Privacy Policy RsC d.o.o This Privacy Policy outlines how RsC d.o.o. (hereinafter referred to as the "Controller", "we", "us", or "our") collects, processes, and protects your personal data. This document is drafted in strict accordance with the Law on Personal Data Protection of Bosnia and Herzegovina and the General Data Protection Regulation (GDPR). 1. Data Controller Information The entity responsible for the processing of your personal data is: Legal Name: RsC d.o.o. Registered Address: Soukbunar 1, 71000 Sarajevo, Bosnia and Herzegovina Identification Number: 4201831010002 Contact E-mail: info@rsc.ba 2. Categories of Personal Data Collected We process only the personal data that is strictly necessary for the purposes for which it is collected, specifically through our online interfaces: Event Registration: Full name, e-mail address, telephone number, professional affiliation (organization/company), and any specific requirements (e.g., dietary preferences or accessibility needs) provided during the registration process. Inquiries and Information Requests: Name, contact details, and the specific content of your inquiry to facilitate a comprehensive response. Technical Data: IP addresses, browser specifications, and cookie identifiers collected automatically during your interaction with our online platforms. 3. Purpose and Legal Basis for Processing Your personal data is processed based on the following legal grounds: Performance of a Contract: Processing is necessary for the administration of your participation in events and the fulfillment of requested services. Legitimate Interests: Processing is conducted to respond to your inquiries, improve our service delivery, and ensure the security of our information systems. Consent: Where you have provided explicit consent for receiving marketing communications or newsletters. Consent may be withdrawn at any time. Legal Obligation: Compliance with statutory record-keeping requirements under the laws of Bosnia and Herzegovina. 4. Data Retention Period Personal data shall be retained only for as long as necessary to fulfill the purposes outlined in this Policy: Event-related Data: Retained for the duration of the event administration and for a period thereafter as required by financial or archival regulations (typically up to 5-10 years). Inquiries: Retained until the resolution of the inquiry, unless further retention is necessary for the establishment or defense of legal claims. 5. Rights of the Data Subject Pursuant to applicable law, you are entitled to the following rights: Right of Access: The right to obtain confirmation as to whether your data is being processed and to receive a copy of such data. Right to Rectification: The right to request the correction of inaccurate or incomplete personal data. Right to Erasure ("Right to be Forgotten"): The right to request the deletion of data when it is no longer necessary for the original purpose. Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes. Right to Complain: The right to lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina. 6. Data Sharing and Disclosure We do not sell or lease personal data to third parties. Disclosure to third parties is limited to: Authorized service providers (Processors) such as IT support, hosting services, and email platform providers. Event co-organizers, where explicitly disclosed at the time of collection. Competent public authorities, where mandated by law or judicial order. 7. Data Security We implement rigorous technical and organizational security measures, including SSL encryption for online forms and restricted access protocols, to safeguard your personal data against unauthorized access, alteration, or loss. 8. Contact Information For any inquiries regarding this Privacy Policy or the exercise of your rights, please contact our Data Protection Officer at: info@rsc.ba Last Updated: 20-April-2026