This policy explains which personal data we process on the arttremafest.rs website, when selling tickets, in applications to take part in the festival and during the festival, why we process it, how long we keep it and how you can exercise your rights. The Law on Personal Data Protection (“Official Gazette of the RS”, No. 87/2018) applies.
1. Who processes the data
The data controller is Gradsko pozorište Ruma (Ruma City Theatre), citizens’ association, Veljka Dugoševića 102, 22400 Ruma, Tax ID (PIB) 101917670, Registration No. 08582734, organiser of the Art Trema Fest festival.
For all questions about personal data: info@arttremafest.rs · +381 22 473 953
2. What data we process and why
Buying tickets
- Data: ime i prezime, adresa e-pošte, telefon (nije obavezan), korisnički nalog (korisničko ime, adresa e-pošte i lozinka, koja se čuva samo u šifrovanom obliku), podaci o porudžbini (broj, ulaznice, iznos, način i vreme plaćanja), kodovi ulaznica i vreme ulaska na festival.
- Purpose: prodaja i slanje ulaznica, trajno dostupne ulaznice u korisničkom nalogu (dokaz kupovine i isporuke), provera ulaznica na ulazu, obaveštenja o izmenama programa, povraćaj novca i rešavanje reklamacija.
- Legal basis: performance of the ticket purchase contract; for receipts and accounting records – legal obligation.
- Ime, e-pošta i korisnički nalog neophodni su za kupovinu na sajtu: ulaznice isporučujemo u nalog i na e-poštu.
Applications to take part in the festival
- Data: details of the contact person (name, position, email, phone), names of the creative team and cast members, photos, recordings and other material sent by the applicant.
- Purpose: programme selection, communication with the applicant and organisation of the visit.
- Legal basis: steps taken at the applicant’s request before concluding a participation agreement, and consent given in the application. For photos and descriptions used to promote the festival – consent given in the application, which may be withdrawn.
Nalozi učesnika i saradnika festivala
- Data: ime i prezime, e-pošta, uloga (učesnik, biletarnica, provera ulaznica, urednik) i portretna fotografija koju sami otpremate u Moj nalog → Detalji naloga.
- Purpose of the photo: izrada propusnica i akreditacija za festival i provera identiteta na ulazu; za učesnike i prikaz u arhivi festivala uz njihovo ime (stranica osobe), u skladu sa odeljkom 5. Za učesnike i osoblje fotografija je obavezna, jer bez nje ne možemo da izdamo propusnicu.
- Obaveštenja: vesti namenjene učesnicima ili osoblju prikazujemo u nalogu i šaljemo na e-poštu naloga. Ta obaveštenja su deo organizacije gostovanja ili rada na festivalu, nisu reklamne poruke.
- Legal basis: izvršenje ugovora o učešću ili angažovanju (član 12. stav 1. tačka 2) ZZPL) i legitimni interes organizatora za bezbednost i organizaciju festivala; za objavu fotografije u arhivi – pristanak, koji se može povući.
- Čuvanje: fotografiju čuvamo dok postoji nalog, a najduže dve godine posle poslednjeg festivala na kom ste učestvovali ili radili, osim fotografije objavljene u arhivi uz vaš pristanak. Kada se nalog obriše, fotografija se automatski briše. Fotografiju možete u svakom trenutku zameniti u svom nalogu.
Correspondence and enquiries
When you write to us, we use your address and the content of your message only to reply and resolve your enquiry (legitimate interest, or performance of the contract where the enquiry concerns a purchased ticket).
Newsletter
Kada se prijavite na novosti, obrađujemo adresu e-pošte, ime (ako ga unesete), izabrane teme i podatke o prijavi i potvrdi (vreme i IP adresa), da bismo vam slali obaveštenja o Art Trema Festu i programu Gradskog pozorišta Ruma. Pravni osnov je vaš pristanak. Prijava je završena tek kada kliknete na link u e-poruci za potvrdu. Servis za slanje beleži da li je poruka otvorena i koji je link kliknut, da bismo znali šta vas zanima. Pristanak možete povući u svakom trenutku: linkom za odjavu u svakoj poruci ili porukom na info@arttremafest.rs.
Website visits
Server beleži tehničke podatke (IP adresa, vreme pristupa, vrsta pregledača) radi bezbednosti i otklanjanja grešaka (legitimni interes). Za statistiku poseta i prodaje ulaznica koristimo Google Analytics 4; kolačiće za analitiku postavljamo samo uz vašu saglasnost (odeljak 8).
3. Payment card data
Once card payment is available, you will enter your card details only on the bank’s secure page. Gradsko pozorište Ruma does not collect, see or store payment card data.
4. Photography and filming at the festival
During the festival we photograph and film performances, side programmes and the atmosphere in the hall and foyer for the festival archive, reporting and promotion (the organiser’s legitimate interest and the public interest in preserving the festival’s cultural heritage). A notice at the entrance informs visitors of this. We do not publish close-ups of audience members without consent. If you recognise yourself in a published photo and would like it removed, write to info@arttremafest.rs.
5. Festival archive
The website contains a public archive of the festival since 1998: performances, companies, authors, performers, juries and awards, based on the festival’s programmes and catalogues. We publish the names and roles in publicly staged performances for archival and historical purposes (legitimate interest and public interest). If you notice an inaccuracy or object to a publication, write to us and we will correct it or consider removing it.
