Privacy Policy

EXPO 2027 d.o.o. Belgrade (Stari grad), with its registered office at 5 Kralja Milana Street, Belgrade (Stari grad), ID no. 21973220, TIN: 114113854 (hereinafter: the Company), prescribes as follows its Privacy Policy covering the handling of personal information for users and related parties (hereinafter: Policy) with regard to the services offered by the Company through its Website and the App, including services related to the purchase, reservation, issuance and use of tickets for the Exhibition, the purchase of goods through the Company’s online store, where such services are available through the Website and/or App, as well as all other activities of the Company in association with the specialized world exhibition Expo 2027 Belgrade (hereinafter: Exhibition).

“Website” (hereinafter the Website) refers to the official website developed for the purposes of the Exhibition (www.expobelgrade2027.org) operated, managed or owned by the Company, including the functionalities and services made available through such website.

“App” (hereinafter the App) refers to any mobile, tablet or desktop application hosted, managed or owned by the Company, developed for the purposes of the Exhibition, which especially includes, but not limited to, the official Exhibition mobile app – “EXPO 2027”.

The use of the Website and App is governed by the applicable terms of use (hereinafter: Terms of Use).

“Online Store” (hereinafter the Online Store) refers to the Company's online store made available through the Company's Website and/or the App, through which Users may browse, order and purchase goods offered by the Company.

Where applicable, references to the Website and/or the App in this Policy shall also include functionalities made available through the Website and/or App, including functionalities relating to the purchase, reservation, issuance, management and use of Exhibition tickets and for accessing and using the Online Store.

“Nonrelated parties” refers to any visitor of the Exhibition, visitor or user of the Website, user of the App and/or the Online Store (whether registered or non-registered), volunteer staff, freelance journalists, and other individuals who participate in or are involved with the Exhibition as individuals not belonging to any certain organization that participates in or is involved with the Exhibition.

“Related parties” refers to individuals who belong to certain organizations that participate in or is involved with the Exhibition, namely, related parties such as officials, employees, and personnel of the Company, sponsors and sponsoring companies, foreign governments, international organizations and private exhibits, all of which may or may not use the Company’s Website, App and/or Online Store.

Nonrelated parties and Related parties will be jointly referred to as “Users”.

By accessing or using the Website, installing and/or using the App and/or accessing or using the Online Store, purchasing, managing or using Exhibition ticketsand, where applicable, the User confirms that he/she has duly, truthfully and fully familiarized himself/herself with the Policy and and, as applicable to the relevant service or activity, the Terms of Use governing the Website/App, the Terms for the Sale and Use of Exhibition Tickets, the General Terms and Conditions of Purchase governing the Online Store, his/her rights and duties as well as the rights and duties of the Company and, where applicable, other entities involved in the processing of personal data as specified in this Policy, in regard to the Policy and the personal data collected, as stipulated herein.

In accordance with applicable regulation (including but not limited to the Serbian Personal data protection act (hereinafter: Act) and where applicable, the European General data protection regulation (hereinafter: GDPR) the Company hereby prescribes the following Policy in order to inform Users of potential collection and processing of personal data during the access to and use of the Company’s Website, App and/or Online Store, as well as in connection with the purchase, reservation, issuance, validation and use of Exhibition tickets, and the ordering, purchase, payment, delivery, return and other activities relating to goods purchased through the Online Store, thus committing to guaranteeing the confidentiality of personal data related to such use and the confidentiality of user communication during such use.

This Policy shall be read together with the Terms of use, the Terms for the sale of tickets, the General Terms and Conditions of Purchase applicable to the Online Store, and other applicable terms and conditions governing the use of the Website, App and/or Online Store, purchase and use of Exhibition ticketsand purchase of goods through the Online Store.

The Company will be designated as the controller of all personal information gathered in accordance with the Policy, except where otherwise expressly provided herein.

The Company processes personal data to the extent necessary to fulfill the purpose of processing, and such data is stored and retained in accordance with applicable law and the retention periods specified in this Policy for as long as necessary to achieve the purpose, except in cases where the law obliges the Company to keep them longer.

The Company protects the confidentiality of data by taking appropriate organizational, technical, and personnel measures to ensure data security and protect them from any accidental or unlawful destruction, loss, misuse, prohibited disclosure or access, and any other form of unlawful processing.

The Company will not be held responsible for any breach of privacy and security rights of Users committed via the internet by third parties.

The Company will report any violation of Users’ privacy and rights thereto to the competent authorities without delay.

