Notice on the Processing of Personal Data for Individuals Participating in the “Superpotera” Quiz
In accordance with the provisions of the Law on Personal Data Protection (“Official Gazette of the RS,” No. 87/2018, hereinafter: “LPDP”), this document refers to the processing of personal data of individuals who apply to participate or participate (hereinafter: “Contestant”) in the “Superpotera” quiz (hereinafter jointly referred to as: “The Quiz”) organized by the company ADRENALIN DRUŠTVO SA OGRANIČENOM ODGOVORNOŠĆU BEOGRAD (VRAČAR), registration number: 20041676, with its registered office at Topolska 22, Belgrade (hereinafter: “The Controller”). Accordingly, the Controller collects, processes, and stores the personal data of Contestants in its database for the purposes of nominating and selecting Contestants for participation in the Quiz, as well as for carrying out all activities related to the Quiz.
1. Personal Data Processed by the Controller
The Controller processes the following Personal Data of Contestants (jointly referred to as “Personal Data”):
• name, surname;
• photograph/video introduction;
• place of birth;
• place of residence;
• telephone number;
• email address;
• year of birth;
• height;
• profession;
• occupation;
• education;
• employment status;
• place of employment and working hours;
• marital status;
• information on whether the Contestant is a parent;
• Contestant’s hobbies and interests;
• level of knowledge in areas the candidate is familiar with (geography, history, literature, film, television, music, sports, art and architecture, religion and mythology, general culture, philosophy, and psychology);
• participation in other quizzes;
• participation in other TV shows;
• any existing health conditions (e.g., hearing, vision, heart, spine, and/or other physical and/or psychological conditions) that may affect participation in the quiz;
• information on previous convictions;
• information on any current pre-trial or criminal proceedings that may be conducted against the Contestant before basic and higher courts, public prosecutor’s offices, special departments for organized crime, the War Crimes Department, and special departments for the suppression of corruption;
• unique personal identification number of the citizen;
• current bank account number;
• and possibly other Personal Data that the Contestant provides for the purpose of participating in the quiz.
The Contestant must be an adult at the time of providing personal data. The Controller will only process the data of adults, and if it determines that a minor has filled out the application, such data will be immediately deleted, and the application will not be considered further. In case of a potential need for statistical processing, the Contestant’s Personal Data will be anonymized.
2. Basis for Processing Personal Data
Given the type of cooperation between the Controller and the Contestant, the Controller processes the Contestant’s Personal Data on the basis of consent. The provision of the Contestant’s Personal Data is a necessary condition for the selection of participants in the quiz and for participation in the quiz, which is why the Contestant is obliged to disclose their Personal Data to the Controller.
We process Personal Data based on the explicit consent provided by the Contestant simply by filling out the contestant application found on the websites https://shorturl.at/XxZJt and https://shorturl.at/Zhybp. This action will be considered an active, voluntarily performed action to establish a lawful legal basis for the collection and processing of relevant data in the manner and for the purposes described in this notice. This action confirms that the Contestant is fully informed and agrees to this notice on the processing of Personal Data for the purposes of candidacy for the Quiz, participation in the Quiz, maintaining communication, prize payment, organization of Quiz taping, creation of a Quiz synopsis, as well as carrying out all other activities related to the Quiz. Otherwise, the Controller will be unable to organize the Quiz and provide the Contestant with the opportunity to participate in any respect.
After filling out the application, the Controller will contact the Contestants by phone for an additional test lasting about ten minutes, during which individuals engaged by the Controller will conduct a conversation with the Contestants and potentially supplement certain items on the form filled out by the Contestant. Additionally, the Controller may ask Contestants for a video of up to 60 seconds in which they introduce themselves, talk about interesting facts, and state their motivation for participating in the Quiz.
Finally, proof of prize payment containing Personal Data is stored in databases for the purpose of complying with the Controller’s legal obligations (tax regulations). Such proofs of payment often contain the name and surname of the authorized person, as well as the authorized person’s current bank account number. The mentioned document contains a set of personal data that the Controller does not process individually, but the document is stored in the Controller’s databases for a period of one year from the date of payment.
3. Purpose of Processing Personal Data
When we process Personal Data based on consent, we will use the Personal Data exclusively for the purposes of candidacy for the Quiz, participation in the Quiz, maintaining communication, prize payment, organization of taping, creation of a Quiz synopsis, and carrying out all other activities related to the Quiz. The Controller processes any existing health conditions (e.g., hearing, vision, heart, spine, and/or other physical and/or psychological conditions) solely for the purpose of ensuring adequate conditions for the organization and taping of the quiz, and does not process them for any other purposes. In this case, as the basis for the processing of Personal Data for the aforementioned purposes is consent, please be aware that consent can be revoked at any time by sending a request to the email address: office@adrenal-in.co.rs. The withdrawal of consent does not affect the legality of processing carried out on the basis of consent before its withdrawal. If consent is revoked during the candidacy or participation in the quiz, it also results in the inability to participate. Finally, proof of prize payment containing personal data is stored for the purpose of fulfilling legal obligations by the Controller.
4. Period of Personal Data Retention
Furthermore, when Personal Data is processed by the Controller based on consent, the Controller stores the Personal Data in its databases for the duration of the Quiz and thereafter for as long as the Contestant can exercise their rights regarding the Quiz with the Controller, but no later than one year after the Quiz is aired.
Proofs of prize payment containing a set of personal data that the Controller does not process individually are stored in the Controller’s databases for a period of one year.
If a Contestant does not participate in the Quiz, their data is deleted within 15 days from the date the Controller decides that they do not meet the conditions for participation.
5. Rights of the Data Subject Regarding Personal Data Processing
The person whose data is processed can request the following: 1) access to Personal Data, 2) correction of Personal Data, and 3) deletion of Personal Data. In addition, the following rights can also be exercised: 1) the right to restrict the processing of Personal Data, 2) the right to data portability, and 3) the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, Belgrade 11000.
If a Contestant has any questions regarding the use of their Personal Data or intends to object to the processing of Personal Data to exercise their rights, they can contact the Controller via email at office@adrenal-in.co.rs.
6. Protection Measures, Disclosure, and Transfer of Personal Data
The Controller is responsible for the protection of the Contestant’s Personal Data. The Controller undertakes administrative, technical, organizational, and other measures to ensure an adequate level of security for the personal data being processed, in accordance with the Controller’s privacy policy. Some of the measures include access control, protection of data integrity and confidentiality, etc. The Controller’s staff has appropriate knowledge and understanding of the importance of the confidentiality of your personal data.
If the Controller engages other legal entities as processors for certain data processing activities of the Contestants in accordance with the LPDP, this will include the obligation for all persons authorized to process data within the organization of the specific processor to comply with personal data confidentiality protection measures. The Controller may disclose the Contestant’s Personal Data to its affiliated entities in the territory of the Republic of Serbia, employees of the Controller, companies that provide security services for premises, property, and individuals, as well as providers of legal and accounting services. The Controller will ensure that the processing of the Contestant’s personal data is carried out in accordance with the principles established by the LPDP.
The Controller does not transfer personal data outside the borders of the Republic of Serbia. However, data may be transferred to another country or international organization, without prior approval, if it has been determined that the other country/international organization provides an adequate level of personal data protection. In this regard, the Decision on the list of countries, parts of their territories or one or more sectors of specific activities in those countries, and international organizations where an adequate level of personal data protection is considered to be ensured (“Official Gazette of the RS,” No. 55/2019) determines where an adequate level of personal data protection is considered to be ensured.