Privacy Policy

1. Who is responsible for your data

The data controller is HUB201, operator of the Cybersecurity Alliance initiative, Belgrade, Serbia. For any question related to personal data, including requests to exercise your rights, contact us at info@hub-201.com. If we appoint a data protection contact person, their details will be published here.

2. Data we collect

We only collect data you choose to send us, plus a minimum of technical data needed to keep the forms secure. Specifically:

• Membership application: full name, organization, role or position, email address, phone number if you provide it, membership category of interest and your message.
• Newsletter and announcements: email address, organization (optional), preferred language and your consent record.
• Activity proposal: your name, contact email, organization and the description of the proposed activity.
• Anti-abuse and security data: time of submission, form session token, result of the anti-bot check and, at the infrastructure level, IP address and browser user agent recorded in server logs.
• Preferences stored on your device: your chosen language and your cookie choice.

We do not collect special categories of data (for example health, political or biometric data) and we ask you not to send them through these forms. We do not knowingly collect data from children under 16.

3. Why we use your data and on what legal basis

We process personal data only for clearly defined purposes:

• To review and answer membership applications - legal basis: steps taken at your request before entering into a membership arrangement, and our legitimate interest in building the Alliance.
• To send news, announcements and invitations to Alliance activities - legal basis: your consent, which you may withdraw at any time.
• To evaluate proposed activities and organise events - legal basis: our legitimate interest in running the Alliance programme, and your consent where you registered for an event.
• To protect the website and forms from spam, bots and mass submissions - legal basis: our legitimate interest in the security and availability of the service.
• To comply with legal obligations, for example accounting or responding to lawful requests from authorities - legal basis: compliance with a legal obligation.

We never sell, rent or trade personal data, and we do not use it for automated decision-making or profiling.

4. How long we keep it

We keep data no longer than necessary for the purpose it was collected for:

• Membership applications: for the duration of the membership relationship and up to 2 years after the last contact if membership does not proceed.
• Newsletter subscriptions: until you unsubscribe or withdraw consent, after which we keep a minimal record of the withdrawal so that we do not contact you again.
• Activity proposals: up to 2 years after the activity is delivered or declined.
• Security and server logs: normally up to 12 months.

When a retention period expires, data is deleted or irreversibly anonymised.

5. Who we share data with

Your data is visible to the Alliance coordination team at HUB201 and to service providers that process it on our behalf under a written agreement:

• Website hosting and application infrastructure.
• Database and file storage used to keep form submissions and news content.
• Email delivery services used to send announcements and replies.

We disclose data to public authorities only where we are legally obliged to do so. We do not share your data with advertisers.

6. International transfers

Some of our providers operate servers outside Serbia and the European Economic Area. Where data is transferred abroad, we rely on providers that offer appropriate safeguards, such as standard contractual clauses or a country recognised as providing an adequate level of protection.

7. How we protect your data

The website is served over HTTPS with strict security headers. Access to submitted data is restricted to authorised administrators, protected by authentication and database level access rules, and administrative changes to published content are recorded in an audit log. Forms are protected by rate limiting and anti-bot checks. No system is perfectly secure, but we review these measures regularly.

8. Cookies and local storage

We use a minimum of storage on your device. Essential entries remember your language and your cookie choice so the banner does not reappear on every visit; these are necessary for the site to work as you expect. Optional analytics storage is only used if you accept it in the cookie banner, and you can change or withdraw that choice at any time by clearing the site data in your browser and choosing again.

9. Your rights

In relation to your personal data you may:

• Request access to the data we hold about you and a copy of it.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete data, where there is no overriding legal ground to keep it.
• Ask us to restrict or object to processing based on legitimate interest.
• Request portability of data you provided to us.
• Withdraw consent at any time, for example by unsubscribing from announcements.

Write to info@hub-201.com and we will reply within 30 days. If you believe your data is handled unlawfully, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia, or with the supervisory authority in your country of residence.

10. Changes to this policy

We may update this policy when our activities, forms or providers change. The date at the top of the page always shows the latest version, and material changes will be announced on the website.

11. Contact

Cybersecurity Alliance by HUB201, Belgrade, Serbia. Email: info@hub-201.com