The personal information Users are required to provide for the use of the Website, App and/or Online Store, or for the purchase, reservation, issuance, validation and use of Exhibition tickets, registration for or the ordering, purchase, payment, delivery, return, refund, complaint or other processing of orders made through the Online Store, is indicated in the forms (where applicable) to be entered by the User.

The User assumes no obligation to provide such personal information, but if such personal information is not provided, where such information is necessary for the relevant purpose, the Company, is unable to offer use of the Website, App or Online Store, or provide the relevant service, including the purchase/issuance Exhibition ticket, and or processing and fulfilment of an order placed through the Online Store.

By accessing or using the Website, the App and/or the services provided by the Company through the Website or the App, including the Online Store, Users may be required to provide, or the Company,may otherwise collect and process, the following categories of personal data, as applicable to the relevant service and purpose of processing:

General categories of personal data

• Basic Information (first and last name, alias, gender, date of birth, address (postal code, prefecture, municipality), phone number, e-mail address, passport number, nationality or country of residence, registration date, activity history, etc.);
• Location information;
• Information regarding affiliation (government, company name, organization name, department name, position, etc.);
• Information related to Social media (accounts, profiles and password information for X, Facebook, Instagram, Google and/or Apple ID);
• Information related to the user account created through the Website and/or App (accounts, profiles and password information);
• Information provided for the purpose of participating in the loyalty programs;
• Data on the completed transaction, the payment method (including, where applicable, payment card or PayPal) and in case of online payment - amount, currency, date, time, status of the transaction, transaction identifier and other transaction-related information made available to the Company by the relevant payment service provider.
• Data from conversations with the AI chat bot (messages, questions, answers, and similar information);
• Data provided through the contact form, as well as communications with the Company through it;
• Entered information (language settings, mail delivery settings, hobbies and preferences, and other information entered or sent by Users’ using the Company’s input form or other method prescribed by the Company (excluding information contained in the above));
• Information obtained from the Users’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and Google Play advertising ID, etc.), as applicable; and
• Other information related to the above, or any information voluntarily submitted by the User during the use of the Website, App and/or Online Store or in communication with the Company.

Categories of personal data specifically related to ticketing

In connection with the purchase, reservation, issuance, delivery, management, activation, assignment, validation and use of Exhibition tickets, the Company may additionally process the following categories of personal data, as applicable to the relevant ticketing service:

• Information relating to the ticket purchaser, including first and last name, date of birth, age or other information relevant for determining eligibility to purchase or use a particular type of ticket, home address, e-mail address, telephone number;
• Information relating to the person for whom a ticket is purchased or issued, where different from the ticket purchaser, including the person’s first and last name and, where necessary, date of birth, age or other information required for the issuance or use of the ticket;
• Information necessary to verify the identity, age or eligibility of the ticket purchaser or ticket holder, including date of birth and, where necessary the type and number of an identification document;
• Information relating to payments and transactions connected with the purchase of tickets, including transaction amount, currency, date and time of transaction, transaction status and payment method, as well as other information processed by the relevant payment service provider. Payment data required for the execution of the transaction, including payment card details (such as card number, CVV number and name of the cardholder) may be processed directly by the relevant payment service provider;
• Information generated through the use and validation of the ticket, including the date and time of entry, venue or access point, ticket validation status and information generated through scanning or electronic validation of the ticket;
• Information relating to changes, cancellations, refunds, replacements, transfers or other actions concerning tickets and reservations, including the relevant transaction and communication history;
• Other information necessary for the proper functioning, administration, security and control of the ticketing system, including information necessary to prevent unauthorized use, misuse, fraud or other abuse of tickets.

Where an Exhibition ticket is purchased, reserved or otherwise managed on behalf of another person, the Company may process the personal data of such person to the extent necessary for the purchase, issuance, management, validation and use of the relevant ticket, in accordance with applicable law and the applicable Terms for the sale and use of Exhibition tickets.

