Balkan Cleanroom Forum
info@cras.rs
SRB | ENG

Privacy Policy

Information on how CRAS collects and uses personal data submitted through the website.

Cleanroom Association of Serbia (CRAS) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains which data we collect through the website, how we use, store and protect it, and what rights you have in relation to that data.

1. Data controller

The controller of personal data collected through this website is the association “Cleanroom Association of Serbia – CRAS”, headquartered in Belgrade, Serbia. For privacy-related questions, you may contact us at info@cras.rs.

2. What personal data we collect

We collect only the data necessary to achieve the association’s goals, provide information and organise professional events.

  • Membership applications: full name, company or institution name, position, email address, phone number and company address.
  • Event registrations: participant name, email address, phone number, company name, tax ID and company registration number when needed for invoicing.
  • Contact forms and email inquiries: your name, email address and any information you choose to include in the message.
  • Technical data collected automatically: IP address, browser type, operating system, access time and visited pages, exclusively for analytics and service improvement.

3. Purpose and legal basis of processing

  • Performance of contractual obligations and service delivery: processing membership applications, event participation and communication regarding membership or event logistics.
  • Consent: newsletters, association updates, professional news and announcements of future events. Consent may be withdrawn at any time.
  • Compliance with legal obligations: issuing invoices, pro forma invoices and keeping financial records in accordance with Serbian law.

4. Retention period

  • Member data is retained for the duration of membership and deleted within 12 months after membership ends, unless a longer retention period is required by law.
  • Event participant data is retained until the event and related administrative or financial processes are completed, and for up to 5 years where tax regulations require it.
  • Newsletter subscription data is retained until consent is withdrawn.

5. Data sharing

CRAS does not sell, rent or unlawfully share personal data with third parties. Data may be shared only with trusted processors such as IT hosting and maintenance providers, email delivery services, bookkeeping partners or competent public authorities where required by law.

6. Data security

We apply technical, organisational and administrative measures to protect data against loss, misuse, unauthorised access, disclosure or alteration. The website uses SSL encryption for secure data transmission.

7. Your rights

You may request access to your data, correction of inaccurate data, deletion of data, restriction of processing, object to processing and file a complaint with the competent authority, in accordance with applicable law.

8. Changes to this policy

CRAS may update this Privacy Policy to align it with legal requirements or changes in our services. All updates will be published on this page in a timely manner.