Information about processing personal data for people associated with our corporate Clients or Suppliers

Fulfilling the obligations according to the Article 21 paragraph 1 of Law on Personal Data protection of Montenegro ("Official gazette of Montenegro", no. 79/08, 70/09, 44/12, 22/17, hereinafter be referred to as “LPDP”) the data controller informs that:

  1. PricewaterhouseCoopers d.o.o. Podgorica, Bulevar Džordža Vašingtona 98, Podgorica, TIN: 02656337 („PwC”, “we”) will be the controller of your personal data.

  2. If you have any questions or complaints regarding your personal data being processed by PwC, and/or the rights you possess, please contact us via email: me_privacy@pwc.com;

  3. PwC processes your personal data for the following purposes and on the following legal basis:

A legal basis A purpose of the processing

Article 10 paragraph 2 point 3) of the LPDP – the performance of a contract 

or to take steps at the request of the data subject prior to entering into a contract

 

Establishing cooperation with a corporate Client or Supplier which is not a natural person
Applies only for Clients’ or Suppliers’ representatives

Article 10 paragraph 2 point 1) of the LPDP - compliance with a legal obligation to which PwC is subject such as:

  • Article 4 and Article 6 of the Law on Combating Money Laundering and the Financing of Terrorism;

  • Law on Personal Income Tax

  • Relevant legal provision in a given scope of services that require professional secrecy.

 
  • Using financial security measures with regard to Clients and Beneficial Owners - to the extent that a PwC entity is an obliged institution;

  • Fulfilling PwC's tax obligations;

  • Keeping professional secrecy.

Article 10 paragraph 2 point 5) of the LPDP – lawful interests pursued by the PwC
 
  • Enabling the provision of professional services to clients - Applies only to people whom the Client has indicated in the contract as contact persons 

  • Complying with any regulations of a professional body of which PwC is a member;

  • Exercising legal claims in particular by documenting completed or received services.

Article 10 paragraph 1 of the LPDP - consent Direct marketing of PwC’s products and services, in particular offering our services, presenting current industry information, inviting to events organized by PwC and informing about PwC and our range of  services;

4. Your personal data will not be disclosed to third parties except the following recipients:

  • other PwC global network member firms (each of which is a separate independent legal entity). For details of our member firm locations, please visit the website. We may share personal data with other PwC member firms where necessary for administrative purposes and lawful interests pursued by the PwC referred to in section 3;

  • service providers that aren’t members of the PwC network (“third party service providers”) to process on PwC’s behalf. Third party service providers may include providers of IT services, including identity management, website hosting, marketing automation and management, CRM, data analysis, data back-up, security and storage services in so far as it refers to the business relation with PwC;

  • governmental or regulatory authorities, courts and law enforcement authorities or agencies as required by and/or in accordance with applicable law or regulation.

5. Your personal data may be transferred to countries outside Montenegro - third countries, based on:

  • Article 42 paragraph 1, point 6) of the LPDP - transfer to the EU member countries, countries of European Economic Area and/or countries listed by the EU as the countries with an adequate level of protection of personal data;

  • Article 42 paragraph 1, point 8) of the LPDP - standard data protection clauses adopted by the European Commission.

 6. Your personal data will be retained until:

 

  • the end of cooperation with PwC;

  • the withdrawal of a consent - applies only for data subjects who decided to give the consent for direct marketing of PwC’s products and services;

After that, personal data might be stored only for the period indicated by statutory provisions of law or as long as you or us may pursue legal claims towards each other.

7. In relation to processing your personal data you have the following rights: 

  • right to access, to rectification (updating), to erasure, to restriction of processing and to object;

  • to withdraw a consent, it is possible by sending an email
    me_privacy@pwc.com. Withdrawal of the consent does not affect the legality of processing based on consent prior to its withdrawal;

  • to lodge a request for protection of rights and complaint with a data protection authority (Agency for Protection of Personal Data and Free Access to the information).

 

8. The provision of personal data is:

  • Voluntary - in the scope of processing purposes pursued within the consent - for direct marketing of PwC’s products and services;

  • Voluntary, but necessary in order to establish and perform cooperation with PwC - in the scope of processing purposes pursued within the lawful interests of the data controller and the performance of the contract;

  • Mandatory - in the scope of processing purposes pursued within the legal obligation.

9. The represented entity (Client or Supplier) is a source of your personal data.

10. PwC processes, as a standard, the following categories of personal data: name, surname, employer’s name, position and business contact details (such as mobile number and email address). In some cases, the scope of processing may be wider (e.g. if PwC has to comply with anti-money laundering provisions or by providing tax advisory services). Then the data subjects are informed about this in separate information about the processing of personal data.