Privacy Policy

Last updated on: 17 June 2026

At Kredium.org (“we,” “our,” “us”), we are committed to safeguarding your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit or interact with our Website.This policy applies only to www.kredium.org, which serves as an informational gateway to Kredium’s global presence. For services provided through our local platforms (e.g., kredium.co, kredium.ae, kredium.rs), please refer to the Privacy Policies published on those respective websites.

‍1. Information We Collect

‍We may collect and process the following types of information:

- Personal Information – including your name, email address, and contact details when you reach out to us or submit a CV via the Careers page.

- Usage Information – such as IP address, browser type, device characteristics, referral URLs, and pages visited.

- Cookies and Tracking Data – including user behavior collected via analytics tools and session tracking technologies.

2. How We Use Your Information

‍We use your information for the following purposes:

- To operate, maintain, and improve the Website

- To respond to your inquiries or contact requests
‍
- To analyze visitor behavior and improve user experience
‍
- To ensure Website functionality and security
‍
- To fulfill legal and regulatory obligations

3. Cookies and Analytics

‍We use cookies and similar tracking technologies to enhance performance, understand user interactions, and optimize the Website.

Specifically, we use:

- Google Analytics – to collect anonymized data such as user behavior, session duration, referral sources, and device/browser types.
‍
- Microsoft Clarity – to track anonymized session recordings, click paths, scroll depth, and heatmaps for usability analysis.

These tools may collect:IP address (where applicable, anonymized)

- Browser and device metadata
‍
- Pages visited and interaction behavior

- Referrer URLs and time on site

Cookies can be managed or disabled through your browser settings. By using this Website, you consent to the placement of these cookies and the use of analytics tools. For more details:

- Google’s Privacy Policy
‍
- Microsoft Clarity’s Privacy Statement

4. CV Submissions and Recruitment Data

‍If you submit your CV or personal details through our Careers page, we process this data exclusively for recruitment-related purposes, such as:

- Reviewing your qualifications

- Contacting you for current or future opportunities

- Retaining your application for a limited period (unless deletion is requested)

By submitting your CV, you acknowledge and agree to this processing. Your data will not be shared with any external parties outside the Kredium group unless required by law.

‍5. Data Sharing

‍We do not sell, rent, or trade your personal information. We may share data only with:

- Service providers who support website functionality and analytics
‍
- Regulatory or legal authorities, if required by applicable law

- Kredium affiliates or subsidiaries, for internal and administrative purposes

6. Data Retention

‍We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal requirements. CV and recruitment-related data may be kept for a limited time unless deletion is requested by the applicant.

‍7. International Data Transfers

‍As a globally operated organization, your personal information may be transferred to, and stored in, countries outside your country of residence. We implement appropriate safeguards to ensure adequate protection of your data in line with applicable laws.

‍8. Your Data Protection Rights

‍Depending on your jurisdiction, you may have the right to:

- Request access to or correction of your personal data

- Request deletion of your data ("right to be forgotten")

- Object to or restrict certain processing activities

- Withdraw consent (where processing is based on consent)

- File a complaint with a supervisory authority

To exercise any of these rights, contact us at: info@kredium.org

9. Children’s Privacy

‍This Website is not intended for children under the age of 18. We do not knowingly collect or process personal data from minors.

‍10. Third-Party Links

‍Our Website may contain links to external websites. We are not responsible for the privacy practices, security, or content of these third-party sites. We encourage you to review their policies before submitting any information.

‍11. Updates to This Policy

‍We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable laws. The most recent version will always be available on this page, with an updated “Effective Date.” Continued use of the Website constitutes acceptance of the revised policy.

‍12. Contact Us

‍If you have any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

‍Kredium
Email: info@kredium.org
Website: https://www.kredium.org

Introduction and Scope

1.1.

Kredium Technologies LLC (“Kredium”, “we”, “our” or “us”) is committed to protecting personal data. This Privacy Policy explains how we collect, use, disclose and safeguard personal data in connection with: (a) our websites, including kredium.io and related local sites; and (b) the Kredium application and platform, including the CRM Module and the Interactive Map Module, accessed through the web and through mobile applications distributed via the Apple App Store and Google Play (together, the “Services”).

1.2.

This Privacy Policy is incorporated by reference into the Kredium Terms of Service. Where a separate data processing agreement (DPA) is concluded with a business Client, that DPA governs Kredium’s processing of personal data on the Client’s behalf and prevails in case of conflict on data-protection matters.

Controller, Roles and Contact

2.1.

