PRIVACY POLICY for deeptech-citadels.com

Last updated: 04.12.2025.

This Privacy Policy describes how the website deeptech-citadels.com (“Website”) processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Serbian data protection laws.

The Website is operated by:

University of Belgrade – School of Electrical Engineering (ETF)
Bulevar kralja Aleksandra 73
11020 Belgrade, Serbia
Email (project inquiries): etfrobotics@gmail.com

Data Controller

The Data Controller responsible for processing personal data through this Website is:

University of Belgrade – School of Electrical Engineering

Data Protection Officer:
PhD Filip Bečanović
Science associate
Phone: +011/3218318
Email: filip.becanovic@etf.rs

Personal Data We Collect

Data collected automatically (cookies & analytics)

When visitors access the Website, we automatically collect technical data, such as:

  • IP address (anonymized by Burst Statistics)
  • Browser type and version
  • Operating system
  • Pages viewed, date and time of visit
  • Referring websites

This is done through Burst Statistics, a privacy-friendly analytics tool that does not use third-party cookies.

Contact Form Data

When you submit a contact form, we collect:

  • First and last name (if provided)
  • Email address
  • Message content

This data is used solely for responding to inquiries.

Newsletter Signup (Mailchimp)

If you sign up for our newsletter, we collect:

  • Email address (required)
  • First name (optional)

This data is processed by Mailchimp on behalf of the University of Belgrade – School of Electrical Engineering. Mailchimp may store data on servers outside the EU but provides GDPR-compliant safeguards (Standard Contractual Clauses).

Social Media Embeds

Our Website may display embedded content from:

  • LinkedIn
  • Facebook
  • X (Twitter)
  • YouTube

When you interact with these embeds, these platforms may collect additional personal data under their own privacy policies.

Purposes and Legal Bases of Processing

Purpose Legal Basis (GDPR Art.)
Operating the Website, ensuring security Art. 6(1)(f) legitimate interest
Statistics & performance measurement (Burst Statistics) Art. 6(1)(f) legitimate interest
Responding to inquiries via contact form Art. 6(1)(b) contract or Art. 6(1)(f)
Sending newsletters Art. 6(1)(a) consent
Providing social media links & embeds Art. 6(1)(f)
Displaying embedded videos Art. 6(1)(a) consent (via cookie banner)

Data Retention

  • Contact form data: retained for up to 24 months, unless legally required longer.
  • Newsletter data: retained until the user withdraws consent / unsubscribes.
  • Analytics data: stored in anonymized form; retention defined by Burst Statistics settings.
  • Server logs: typically retained 14–30 days for security.

Sharing of Personal Data

We may share data with:

  • Mailchimp, for newsletter delivery
  • Website hosting provider, for operational purposes
  • Social media platforms, when content is embedded

No data is sold or shared with advertisers.

International Data Transfers

We do not intentionally transfer personal data outside the EU/EEA except where required by services such as Mailchimp, which uses Standard Contractual Clauses (SCCs) to ensure compliance with GDPR.

Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Request rectification
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Withdraw consent at any time
  • Data portability
  • Lodge a complaint with a supervisory authority

In Serbia, the competent authority is:

Commissioner for Information of Public Importance and Personal Data Protection
Bulevar kralja Aleksandra 15
11000 Belgrade, Serbia

Contact for Data Protection Matters

For questions or requests, contact:

Email (project inquiries): etfrobotics@gmail.com
DPO Email: privatnost@etf.bg.ac.rs

Subscribe to newsletter

Funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or European Commission and EU executive agencies. Neither the European Union nor the granting authority can be held responsible for them.

©CITADELS

Privacy Preference Center