6. Who receives the data
- pružalac usluge hostinga i e-pošte SuperHosting d.o.o. Beograd, na čijim serverima u Republici Srbiji radi sajt (obrađivač podataka po ugovoru);
- the bank, to execute and refund payments, and – once introduced – the card payment processor;
- the accounting service and the electronic fiscalisation service provider, to the extent necessary for receipts;
- Google, for Google Analytics (section 8);
- Intuit Inc. (servis Mailchimp), SAD, za slanje novosti (obrađivač podataka). Adresa e-pošte, ime i izabrane teme prenose se u SAD uz vaš izričit pristanak dat pri prijavi;
- the competent authorities, where required by law.
We do not sell data or pass it on to third parties for marketing.
Podaci sa sajta i iz e-pošte festivala čuvaju se na serverima u Republici Srbiji. Podatke ne prenosimo u druge države, osim kada to izričito navedemo u ovoj politici, i tada samo uz mere zaštite propisane Zakonom o zaštiti podataka o ličnosti.
7. How long we keep data
- orders and receipts – as long as accounting and tax regulations require;
- korisnički nalog – dok ga ne obrišete ili ne zatražite brisanje; nalog u kome nije bilo kupovine tri godine brišemo (porudžbine i računi ostaju koliko nalažu propisi);
- ticket codes and entry records – up to 12 months after the end of the festival;
- complaints – two years, as required by the Consumer Protection Law;
- applications to take part – two years from the application deadline; data on selected performances becomes part of the festival archive;
- correspondence – as long as needed to resolve the enquiry, and no longer than two years;
- prijava na novosti – dok se ne odjavite; posle odjave adresa ostaje samo na spisku odjavljenih, da vam više ne bismo slali poruke;
- server technical logs – as long as the hosting provider keeps them, for security.
8. Cookies and browser storage
Sajt koristi kolačiće i memoriju pregledača koji su neophodni za rad sajta i za uslugu koju ste sami zatražili (korpa, kupovina, prijava); za njih zakon ne traži saglasnost. Za statistiku poseta i prodaje ulaznica koristimo Google Analytics 4. Bez vaše saglasnosti Google Analytics ne postavlja kolačiće i ne prepoznaje vas između poseta, već šalje samo anonimne signale o učitanoj stranici, na osnovu kojih Google procenjuje broj poseta (legitimni interes: osnovna statistika). Kolačiće za analitiku postavljamo tek kada pristanete u baneru pri prvoj poseti. Odbijanje je jednako lako kao prihvatanje, a izbor možete promeniti ili povući bilo kada preko veze Podešavanja kolačića at the bottom of every page.
| Name | Purpose | Duration |
|---|---|---|
wp_woocommerce_session_*, woocommerce_items_in_cart, woocommerce_cart_hash | cart and ticket purchase | up to 2 days |
atf_korpa | number of tickets in the cart, for the cart icon in the header | up to 2 days |
rstr_script, rstr_test_* | displaying the site in Latin script | up to one year / until the end of the visit |
wordpress_*, wordpress_logged_in_* | staff sign-in (box office, entrance control, administration); visitors do not receive them | until the end of the visit or 14 days |
memorija pregledača: nacrt prijave | čuva nacrt formulara za prijavu na vašem uređaju dok ga ne pošaljete | until the application is sent |
memorija pregledača: atf_zavesa | da se zavesa na početnoj strani ne prikazuje ponovo tokom iste posete | do zatvaranja pregledača |
atf_saglasnost | pamti vaš izbor u baneru za kolačiće | 6 months |
_ga, _ga_ZNE8N86VLH | Google Analytics 4: razlikovanje posetilaca i poseta – samo uz vašu saglasnost | up to 2 years |
Kolačiće možete obrisati ili blokirati u podešavanjima pregledača; bez neophodnih kolačića korpa i kupovina na sajtu neće raditi.
Mape. Mapa Rume na sajtu (OpenStreetMap) učitava se tek kada kliknete „Prikaži mapu“; tada vaš pregledač preuzima delove mape sa servera OpenStreetMap Fondacije (Velika Britanija), kojima šalje IP adresu. Veze „Navigacija“ i „Ruta u Google mapama“ otvaraju Google mape tek na vaš klik. Pre toga sajt ne učitava sadržaj ovih servisa.
Google Analytics. Uslugu pruža Google Ireland Limited, a podatke obrađuje i Google LLC (SAD), kao naš obrađivač. Google Analytics 4 ne čuva IP adresu; isključili smo Google signale i deljenje podataka za oglašavanje. Podaci (pregledane stranice, uređaj, približna lokacija na nivou grada, kupovine bez imena i e-pošte) čuvaju se 14 meseci. Podaci se mogu preneti u SAD, gde zaštita podataka nije izjednačena sa zaštitom u Srbiji. Podatke vezane za kolačiće, kojima se prepoznaje vaš uređaj, šaljemo samo uz vašu izričitu saglasnost (član 69. Zakona o zaštiti podataka o ličnosti).
9. Security
The website uses an encrypted connection (HTTPS). Data is accessed only by the organiser’s authorised staff, to the extent necessary for their work. In the event of a data breach that may put your rights at risk, we will notify the Commissioner and you, in accordance with the law.
10. Your rights
You have the right to request access to your data, its correction or erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. You may withdraw your consent at any time; withdrawal does not affect processing carried out before it. Send your request to info@arttremafest.rs, and we will reply within 30 days at the latest.
If you believe your rights have been violated, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, tel. +381 11 3408 910, poverenik.rs.
11. Changes to this policy
We update this policy when the way we process data or the regulations change. The current version is always published on this page.
Verzija 1.7 · 15. oktobar 2026.