Controller. This Privacy Policy is issued by Kredium Technologies LLC, Sharjah Media City Free Zone, Sharjah, United Arab Emirates, licence number 2217863 (“Kredium”). For personal data processed in respect of website visitors, prospective clients, recruitment candidates and Account users, Kredium is the controller, except where a local Kredium entity is the controller for the clients it serves. For Clients served by Kredium’s Serbian entity, the controller is KREDIUM DOO Beograd, registered seat: Gavrila Principa 43, 11000 Belgrade-Savski Venac, Republic of Serbia; registration number (MB) 21586811; tax identification number (PIB) 111989076.

2.2.

Processor. For personal data that a business Client uploads into or processes through the platform (“Client Data”), the Client is the controller and Kredium acts as processor, processing such data only on the Client’s documented instructions and as described in the applicable DPA. Individuals whose data is held in a Client’s account should direct privacy requests to that Client.

2.3.

Contact. Privacy enquiries and requests may be sent to info@kredium.io.

Personal Data We Collect

3.1.

Website visitors. Contact details you provide (such as name, email address and message), and, if you apply through our Careers page, your CV and related information; usage information such as IP address, browser type, device characteristics, referral URLs and pages visited; and cookies and similar tracking data.

3.2.

Account users (CRM and Interactive Map). Registration and profile data (name, business email, telephone, role), Credentials, and configuration and preferences; communications with support; and records of activity within the Services.

3.3.

Mobile application data. When you use a Kredium mobile application, we may process device identifiers, IP address, operating-system and app-version information, in-app interactions, diagnostic and crash data, and, where you enable them, permissions you grant to the application. The application requests access to device storage solely to download and preview files attached through the Services; it does not request access to the camera, contacts or your location, and does not collect precise location data. Calls initiated from the application are placed through your device’s native phone application.

3.4.

Client Data (processor capacity). On behalf of business Clients, the platform processes personal data that the Client enters about its own contacts, such as identification and contact details of leads and customers, communication and activity history, interest and sales-status information, and demographic data the Client chooses to record. Kredium does not determine the purposes of this processing.

3.5.

Authentication via Google. If a User chooses to sign in using Google OAuth, we receive basic authentication information from Google (such as the account email and a unique identifier) to authenticate the User. Google sign-in is optional; Users may instead use standard Kredium credentials (email and password).

How We Use Personal Data and Legal Bases

We process personal data for the following purposes and on the following legal bases under the Serbian Law on Personal Data Protection and, where applicable, the EU General Data Protection Regulation (GDPR) and, for processing subject to the laws of the United Arab Emirates, the UAE Federal Decree- Law No. 45 of 2021 on the Protection of Personal Data:

to provide, operate, maintain and secure the Services, and to administer Accounts and authenticate Users - performance of a contract;

to respond to enquiries and provide support - performance of a contract or our legitimate interests;

to analyse usage and improve and develop the Services, including aggregated and anonymised analysis - our legitimate interests;

to process recruitment applications - steps prior to entering an employment relationship and our legitimate interests;

to send service and transactional communications - performance of a contract; and, for marketing communications and non-essential cookies, your consent;

to comply with legal, tax and regulatory obligations and to establish, exercise or defend legal claims - legal obligation and legitimate interests.

Cookies and Analytics

5.1.

Our websites use cookies and similar technologies. Strictly necessary cookies are used to operate the site and do not require consent. Analytics and marketing cookies are used only with your consent, which you can manage or withdraw at any time through the cookie settings or your browser.

5.2.

We use Google Analytics and Microsoft Clarity to understand usage through anonymised data such as interactions, session duration, referral sources and device or browser types. You can review the providers’ own privacy statements for further detail.

Sub-processors and Service Providers

6.1.

We engage carefully selected sub-processors to provide the Services. Each is bound by a contract imposing data-protection obligations substantially equivalent to those that apply to us. Our principal platform sub-processors are:

Amazon Web Services (AWS): hosting of the application, database and file storage (services including EC2, RDS and S3), with processing in the European Union.

Mailjet: sending of system and transactional email messages, with processing in the European Union.

KREDIUM DOO Beograd (intra-group): development, hosting and technical operation of the platform, including databases, storage and backups, with processing in the European Union.

Google (Google OAuth): optional authentication of Users who choose to sign in with a Google account.

6.2.

We may update this list as our Services evolve. Where a DPA is concluded with a business Client, we will inform the Client of intended changes to sub-processors and allow a reasonable period to object on legitimate data-protection grounds.

Disclosure of Personal Data

7.1.