Categories of personal data specifically related to the Online Store

In connection with the ordering, purchase, payment, delivery, return and refund of goods, as well as complaints and other activities relating to purchases made through the Online Store, the Company may additionally process the following categories of personal data, as applicable to the relevant service:

• Information relating to the purchaser, including first and last name, e-mail address, telephone number and billing and/or delivery address (including, as applicable, street and number, postal code, city and country);
• Where the purchaser is a legal entity or entrepreneur, information relating to the natural person acting on its behalf, to the extent such information constitutes personal data;
• Information relating to the recipient of the goods, where different from the purchaser, including first and last name, delivery address and contact details necessary for delivery;
• Information relating to the delivery of goods, including the selected delivery method, delivery address or selected parcel locker/pick-up location, recipient contact details and information relating to the status and completion of delivery;
• Information relating to payments and transactions connected with purchases through the Online Store, including the transaction amount, currency, date and time of the transaction, transaction status, payment method (including, where applicable, payment card or PayPal), transaction identifier and other transaction-related information made available to the Company by the relevant payment service provider. Payment data required for the execution of the transaction, including payment card details (such as card number, CVV number and name of the cardholder) may be processed directly by the relevant payment service provider;
• Where necessary for the purpose of processing a refund, the User’s bank account number and other information necessary to execute and document the refund;
• Other information necessary for the proper functioning, administration and security of the Online Store and the processing and fulfilment of orders, including information necessary to prevent unauthorized use, misuse, fraud or other abuse.

Where goods are ordered or purchased for delivery to another person, the Company may process the personal data of such person to the extent necessary to process and fulfil the relevant order and deliver the goods, in accordance with applicable law and the applicable General Terms and Conditions of Purchase.

Additional categories of personal data relating to Related Parties

In connection with their activities relating to the Exhibition, Related Parties may be required to provide, or the Company may otherwise collect and process, the following additional categories of personal data, as applicable to the relevant purpose of processing: (in addition to the data already mentioned in the paragraph above):

• Information on responsible authority/authorities;
• Information obtained through internal communications (information obtained through personnel evaluations, internal audits or internal reporting, as well as communication with the internal AI chatbot, contact forms and similar business support tools, etc.);
• Log-in information (ID, password, etc.);
• Entered information (information entered or sent by Related Persons using the Company’s input form or other method prescribed by the Company);
• Information obtained from the Related Persons’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and Google Play advertising ID, etc.); and
• Other information related to the above, or any information voluntarily submitted by the User during the use of the Website and/or the App or in communication with the Company.

The Company notes that under no circumstances does it collect special categories of data, such as data revealing the User’s racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, nor does it process genetic data, biometric data, or data concerning health, sex life, or sexual orientation.

The Company will use the above-stated data for the following purposes (in accordance with its’ applicability):

Purposes related to the Website and the App in general

• To create a user account for the Users;
• To authenticate and confirm the identity of Users, as well as a user account;
• For selection and registration of volunteer/user/participation applications;
• To organize and implement the loyalty program;
• To request feedback from the Users regarding the Websites, App or the provided services;
• To provide Users with promotional marketing, advertising and publicity relating to the Website, the App, the Online Store, the products and services provided by the Company and/or Exhibition as well as related entities of the Company, where permitted by applicable law and, where required, based on the User’s consent;
• To investigate and analyze the usage of the Website and/or App by Users and to maintain, protect and improve the Website and/or App, etc.;
• To register the reservation information and manage and operate the Exhibition safely and smoothly;
• To process and execute the payments;
• To create backup copies of parts or all of the data (including configurations, content, programs, messages, and others) and to store such copies for the purposes of system maintenance;
• To respond to inquiries about the Website and/or the App and/or Online Store;
• To respond to actions that violate the Company’s terms or the like regarding the Website and/or the App;
• To notify changes etc. of the terms or like regarding the Website and/or the App;
• To prevent the occurrence of failures, malfunctions, and accidents in the systems used for the use of the Website and/or the App, and to respond to them when they occur;
• To plan and operate the Exhibition and related events (including official ceremonies and official events);
• To carry out administrative procedures related to the Exhibition and related events;
• To contact Related Persons or to prepare a contact list;
• To communicate and coordinate information among Related Persons;
• To authenticate and confirm the identity of Related Persons;
• To monitor the use of systems by Users, to detect and prevent unauthorized log-ins or the like;
• To detect and prevent fraud and misconduct at an early stage;
• To provide personal information to third parties in accordance with this Policy.

