed trainer course.

Data displayed publicly (on the website): trainer’s first name and surname, training title, accreditation status, working language of the training, organisation/institution and country.

Use of the digital platform

The Regional Migration Training Centre platform is a digital e-learning system enabling access to interactive courses and modules in the field of migration. In order to provide access and keep records, the following data are collected:

For all users (participants and trainers):

• First name and surname, email, city, country, time zone, institution, department, contact phone, additional names (optional)
• Short biography, interests, photograph (optional)

Additionally for accredited trainers:

• Date of birth, accreditation field, certificate and digital copy, name of the certificate and issuing institution, language proficiency, CV, experience in the field of migration (years, areas of work)

Additionally for non-accredited trainers:

• Highest completed education and name of the institution, name of the diploma or academic degree, subject and specialisation in the field of migration, number and type of conducted trainings, proof of conducted trainings and completed trainer courses

The data are used for the following purposes:

• User registration and granting course access
• Monitoring progress, issuing certificates
• Administration and reporting
• Communication with users
• Personalisation of user experience
• Statistical and evaluation processing

Legal basis of processing

Processing is based on:

• Your consent, given during registration, application or use of the contact form
• Legal obligation, when prescribed by the laws of the Republic of Serbia or by international obligations

Processing is carried out solely to the extent necessary, proportionate and in accordance with the principles of lawfulness, fairness and transparency.

Data retention period

• Platform participants – permanently, i.e. until consent is withdrawn
• Trainer data – as long as criteria for engagement exist or until consent is withdrawn

Data security and access

Data are stored in the State Data Centre in Kragujevac, with the following protection measures:

• Encryption and access control
• Restricted access to authorised persons only
• Network traffic monitoring and abuse prevention
• Regular security testing

Data access is granted only to authorised administrators of the platform and the website as well as trainers and course participants, to the extent necessary for performing their tasks. Access is technically and organisationally restricted, in line with the applicable data protection regulations and the principle of data minimisation.

Trainer data displayed publicly on the website are limited to basic information for the purpose of promoting professional staff and enabling potential cooperation within the regional network.

All other personal data of trainers, including contact details and documentation, are visible exclusively to authorised site administrators, to the extent necessary for managing the trainer database and organising trainings.

Sharing of data with third parties

Data are not shared with third parties without your explicit consent, unless legally required.

Automated decision-making and profiling

No automated decision-making or user profiling is carried out on the platform or the website.

Your rights

You have the right to:

• Request access to your data
• Request rectification of inaccurate or incomplete data
• Request erasure of data
• Object to processing
• Request transfer of your data to another controller

Contact

For exercising your rights or for additional information:

Data Protection Officer – petar.andjic@kirs.gov.rs