We do not sell, rent or trade personal data. We disclose personal data only to: service providers and sub-processors that support the Services; our affiliates for internal and administrative purposes; competent regulatory, judicial or law-enforcement authorities where required by law; and to a successor in connection with a merger, acquisition or sale of assets, subject to appropriate safeguards.

International Transfers

8.1.

Our platform sub-processors process data within the European Union. Where any transfer of personal data outside the Republic of Serbia or the European Economic Area occurs, including in connection with optional Google sign-in and our use of website analytics providers (Google Analytics and Microsoft Clarity), which may involve processing in the United States, we rely on an appropriate legal basis such as an adequacy decision or standard contractual clauses, together with supplementary measures where required. Personal data is shared within the Kredium group, including with our UAE entity Kredium Technologies LLC, which has administrative access to the platform for the purposes of centralised administration, technical support and group-level analytics. In that capacity the UAE entity may access personal data processed through the Services, including data of Clients served by Kredium’s Serbian entity. Such intra-group access, and any associated transfer of personal data to the UAE, is made under appropriate safeguards, such as standard contractual clauses and/or an intra-group data transfer agreement, together with supplementary measures where required.

Data Retention

9.1.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law. Account and Client Data are retained for the duration of the contractual relationship; on termination, the Account and Client Data are deleted within six (6) months, or within one (1) month of a specific written deletion request, except where retention is required by law. Backup copies are retained for at least thirty (30) days. Recruitment data is retained for a limited period unless deletion is requested. Website and analytics data are retained for limited periods consistent with their purpose.

10.

Security

10.1.

We implement appropriate technical and organisational measures proportionate to the risk, including access control and management of user accounts and authorisations; encryption in transit and, where applicable, at rest; regular database backups retained for at least thirty (30) days; logging, access monitoring and security updates; and organisational measures such as confidentiality obligations, internal procedures and controlled access.

11.

Your Rights

Subject to applicable law, you have the right to:

request access to, and a copy of, your personal data;

request rectification of inaccurate or incomplete data;

request erasure of your data (the “right to be forgotten”);

request restriction of, or object to, certain processing, including processing based on legitimate interests and direct marketing;

data portability, where applicable;

withdraw consent at any time, without affecting prior processing; and

lodge a complaint with a supervisory authority.

11.2.

To exercise these rights, contact info@kredium.io. Where the data is held within a business Client’s account, we will refer your request to that Client as controller, or assist the Client in responding.

12.

Children

12.1.

The Services are intended for business use and are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected such data without an appropriate legal basis, we will delete it.

13.

Mobile Application and App Store Disclosures

13.1.

Data safety information. Consistent with this Privacy Policy, we provide data-collection and data-use information in the Apple App Store privacy details and the Google Play Data Safety section for our applications. We do not use personal data collected through the application for third-party advertising and do not sell personal data.

13.2.

Account and data deletion. You may delete your Account directly in the application, ask your organisation’s administrator to delete it, or request deletion at any time by contacting info@kredium.io. Upon deletion, personal data associated with the Account is deleted from our active systems without undue delay; backup copies are overwritten in the regular backup cycle (within thirty (30) days at most), and data is retained longer only where required by law. Business Clients can manage and delete Client Data through the platform’s administrative functions.

13.3.

Permissions. The application requests device permissions only as needed for specific features (for example, storage access to download and preview files attached through the Services). You can manage these permissions through your device settings.

14.

Automated Decision-Making

14.1.

We do not make decisions producing legal or similarly significant effects about individuals based solely on automated processing through the Services.

15.

Changes to this Privacy Policy

15.1.

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The current version is always available on this page with an updated “Last updated” date. Where changes are material, we will provide notice through the Services or by email.

16.

Contact and Complaints

16.1.

For any questions, requests or concerns regarding this Privacy Policy or your personal data, contact:
Issuer: Kredium Technologies LLC, Sharjah Media City Free Zone, Sharjah, United Arab Emirates (email info@kredium.io). For Clients served by Kredium’s Serbian entity: KREDIUM DOO Beograd, Gavrila Principa 43, 11000 Belgrade-Savski Venac, Republic of Serbia. Email: info@kredium.io.

16.2.

If you are in the Republic of Serbia, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik). If you are in the European Economic Area, you may lodge a complaint with your local data protection supervisory authority. If you are in the United Arab Emirates, you may contact the UAE Data Office. If you are in another jurisdiction, you may contact your local data protection authority.

Privacy Policy

Cookie Settings

Cookie preferences

Necessary

Analytics

Marketing