Purposes specifically related to ticketing

• To facilitate and administer the purchase, reservation, issuance, delivery, activation, assignment, management, validation and use of Exhibition tickets;
• To register and manage ticket and reservation information;
• To verify the identity of ticket purchasers and ticket holders, where required;
• To verify the age, eligibility or other conditions applicable to the purchase or use of a particular type or category of ticket;
• To verify eligibility for discounted, seasonal or other special-category tickets and to prevent unauthorized use or transfer of such tickets;
• To verify the validity and status of tickets and reservations;
• To manage access to the Exhibition, including entry and access control, and to validate tickets at entry points and other designated locations;
• To prevent and detect unauthorized use, misuse, duplication, fraudulent use or other abuse of tickets and the ticketing system;
• To process and execute payments relating to the purchase of Exhibition tickets;
• To administer changes, cancellations, refunds, replacements, transfers and other actions relating to tickets and reservations;
• To communicate with ticket purchasers, ticket holders and, where applicable, persons on whose behalf a ticket has been purchased or issued, regarding ticket purchases, reservations, payments, delivery, activation, scheduled visits, changes, cancellations, refunds and other ticket-related matters;
• To provide customer support and respond to inquiries relating to the purchase, reservation, issuance, management, validation and use of Exhibition tickets;
• To ensure the safe and orderly operation of the ticketing system and access to the Exhibition;
• To comply with legal and regulatory obligations applicable to the Company in connection with ticket sales, payments, accounting, taxation, security, access control and the organization of the Exhibition; and
• To provide personal data to payment service providers, ticketing system providers and other service providers involved in the purchase, issuance, management, validation or use of Exhibition tickets, where necessary for the provision of the relevant services and in accordance with this Policy and applicable law.

Purposes specifically related to Online Store

• To facilitate and administer the ordering and purchase of goods through the Online Store;
• To register, process, manage and fulfil orders placed through the Online Store;
• To create and administer User accounts and enable registered Users to access and manage their orders and purchase history;
• To process and execute payments relating to purchases made through the Online Store and to administer payment transactions in cooperation with the relevant payment service providers;
• To issue and deliver invoices, fiscal receipts, order confirmations and other documentation relating to purchases made through the Online Store;
• To organize and administer the delivery of goods, including the provision of information necessary for delivery to courier, postal and other delivery service providers, and to communicate with Users regarding the status of delivery;
• To administer order cancellations, withdrawal from contracts, returns of goods, complaints and other requests relating to goods purchased through the Online Store;
• To process and execute refunds, including, where necessary, by processing bank account information provided by the User for this purpose;
• To communicate with purchasers and, where applicable, recipients of goods regarding orders, payments, delivery, cancellations, returns, complaints, refunds and other matters relating to purchases made through the Online Store;
• To provide customer support and respond to inquiries, requests and complaints relating to the Online Store and purchases made through it;
• To maintain records relating to orders, purchases, complaints, withdrawals, returns and refunds, where required for the operation of the Online Store or compliance with applicable law;
• To apply discounts, promotional codes and other promotional benefits in connection with purchases made through the Online Store;
• To prevent and detect unauthorized use, misuse, fraud or other abuse of the Online Store and payment and ordering processes;
• To comply with legal and regulatory obligations applicable to the Company in connection with the sale of goods, consumer protection, payments, fiscalization, accounting, taxation and other applicable requirements;
• To provide personal data to payment service providers, courier, postal and other delivery service providers, providers of the Online Store and related IT services and other service providers involved in the processing and fulfilment of orders, payments, delivery, returns, complaints and refunds, where necessary for the provision of the relevant services and in accordance with this Policy and applicable law.

The Company will retain personal data for as long as it is necessary to fulfil the purposes prescribed in this article, with respect to whether there is an ongoing relation with the User whose data is retained as well as whether the Company is legally obligated to store such data.

Personal data processed in connection with ticketing or purchases made through the Online Store may be retained for a period necessary for the administration of the relevant ticketing transaction or order, including its fulfilment, delivery, cancellation, withdrawal, return, complaint or refund, including the resolution of complaints, refunds, disputes and other claims, as well as for compliance with applicable legal, accounting, tax and other regulatory obligations.

The Website, App and the Online Store (which is available trough the Webiste and App) allow Users with a registered account, and, where applicable, non-registered Users, to make purchases, including purchases of tickets for the Exhibition and goods through the Online Store.

For the purpose of processing transactions made through the Website, the App and/or the Online Store, the following data may be collected and processed, as applicable:

• the payment method;
• the transaction amount,
• the transaction date and time,
• the transaction status;
• the transaction identifier; and
• other transaction-related information made available to the Company by the relevant payment service provider.

For the purpose of purchasing, issuing, delivering, validating and using Exhibition tickets, the personal data specified in Articles 2 and 3 of this Policy and the applicable Terms for the sale of Exhibition tickets may be collected and processed. For the purpose of ordering, purchasing, paying for, delivering, returning and refunding goods, handling complaints and performing other activities relating to purchases made through the Online Store, the personal data specified in Articles 2 and 3 of this Policy and the applicable General Terms and Conditions of Purchase may be collected and processed.

