PRIVACY POLICY

This Privacy Policy describes how Beyond42 d.o.o., Palmotićeva 16, Belgrade, Republic of Serbia, registration number: 21479900 (hereinafter: “Beyond42”), processes and protects your personal data when you use any of the online community platforms or digital products operated by Beyond42.

Beyond42 takes data privacy and protection seriously and is committed to handling personal data in accordance with applicable laws, including but not limited to the Law on Personal Data Protection of the Republic of Serbia (“Official Gazette of RS”, No. 87/2018), which is aligned with the General Data Protection Regulation (GDPR).

1. WHO IS RESPONSIBLE FOR YOUR DATA?

Beyond42 acts as the Data Controller—it determines the purpose and manner of personal data processing. Data may be processed by authorized partners and service providers (Processors) acting on behalf of Beyond42 under strict contractual obligations.

If you have any questions regarding this Policy or how we handle your data, please contact us at:

support@beyond42.com

2. WHAT PERSONAL DATA DO WE COLLECT?

We collect and process the following categories of personal data:

a) Data you provide voluntarily:

• Name and surname
• Email address
• Contact details
• Employment or organizational affiliation

Other information you choose to share during registration or use of platform services

This data is collected with your informed consent, through voluntary registration or participation on our platforms.

b) Automatically collected technical data:

• IP address
• Browser type and version
• Operating system
• Referring/exit pages and timestamps
• Device type and network provider

These are collected through web server logs for the purpose of service improvement and security.

c) Video and Event Participation:

If you participate in video conferences or virtual events hosted on our platforms, your participation may be recorded. These recordings are typically handed over to the event organizer (our client) and Beyond42 does not retain or reuse recordings unless explicitly stated.

3. WHAT IS THE LEGAL BASIS FOR PROCESSING?

We process personal data based on one or more of the following legal grounds:

• Consent: Voluntary, informed, and revocable at any time.
• Contractual necessity: To deliver services you have requested or agreed to.
• Legal obligation: Where processing is required by applicable law.
• Legitimate interest: To maintain platform security, prevent abuse, or improve services, where this interest does not override your data protection rights.

4. PURPOSES OF DATA USE

We use personal data only for clearly defined purposes, including:

• Enabling and managing user accounts and access to platform features
• Delivering services such as virtual fairs, community interactions, or digital content
• Monitoring site performance and technical functionality
• Generating anonymized reports and analytics to improve services
• Ensuring compliance with legal and contractual obligations

We do not publish or share your personal information for marketing without explicit consent.

5. WHO HAS ACCESS TO YOUR DATA?

Access is limited to:

• Beyond42 employees and authorized contractors
• Verified technical partners and service providers under contractual data protection obligations
• Clients (platform owners) in accordance with the services provided
• Regulatory or legal authorities, only when legally required

In some cases, data may be transferred to trusted partners outside of Serbia, including in the EU, under appropriate safeguards and legal basis.

6. HOW DO WE PROTECT YOUR DATA?

We implement comprehensive security measures, including:

• Access control systems
• Data encryption and secure storage
• Network and infrastructure protection
• Regular audits and compliance checks
• Staff training on data protection

All third parties handling your data are also required to apply these or higher standards of protection.

7. CHILDREN AND MINORS

Children are not permitted to use our platforms. Minors aged 15 and above may use services with appropriate supervision or consent.

8. DATA RETENTION

We retain data only for as long as necessary to fulfill the purpose for which it was collected or as required by law. After that, data is either deleted or anonymized.

If the processing is based on consent, and consent is withdrawn, data will be deleted or anonymized within 10 days of the request.

9. YOUR RIGHTS

You have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the relevant Data Protection Authority

To exercise your rights, contact: support@beyond42.com. We will respond within 30 days.

10. CHANGES TO THIS POLICY

This Privacy Policy may be updated periodically. Any changes will be published on the relevant platform and will take effect upon publication. Material changes will be clearly communicated.

For the latest version of this Privacy Policy, visit:
🌐 www.beyond42.com