Fulfilling the obligations according to the Article 20 paragraph 1 of Law on Personal Data protection of Montenegro ("Official gazette of Montenegro", no. 79/08, 70/09, 44/12, 22/17, hereinafter be referred to as “LPDP”) the data controller informs that:
1. PricewaterhouseCoopers d.o.o. Podgorica, Bulevar Džordža Vašingtona 98, Podgorica, TIN: 02656337 („PwC”, “we”) will be the controller of your personal data (hereinafter: “controller”).
2. If you have any questions or complaints regarding your personal data being processed by PwC, and/or the rights you possess, please contact us via e-mail: firstname.lastname@example.org.
3. PwC processes your personal data for the following purposes and based on the following legal basis:
|A legal basis||A purpose of the processing|
Article 10 paragraph 2 point 3) of the LPDP - performance of a contract to which the data subject is a party or taking steps at the request of the data subject prior to entering into a contract;
Article 10 paragraph 1 of the LPDP – consent, applicable if you are signed up for PwC’s training/course by your employer under a corporate contract
|Article 10 paragraph 1 of the LPDP - consent||Direct marketing of PwC’s products and services (sending the training/course service offers in accordance with the clients' needs, our similar services you might be interested in, sending newsletters and informing about events organized by PwC) - applies only for data subjects who gave explicit consent for receiving marketing communication via email or phone.|
4. Your personal data will not be disclosed to third parties except the following recipients:
other PwC global network member firms (each of which is a separate independent legal entity). For details of our member firm locations, please visit the website. We may share personal data with other PwC member firms where necessary to provide professional services to you (e.g. when providing services involving advice from PwC member firms in different territories).
service providers that aren’t members of the PwC network (“third party service providers”) to process on PwC’s behalf. Third party service providers may include providers of IT services, including identity management, website hosting, marketing automation and management, CRM, data analysis, data back-up, security and storage services in so far as it refers to the business relation with PwC;
third parties (e.g. lectures) that otherwise assist us in providing services or information;
auditors and other professional advisors;
governmental or regulatory authorities, courts and law enforcement authorities or agencies as required by and/or in accordance with applicable law or regulation.
5. Your personal data may be transferred to countries outside Montenegro - third countries, based on:
Article 42 paragraph 1, point 6) of the LPDP - transfer to the EU member countries, countries of European Economic Area and/or countries listed by the EU as the countries with an adequate level of protection of personal data;
Article 42 paragraph 1, point 8) of the LPDP - based on the contract which includes standard data protection clauses adopted by the EU, concluded with the processor from a non-EU country.
6. Your personal data will be retained until:
fulfilment of the purpose for which we are permitted to use it - for at least the term of contract we signed with you or your employer with us and subsequently as long as you or us may pursue legal claims concerning each other.
the resignation from receiving the training/course service offers, similar services, newsletters or marketing communication - applies only for data subjects who gave explicit consent for receiving marketing communication via email or phone.
7. In accordance with processing your personal data you have the following rights:
right to access, to rectification (updating), to erasure, to restriction of processing and to object;
to withdraw a consent, it is possible by sending an email to
email@example.com. Withdrawal of the consent does not affect the legality of processing based on consent prior to its withdrawal;
to lodge a request for protection of rights and complaint with a data protection authority (Agency for Protection of Personal Data and Free Access to the information).
8. The provision of personal data is:
Voluntary - in the scope of processing purposes for the purpose of direct marketing of PwC’s products and services;
Voluntary, in the scope of processing purposes for the purpose of training/course organization and performing, but necessary to participate in the training/course.