Privacy Policy

THE „TAMARA GRUJIĆ“ FOUNDATION, with its registered office in Belgrade, Stari grad municipality, Cara Lazara 15/6/22, company registration number (MB): 28835566, tax ID (PIB): 114794496, respects the privacy of all visitors and donors and undertakes to process their personal data responsibly, lawfully and transparently, in accordance with the applicable personal data protection regulations of the Republic of Serbia.

This Privacy Policy applies to the website fondacijatamaragrujic.org and to all services and functionalities available through the site. Please read the following information carefully.

Data Controller

The „TAMARA GRUJIĆ“ Foundation is the controller of personal data in accordance with the Personal Data Protection Act (“Official Gazette of RS”, No. 87/2018). As the controller, the Foundation determines the purpose and means of processing personal data and is responsible for its storage and use in written and/or electronic form.

What Personal Data We Collect

The data the Foundation collects depends on the type of contact and service you use through the site. As a rule, the Foundation collects only the data necessary to fulfil a specific purpose.

From donors we may collect:

  • first and last name,
  • e-mail address,
  • telephone number,
  • address,
  • data necessary to process a donation,
  • technical data on the use of the site.

From persons requesting assistance from the Foundation we may collect:

  • first and last name,
  • address and municipality,
  • contact e-mail and telephone,
  • names and ages of children,
  • names and ages of parents or guardians,
  • a description of the assistance needed,
  • household income data,
  • information on assistance from other organisations,
  • as well as other data voluntarily provided by the individual.

When processing online card donations, the Foundation has no access to and does not store users’ payment card data. Card data is processed exclusively through the authorised and secured systems of the payment processor.

Purpose of Data Processing

Data is collected and processed for the purpose of:

  • processing donations,
  • keeping records of donors,
  • reviewing and acting on requests for assistance,
  • communicating with users and donors,
  • responding to inquiries and requests,
  • sending confirmations and notifications,
  • improving the operation of the site and user experience,
  • statistical analysis of site traffic,
  • and fulfilling the Foundation’s legal obligations.

The Foundation will not use the collected data for purposes that are not in accordance with this Privacy Policy. For any other purpose not covered by this Policy, the Foundation will request your additional consent, which you may withdraw at any time.

Security of Online Payments

When entering payment card data, confidential information is transmitted over the public network in a protected (encrypted) form using the SSL protocol and modern security technologies.

The card payment process is carried out via the secure system of the authorised payment processor — OTP banka Srbija a.d. Beograd — and the „TAMARA GRUJIĆ“ Foundation never has access to users’ payment card data.

Data Protection

The Foundation implements technical, organisational and administrative data protection measures to prevent:

  • unauthorised access,
  • misuse,
  • loss,
  • alteration,
  • or unauthorised disclosure of data.

Access to data is granted exclusively to authorised persons who need the data to perform their work, subject to confidentiality obligations.

Sharing Data with Third Parties

The Foundation does not sell or transfer personal data to third parties. Data may be forwarded exclusively to:

  • competent state authorities where required by law,
  • payment processors for the purpose of processing donations,
  • technical partners involved in system maintenance, subject to confidentiality obligations.

PayPal and Online Payments

When using the PayPal service or online card payments, the user may be redirected to third-party websites to complete the transaction. The processing of data by these services is subject to their own privacy policies and terms of use.

The Foundation has no access to and does not store users’ PayPal account data. For more information, see the PayPal Privacy Policy.

IPS QR and mBanking Payments

For donations made via an IPS QR code or mobile banking, transaction data is processed by the user’s banks and financial institutions, in accordance with their own rules and privacy policies.

SMS Donations

For charitable SMS donations (by sending a message to the humanitarian number 3005 within the territory of the Republic of Serbia), the Foundation may receive certain data on a successfully completed donation from mobile operators, in accordance with applicable regulations and agreements with the operators.

The Foundation has no access to the content of users’ private communications or to any other data not necessary for recording donations.

Cookies

The site may use cookies and similar technologies for the purpose of:

  • the proper functioning of the site,
  • traffic analysis,
  • improving the user experience,
  • and statistical analysis.

A cookie is a piece of information, i.e. a text file that a website stores on your device (computer, tablet, smartphone). On its websites, the Foundation may use services for analysing visits and tracking visitor behaviour (e.g. Google Analytics, Facebook Pixel).

The user may at any time configure or disable the use of cookies through their web browser settings. If you do not accept cookies, certain parts of the site may not function properly.

User Rights

Where provided by law, a person whose data the Foundation processes has the right to:

  • request access to their data,
  • request the correction or completion of inaccurate data,
  • request the deletion of data where the legal conditions are met,
  • restrict the processing of data,
  • object to the processing of data,
  • withdraw previously given consent at any time,
  • request that promotional communications cease.

Requests are submitted via the e-mail address: info@fondacijatamaragrujic.org, in a manner that allows the identification of the person submitting the request.

Right to Lodge a Complaint with the Supervisory Authority

In addition to a complaint submitted to the Foundation, a complaint regarding the processing of personal data may also be submitted to the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, Republic of Serbia, e-mail: office@poverenik.rs, telephone: +381 11 3408 900.

Data Retention

Data is retained for as long as necessary to achieve the purpose for which it was collected, except where a longer retention period is prescribed by law (for example, by accounting and financial regulations).

Changes to the Privacy Policy

The „TAMARA GRUJIĆ“ Foundation reserves the right to amend this Privacy Policy at any time in order to comply with legal regulations, technical changes or service improvements. All changes will be published on the site fondacijatamaragrujic.org.

Contact

For any questions regarding privacy protection and the processing of personal data, you may contact us via the e-mail address: info@fondacijatamaragrujic.org.

Currency Conversion Statement

All payments will be effected in the local currency of the Republic of Serbia — dinar (RSD). For the informational display of prices in other currencies, the middle exchange rate of the National Bank of Serbia is used. The amount charged to the user’s payment card will be expressed in the user’s local currency through conversion at the exchange rate used by card associations. As a result of this conversion, there is a possibility of a slight difference from the original amount stated on the site.

Last updated: July 2026.