The processing of payment data required for the execution of transaction is carried out by a third party — a payment processor (service provider) integrated into the Website, the App and/or the Online Store, in accordance with its own Privacy Policy and applicable law.

Payment data required for the execution of the transaction, including payment card details (such as card number, CVV number and name of the cardholder), are processed directly by the relevant payment service provider, without such data being made available to the Company.

Where the relevant payment service provider enables the User to save a payment card for future transactions, such functionality is provided and administered through the relevant payment service provider, and the Company does not store the User's full payment card details.

The Company may enable Users to use the AI chat bot through the Website and/or within the App for the purpose of providing customer support, responding to inquiries, providing information, and collecting feedback, including customer support and assistance in connection with the purchase, reservation, issuance, management, validation and use of Exhibition tickets and the use of the Online Store, including orders, purchases, payments, delivery, returns, complaints and refunds relating to goods purchased through the Online Store. All data entered by the User in communication with the AI chat bot is processed in accordance with the provisions of this Privacy Policy.

By using this service, the User agrees that all information entered in communication with the AI chat bot will be processed in accordance with this Privacy Policy.

The User may stop using the AI chat bot at any time, and the rights to access, correct, or delete previously entered data shall apply in accordance with the provisions of this Privacy Policy.

The Company is not responsible for the accuracy, or the truthfulness of the data entered or provided to the Company by the Users or any third parties, nor for the results of any data processing that involved such data.

The Company will not be liable to the User or any third party for the loss of data provided by the User or otherwise collected from the User, considering that the use of the internet is not, and cannot be, completely secure. To avoid any doubt, by using the Website, App and/or Online Store and/or providing personal data, the User exclusively agrees to the risk of using the internet, which includes all security risks associated with the use of the internet and will not have the right to compensation from the Company in the event of any damage due to data loss.

The Company pledges to respect the privacy of Users to the greatest extent possible, withstanding the provisions of the Policy provided herein.

Personal data will not be disclosed, sold, or made available to third parties, except for the purpose and under the conditions specified in this Policy or when explicitly required by applicable law (i.e. to the competent courts, the government or government affiliated bodies).

The Company reserves the right to outsource some of its services (e.g. marketing, payment, security or organizational services) for which purposes the Company may disclose information to such third parties (in such cases the Company shall impose on such persons the obligation to securely manage such personal information and shall exercise necessary and appropriate supervision thereof). Government of the Republic of Serbia has and will create multiple companies in order to fulfill its obligations for the purposes of the Exhibition and the Company may disclose information to such companies, the Bureau International des Expositions (BIE) or a legal successor of the Company.

For the purposes described in this Policy, the Company may also disclose personal data to third-party service providers involved in the purchase, reservation, issuance, delivery, activation, assignment, management, validation and use of Exhibition tickets, including ticketing platform operators, ticket distributors, payment service providers, ticket issuance and validation providers, access control providers, IT and hosting service providers, customer support providers, fraud prevention and security service providers, to the extent necessary for the provision of the relevant ticketing services and in accordance with this Policy and applicable law.

For the purposes described in this Policy, the Company may also disclose personal data to third-party service providers involved in the operation of the Online Store and the processing and fulfilment of purchases made through it, including Online Store and e-commerce platform providers, payment service providers, courier, postal and other delivery service providers, parcel locker/pick-up point operators, IT and hosting service providers, customer support providers, and fraud prevention and security service providers, to the extent necessary for the provision of the relevant services and in accordance with this Policy and applicable law.

The Company will not transfer, use, store, or make available to any third party outside the borders of the Republic of Serbia the data collected from Users or data that may be collected during the use of the Website and/or App, except for the purpose and under the conditions specified in this Policy, when necessary in accordance with this article or when explicitly required by applicable law.

When the Company conducts a transfer, use, storing or making available of personal data outside of the border of the Republic of Serbia, the Company will take all necessary measures for the protection of personal information pursuant to the relevant applicable law.

The Company primarily collects information directly from the Users.

The Company may obtain personal information indirectly from (i) organizations, corporations, or entities to which Users belong or are associated with, (ii) companies sponsoring the Exhibition, related parties of the Exhibition (iii) public sources such as traditional media, publicly available web-sites social media (such as X, Facebook, Instagram, Google, Apple etc.) as well as other publicly available sources and (iv) outsourcing companies and affiliated companies mentioned in article 7. above, including third-party service providers involved in the ticketing system, payment processing, ticket issuance, delivery, management, validation and access control, as well as third-party service providers involved in the operation of the Online Store, payment processing, order fulfilment, delivery, returns, complaints and refunds.

