01. Scope of this policy
This policy covers website visitors and people who send enquiries, applications or documents through available forms or published contacts. Processing is governed by the personal data protection law of Bosnia and Herzegovina. The GDPR applies where its territorial conditions are met. Other companies and linked websites have their own policies.
02. Website access and security
The server and security systems may process your IP address, request time, requested page, device and browser type and error information to deliver content, maintain security and resolve faults. The basis is the legitimate interest in a reliable and secure website, taking account of your rights.
03. Enquiries, applications and business communication
We process information you provide, such as your name, email, phone number, organisation, subject, message and attachments. Where available, employment, tender, sponsorship, donation and other request forms may ask for additional information such as a CV, qualifications, year of birth or a responsible contact. We use it to handle the request, take steps before entering a contract, meet obligations or act on consent where appropriate. Required fields are marked; without them we may be unable to handle the request. Please avoid sending sensitive information or unnecessary information about other people.
04. Analytics, cookies and external content
Google Analytics is activated only after consent for statistics. Embedded maps and videos, where available, may connect your device to Google Maps, OpenStreetMap, YouTube or Vimeo and transmit your IP address and technical information. These embeds wait for consent for external content. Refusing does not prevent access to the main website content. The Cookie Policy explains how to change your choice. Links to social networks and other websites lead to separate providers and their own policies.
05. Recipients and international processing
Authorised staff access information needed to handle your request. Hosting, maintenance, email and form providers may supply technical support. Requests may be forwarded to the relevant department or company where needed for the subject of your request. Information may be disclosed to authorities where required by law. Selected external services may process information outside Bosnia and Herzegovina or the EEA. See the providers’ policies: Google (policies.google.com/privacy), OpenStreetMap (osmfoundation.org/wiki/Privacy_Policy) and Vimeo (vimeo.com/privacy). Cookie consent does not replace legal requirements for international transfers. You can ask our official contact about specific recipients and applicable safeguards.
06. Retention
Communication and attachments are retained as needed to complete the matter, meet applicable legal obligations or protect legal claims. The period depends on the matter, mandatory periods and any dispute. Employment application retention depends on the recruitment process and the basis for further retention. You may request details of the period applicable to your case. Technical log retention depends on hosting and security settings. Cookie choices are retained for up to 180 days; the Cookie Policy describes individual cookie periods.
07. Your rights
Subject to legal conditions, you may request access, correction, erasure, restriction and portability, and object to processing. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Send your request to the official email or postal address below with enough information to understand it. We may request proportionate identity verification to protect your data. You can complain to the Personal Data Protection Agency of Bosnia and Herzegovina (azlp.ba) and, where the GDPR applies, the relevant EU/EEA supervisory authority.
08. Policy updates
We update this policy when the website, services or applicable rules change. The latest update date appears above. This policy concerns website processing; specific notices for a procedure or contract may provide additional information.