Privacy policy

1. Data controller

The controller of your personal data is the association World Police Counter-Terrorism Organisation – C.T.O. (Svetska policijska protivteroristička organizacija – C.T.O.). We process data in accordance with the Serbian Law on Personal Data Protection (Official Gazette of the Republic of Serbia, No. 87/2018).

Name	Svetska policijska protivteroristička organizacija – C.T.O.
Registered office	Čarlija Čaplina 39, 11000 Belgrade, Serbia
Registration number	28259174
Tax ID (PIB)	110863030
Represented by	Dragan Pantić, President
Privacy contact	office@worldpolicecto.com · +381 60 741 9292

2. What data we collect and why

Membership application. First and last name, e-mail, city and country, street and house number, occupation, phone and motivation letter. We use this data to keep the membership register, issue the membership card and contact you. The legal basis is your consent, which you give by ticking the box before sending the application.

Contact form. Full name, e-mail, phone (optional), subject and message. We use this data only to reply to your message. The legal basis is your consent.

Website visits (statistics). Only if you accept analytics cookies, Google Analytics records data about your visit, without storing your IP address: which pages you opened, approximate location (city, country), device and browser type. We use this data to understand how useful the website is and to improve it. If you decline cookies, Google Analytics is not loaded.

Website security. To protect the website from unauthorised access, the IP addresses of failed login attempts to the website administration are logged temporarily. The legal basis is our legitimate interest in protecting the website.

We do not collect special categories of data, make automated decisions or profile visitors.

3. How long we keep data

Data from the membership application and the contact form is not stored in the website database. It is sent by e-mail to the organisation’s address, where only authorised C.T.O. staff can access it.

• Membership application: for the duration of the membership, and after it ends only as long as the law requires.
• Contact form messages: as long as needed to reply and resolve the enquiry, and no longer than one year.
• Google Analytics: according to the Google Analytics account settings, no longer than 14 months.

4. Who else has access to data

We do not sell data or share it with third parties for marketing. Access is limited to service providers the website cannot run without:

• Hosting provider (Unlimited.rs, Serbia), whose servers host the website and the organisation’s e-mail.
• Google (Google Analytics), only with your consent. Google may process data outside Serbia, with the safeguards Google itself provides.
• Google Maps: the map on the Contact page loads only when you click “Show map”. Until then Google receives no data.
• Seobility: the SEO score badge in the website footer loads from Seobility’s server (Germany), which sees your IP address, as with opening any image on the internet.

5. Cookies and local storage

On your first visit the website asks whether you accept analytics cookies. You can change your choice at any time through the “Cookie settings” link in the website footer.

cto-consent	Remembers your cookie choice (necessary). Kept in your browser for 12 months.
cto-theme	Remembers the light or dark theme you chose (necessary). Kept in your browser.
_ga, _ga_ZDV252K4CT	Google Analytics, visit statistics. Set only if you accept. Last up to 2 years.

6. Your rights

At any time you have the right to:

• request access to the data we process about you and a copy of it;
• request correction of inaccurate or completion of incomplete data;
• request erasure of your data or restriction of processing;
• request transfer of your data to another controller;
• object to processing based on legitimate interest;
• withdraw your consent, without affecting the lawfulness of processing before the withdrawal.

Send your request to office@worldpolicecto.com. We will reply within 30 days at the latest. If you believe your data is processed unlawfully, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, Belgrade, Serbia (www.poverenik.rs).

7. Data protection

The website runs exclusively over an encrypted HTTPS connection. Access to the website administration is protected against password guessing, and only authorised staff of the organisation can access the data.

8. Changes to this policy

We may update this privacy policy from time to time. The current version is always published on this page, with the date of the last change.

Last updated: 28 October 2026