The Company informs Users that they must be at least 15 years old to use the App, and by using the App, the User confirms that they have read, understood, and acknowledges this requirement, and explicitly confirms that they are at least 15 years old at the time of downloading and using the App.

To the best of the Company's knowledge, it does not collect, process, or in any way come into contact with personal data about persons under 15 years of age without the consent of a parent or guardian.

Users under the age of 15 must provide their personal data through the App to the Company only with the consent of a parent or guardian.

The foregoing age requirement relates to the use of the App and does not, by itself, determine the age requirements applicable to the purchase or use of Exhibition tickets, the purchase of goods through the Online Store, which are subject to the respective terms and conditions and eligibility requirements applicable to those services and activities.

The age requirement for using the App does not prevent a parent, legal guardian or another adult responsible for a minor from purchasing or managing an Exhibition ticket on behalf of a minor, where permitted under the applicable ticketing terms, or from purchasing goods through the Online Store for a minor in accordance with the applicable General Terms and Conditions of Purchase. Notwithstanding the general minimum age of 15 years prescribed for the use of the App.

If the Company discovers that it has collected the personal data relating to a User under the age of 15 without the consent of a parent or guardian, it will immediately take appropriate measures in accordance with applicable law.

As a data subject whose data has been collected and processed by the Company, Users have the following rights:

• Right of Access
  The User can obtain information about whether their personal data is being processed and, if so, gain access to their personal data and receive information such as: the purpose of processing, types of personal data, data recipients, retention period, etc. When personal data is transferred to another country or international organization, the User has the right to be informed about the safeguards related to the transfer and whereabouts of the personal data.
• Right to Rectification
  Upon the User's request, inaccurate personal data will be corrected, or incomplete data will be supplemented.
• Right to Erasure (i.e. “right to be forgotten”)
  Upon the User's request, personal data will be erased if the conditions prescribed by applicable law are met. Personal data cannot be erased if their processing is required by applicable law or if processing is necessary for the protection of public interest or for the initiation, submission, or defense of a legal claim.
• Right to Restriction of Processing
  Upon the User's request, the processing of personal data will be restricted if any of the conditions prescribed by applicable law are met.
• Right to data portability
  Upon the User’s request, all personal data concerning that User will be sent to the User in a readable format.
• Automated individual decision making
  User has the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
• Right to Object
  At any time, the User can object to the processing of personal data based on legitimate interest or necessary for the performance of tasks in the public interest or the exercise of legally prescribed powers, after which the Company will cease further processing of such data, unless there is a lawful basis for processing that overrides the user's interests or freedoms or if the processing is carried out for the initiation, submission, or defense of a legal claim.
• Right to Lodge a Complaint with the Commissioner for Information of Public Importance and Personal Data Protection and the Right to Administrative and Judicial Protection
  Users may have the right to file a complaint with a supervisory authority under applicable laws and regulations. The Company hereby informs the Users that a Serbian supervisory authority is the Serbian Commissioner for Information of Public Importance and Personal Data Protection (contact info to be found at https://www.poverenik.rs/en/contact.html).
• Right to withdraw
  Users have the right to withdraw consent whenever the Company, handles personal information based on consent. This withdrawal does not affect the legality of any treatment made on the basis of previously given consent.
  Where the Company processes personal data in connection with the purchase, reservation, issuance, management, validation or use of Exhibition ticketsor in connection with purchases made through the Online Store, withdrawal of consent or deletion of a User account shall not affect the lawfulness of processing carried out on another legal basis, nor shall it require the Company, as applicable, to delete personal data which it is required or entitled to retain under applicable law which is necessary for the administration of the relevant ticketing transaction, Online Store purchase, including for the purposes of order fulfilment, delivery, returns, withdrawals from contracts, refunds, complaints, disputes, fraud prevention, accounting, taxation, legal claims or other legitimate purposes.
  Since the Company creates a profile on the Website and/or App solely based on the User’s consent, the User may withdraw their consent at any time by deleting their profile, after which the Company will delete personal data relating to the User's profile, except for personal data which the Company is required or entitled to retain on another legal basis, including data relating to ticketing transactionsand purchases made through the Online Store.

If you wish to exercise any of the afore-mentioned rights, please use the contact details listed in section ”Inquiries” below.