Privacy Policy

Right to the protection of personal data and privacy is of great importance to the European Youth Center. This Privacy Policy clearly and transparently explains how we process your personal data through the website mojakartica.rs (“Website”), in accordance with Articles 21, 23, and 24 of the Personal Data Protection Law (“Official Gazette of the Republic of Serbia”, No. 87/2018, “Law”).

1. INFORMATION ABOUT THE DATA CONTROLLER

In accordance with the Law, the Association “European Youth Center,” located at Starine Novaka 1, 11000 Belgrade, Republic of Serbia, registered with the Business Registers Agency of the Republic of Serbia under registration number 17381512, email: info@eoc.rs, phone: +381 11 33 49 877 (“EOC” or “we”), is the data controller for personal data processed on or related to the Website.

2. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA, CATEGORIES OF PERSONAL DATA

2.1. User Registration for Card Activation

If you have an EYCA card, ISIC card, ITIC card, Student Chip Card, and/or Pupil Card (collectively and individually: “Card”), to activate the Card, you need to register your account on the Website. By activating the Card, you gain the ability to use all the Card’s features, such as various discounts and other benefits, as further explained on the Website.

The legal basis for processing your personal data in this specific case is your consent, in accordance with Article 12, paragraph 1, item 1 of the Law.

Providing personal data during the registration of the account on the Website is voluntary. However, if you do not provide all the required personal data necessary for account registration on the Website, you will not be able to register your account, and consequently, you will not be able to activate the Card.

During the account registration, you need to provide the following categories of personal data:

• First and last name
• Date of birth
• Personal Identification Number (JMBG)
• Card serial number
• Card issuance date
• Mobile phone number
• Email address
• Password for your account on the Website
• A photo of the front and back sides of the Card

In accordance with Article 16 of the Law, a minor under the age of 15 cannot validly give consent for the processing of personal data, and this must be done by their parent or legal guardian. If an account is registered to activate the Card for a user under the age of 15, a signed consent statement from the parent or legal guardian must be attached during registration. Without such a statement, account registration will not be possible. The form of the statement, to be completed and signed by the parent or legal guardian of a minor under the age of 15, is available for download on the appropriate page on the Website during account registration.

In this case, EOC processes the personal data of the legal guardian (name and surname, capacity as a guardian of the minor, mobile phone number, date and place of the statement, and signature on the statement) to determine whether consent for processing personal data of the minor under 15 years of age as a Card user has been given by their legal guardian. The legal basis for processing the personal data of the legal guardian is to comply with the obligations of the data controller (Article 12, paragraph 1, item 3 of the Law), as EOC, as the data controller, is obligated to take reasonable measures to establish the existence of the legal guardian’s consent, in accordance with Article 16, paragraph 3 of the Law.

2.2. Notification about Discounts, Benefits, and Other Card Features

When registering your account for card activation, you are required to provide your name, email address, and mobile phone number. In addition, after registering your account, you have the option to update your profile with educational data (institution type, faculty/school name, and location) and address data.

We process your name, email address, and mobile phone number to notify you about discounts, benefits, and other Card features (e.g., your Card’s expiration, membership, etc.). We process educational data to notify you about discounts and benefits related to your educational institution. We process address data to notify you about important issues regarding your Card (e.g., its expiration) in case we cannot contact you via email or mobile phone.

The legal basis for processing your personal data in this specific case is your consent, in accordance with Article 12, paragraph 1, item 1 of the Law.

You have the right to withdraw your consent for receiving notifications about discounts, benefits, and Card features at any time by unsubscribing from the service through which we notify you, and the withdrawal of consent does not affect the legality of processing that was carried out based on your consent prior to the withdrawal.

2.3. Online Issuance and Delivery of the Card

You can request the issuance of the Card through the Website by filling out the application form on the Website and attaching the required documentation, depending on the type of Card you are requesting. EOC processes your personal data for the purposes of:

• Determining whether you meet the requirements for issuing the specific type of Card
• Verifying your identity
• Delivering the issued Card to your address

The legal basis for processing your personal data in this specific case is your consent, in accordance with Article 12, paragraph 1, item 1 of the Law. If you do not provide all the required personal data necessary for the online issuance and delivery of the Card, we will not be able to issue or deliver the Card to you.

In connection with your request for issuing the Card, you need to provide the following categories of personal data:

• First and last name
• Email address
• Type of Card you are requesting
• A scanned ID or another official document with a photo (e.g., passport, driver’s license, etc.)
• Your photo
• Proof of meeting the requirements for issuing the specific type of Card, such as proof of schooling for issuing the ISIC card or proof of employment for issuing the ITIC card, as detailed on the Website
• Payment confirmation for the annual membership fee for issuing the Card

If you select the option for us to send the Card to your address, you will need to provide the following categories of personal data:

• Address details (street, number, postal code, and city)
• Mobile phone number

2.4. Obtaining Travel Insurance Certificate

If you are a user of an activated EYCA card or STUDENT CHIP card, you can request a travel insurance certificate to which you are entitled with either of these two cards. The request is submitted through your user profile on the Website. In this case, EOC processes your personal data to provide you with the travel insurance certificate.

The legal basis for processing your personal data in this specific case is your consent, in accordance with Article 12, paragraph 1, item 1 of the Law. If you do not provide all the required personal data necessary for issuing the travel insurance certificate, we will not be able to provide it.

In connection with your request for the issuance of the travel insurance certificate, you must provide the following categories of personal data:

• First and last name
• EYCA or STUDENT CHIP card number
• Passport number

2.5. Contact Form

The Website offers the option to contact us via a general contact form. EOC processes the personal data you enter through the contact form (name and surname, email address, subject of the message, and message text) to handle your request and respond to your questions.

The legal basis for processing your personal data in this specific case is your consent, in accordance with Article 12, paragraph 1, item 1 of the Law.