PRIVACY POLICY

The O₂ organization (hereinafter: “we”, “us”, “O₂”) is committed to protecting the privacy and personal data of all users of the website o2.org.rs. This Privacy Policy explains what data we collect, how we use, store, and protect it, as well as the rights users have in accordance with the applicable laws of the Republic of Serbia and the General Data Protection Regulation (GDPR), where applicable.

By using our website and submitting forms, you agree to the terms of this Privacy Policy.

1. Data we collect

We collect only the data necessary to carry out our activities, communicate with users, and process requests. This may include:

  • First and last name

  • Email address

  • Phone number

  • Information required for issuing and delivering vouchers

  • Data submitted through contact forms

  • Any additional information voluntarily provided in messages or inquiries

We do not collect special categories of personal data (sensitive data).

2. How we collect data

Personal data is collected only when voluntarily provided by the user, through:

  • Website contact forms

  • Voucher purchase or order forms

  • Direct email communication

The website does not use hidden mechanisms to collect personal data.

3. Purpose of data processing

We use collected data exclusively for the following purposes:

  • Processing requests submitted via forms

  • Communicating with users regarding reforestation projects

  • Issuing, managing, and tracking vouchers

  • Providing updates about organizational activities (only with prior consent)

  • Improving service quality and user experience

Personal data is not used for marketing purposes without the user’s explicit consent.

4. Legal basis for processing

Personal data is processed based on:

  • User consent

  • Necessity for fulfilling contractual obligations

  • Legitimenog interesa organizacije, u skladu sa važećim zakonima

Users have the right to withdraw their consent at any time.

5. Data storage and protection

We take all reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or disclosure.

Personal data is stored only for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required by law.

6. Sharing data with third parties

We do not sell, rent, or share personal data with third parties.

Data may be accessible only to:

  • Authorized members of the O₂ team

  • Trusted partners involved in technical website operations or voucher processing (under confidentiality obligations)

  • Competent authorities, where required by law

7. Cookies

The website may use essential technical cookies necessary for proper functionality.

Cookies are not used for aggressive tracking or marketing profiling without user consent.

Users can manage or disable cookies at any time through their browser settings.

8. User rights

In accordance with applicable regulations, users have the right to:

  • Request access to their personal data

  • Request correction of inaccurate data

  • Request deletion of data (“right to be forgotten”)

  • Restrict data processing

  • Object to data processing

  • Withdraw consent at any time

Requests regarding user rights can be sent via the contact email below.

9. Contact information

For any questions regarding this Privacy Policy or personal data processing, you can contact us at:

Email: info@o2.org.rs

10. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time to comply with legal requirements or changes in our operations.

All updates will be published on this page and become effective upon publication.