Semberija.app follows the principles of the General Data Protection Regulation (GDPR) in its handling of personal data.
GDPR Principles
Our data processing practices are guided by the following GDPR principles:
- Lawfulness, fairness, and transparency — Personal data is processed lawfully, fairly, and in a transparent manner.
- Purpose limitation — Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
- Data minimization — Personal data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
- Accuracy — Personal data is accurate and, where necessary, kept up to date.
- Storage limitation — Personal data is kept in a form which permits identification of data subjects for no longer than is necessary.
- Integrity and confidentiality — Personal data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
Your Rights Under GDPR
Users located in the European Union have the following rights regarding their personal data:
- Right of access — You have the right to request a copy of the personal data we hold about you.
- Right to rectification — You have the right to request correction of inaccurate or incomplete personal data.
- Right to erasure — You have the right to request the deletion of your personal data under certain circumstances.
- Right to restriction of processing — You have the right to request that we restrict the processing of your personal data in certain situations.
- Right to data portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object — You have the right to object to the processing of your personal data in certain circumstances.
Lawful Basis for Processing
We process personal data on the following lawful bases:
- Consent provided by the user
- Performance of a contract or steps taken prior to entering into a contract
- Compliance with a legal obligation
- Legitimate interests pursued by the platform
Data Transfers
Where personal data is transferred outside of the European Economic Area, we ensure that appropriate safeguards are in place to protect the data in accordance with GDPR requirements.
Submitting a GDPR Request
All GDPR related requests can be sent to:
We will respond to all legitimate requests within 30 days. In some cases, particularly for complex requests, we may take up to two additional months.