Privacy Policy

HSE Training DOO, Braće Radovanović 17/5, Lamela C, 11000 Belgrade, Serbia (registration number 20952288; VAT number 108205616) is the controller. Privacy questions and requests may be sent to info@hsetraining.rs or made by telephone on +381 61 5335 010.

Depending on your interaction, we process contact and enquiry data; billing and order details; selected course, quantity, price and currency; order and payment status, provider references and timestamps; course-enrolment and delivery records; and proportionate technical and security logs such as IP address, browser, requested URL and time.

Card numbers, card security codes and 3-D Secure authentication credentials are entered on the hosted payment-provider page and are not received or stored by HSE Training.

We use personal data to answer enquiries, take pre-contract steps, create and administer orders, reconcile and refund payments, confirm course enrolment, deliver access information, handle complaints, prevent fraud, secure the service, keep required accounting and transaction records and establish or defend legal claims.

Processing is based, as applicable, on steps requested before a contract, performance of a contract, compliance with legal obligations, proportionate legitimate interests or consent where the law specifically requires it.

Necessary data may be processed by the website and hosting providers, authenticated email provider, WooCommerce order system, Raiffeisen Bank/RaiAccept payment service, professional advisers and the external learning service used to fulfil a paid enrolment. Public authorities may receive data where disclosure is legally required.

Payment-status data is accepted only through the configured provider flow. We do not sell personal data.

Transaction and electronic-delivery evidence is kept for at least 120 days so that payment disputes can be investigated. Order, invoice, tax, complaint and contractual records may be retained longer where accounting, consumer-protection, limitation or other legal rules require it. Records are then deleted, anonymised or securely archived according to the applicable retention requirement.

We apply proportionate access, transport-security, update, backup and logging controls. Essential cookies or similar storage may be used for checkout, cart state, language, security and fraud prevention. Embedded maps and links to external services are governed by the relevant provider privacy terms.

No internet service can guarantee absolute security. Please contact us promptly if you suspect misuse of your data or order.

Subject to applicable law, you may request access, correction, deletion, restriction or portability, object to processing, or withdraw consent without affecting earlier lawful processing. We may verify identity before acting on a request. You may also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection at poverenik.rs.

We update this policy when the website, providers or legal requirements change and publish the effective date here.