Access or protect personal data (1)
- Poverenik — Personal data protectionLocal body or procedure
Serbia: complain to the Commissioner for Information of Public Importance and Personal Data Protection about unlawful processing of your personal data or an unresolved data-rights request. Identify the privacy issue and the remedy you seek, such as access, correction, erasure or restriction.
Article 3 covers controllers/processors based in Serbia acting in the context of Serbian activities, even if processing occurs abroad. For a foreign provider, the person must have domicile or residence in Serbia and the processing must concern offers of goods/services to them in Serbia or monitoring their activities there. Citizenship or selecting Serbia alone is insufficient. Personal/household processing is excluded; the Commissioner does not supervise courts acting judicially. A platform ban alone is not a privacy complaint. No account restoration or compensation is promised.
What to do
- For access, correction, erasure or other rights, first make a specific request to the controller and keep delivery evidence. Complain after refusal, an inadequate reply or expiry of the applicable response period. Article 82 also permits complaints about unlawful processing itself; do not turn the prior-request sequence into a universal condition for reporting misuse. Use the official complaint form: give your full name and postal address, the controller’s name/address, the affected right, dated facts and requested action; date and sign it. Phone and email are optional on the form. Attach the previous request and delivery proof, any refusal/reply, relevant decisions and evidence. A representative needs proof of authority or a power of attorney. The form does not demand a routine ID-document copy. Include only necessary personal data.
- Post or hand-deliver the signed complaint and evidence to Poverenik, Bulevar kralja Aleksandra 15, Beograd 11120, Serbia. The current contact page lists personal filing at 11:00–13:00. Electronic submissions are accepted at office@poverenik.rs; ask about the required signature format before relying on a scan or plain email. The site also lists eUprava, but its login/access and filing flow were not tested. Keep a receipt. Public instructions and the form were read; no submission or delivery was tested.
- Save the complaint, delivery proof, case number and all notices; answer requests for missing material. The Commissioner must report progress and results and can order compliance, correction, erasure or processing restrictions under articles 78–79. These powers do not make it a general account-appeal body. Compensation is a separate claim under article 86. For a decision, article 83 gives 30 days from receipt to start administrative court proceedings; seek advice promptly. If the Commissioner takes no action on the complaint or does not provide the information required by article 82(2) within 60 days after filing, article 83 permits administrative court proceedings. This is a review trigger, not a promised 60-day final decision or a filing cutoff. Follow any correction notice and its actual deadline.
Use this route for your personal-data rights only where Serbian law applies. For a refused or unanswered rights request, identify the controller and attach your request and delivery proof. A platform ban alone is not enough; start with the privacy issue and the remedy you need.
Read the source