PRIVACY POLICY

14.09.2026

NeraEtva o.d. is committed to protecting the privacy and security of users' personal data. This Privacy Policy explains how we collect, use, and protect personal data of visitors to https://neraetva.com.

Processing is carried out in accordance with the Law on Personal Data Protection of Bosnia and Herzegovina (Official Gazette of BiH 12/25) and, where applicable, the EU General Data Protection Regulation (GDPR) when we process personal data of individuals in the European Union.

1. Data Controller

The controller of personal data is:

NeraEtva o.d., Trg nezavisnosti 21, 71000 Sarajevo, Bosnia and Herzegovina. Email: info@neraetva.com

For questions about personal data protection, contact: info@neraetva.com

2. What Data We Collect

Depending on how you use the website, we may process:

Contact-form data is used to respond to your inquiry (pre-contractual / communication purpose).

GDPR guide signups: we email you a download link to the guide hosted on this site, and we store your email as a lead in Mailchimp (tag GDPR-vodic) for GDPR-related tips. You can unsubscribe at any time.

We do not intentionally collect special categories of personal data.

Technical and usage data

  • IP address and approximate location derived by analytics (when Statistics cookies are consented)
  • browser type, device, and pages visited (via Google Analytics 4 after consent)
  • cookie consent choices stored in your browser and a corresponding anonymous event log on our server

Data you submit voluntarily

  • name, email, message, and optional website URL via contact forms
  • email address when requesting the GDPR guide
  • form metadata such as page URL and form identifier

3. Purpose of Processing

  • operating and securing the website
  • responding to contact and service inquiries
  • delivering the requested GDPR guide by email
  • maintaining a Mailchimp audience of guide leads / GDPR tips (with consent)
  • measuring website usage with Google Analytics 4 (with Statistics consent)
  • demonstrating cookie consent choices (accountability)
  • meeting legal obligations

4. Legal Basis for Processing

  • steps prior to entering a contract / responding to your request (contact inquiries)
  • your consent (Statistics cookies / GA4; GDPR guide + Mailchimp lead)
  • legitimate interest in site security and basic operation (strictly necessary technical storage)
  • legal obligations where applicable

Where processing is based on consent, you may withdraw it at any time (cookie banner “Manage consent”, email unsubscribe, or info@neraetva.com). Withdrawal does not affect processing already performed.

5. Cookies and similar technologies

We use a cookie banner with Accept, Deny, and Preferences. Non-essential technologies (Google Analytics 4) load only after Statistics consent.

Your choice is stored in localStorage (neraetva_consent_v1) for up to about 3 years, and an anonymous proof of that choice is appended to a server log (see Cookie Policy).

Details are in the Cookie Policy.

6. Recipients and processors

We do not sell personal data. We use service providers who process data on our behalf:

  • InterServer — website hosting and PHP mail delivery
  • Google LLC — Google Analytics 4 (after Statistics consent)
  • The Rocket Science Group, LLC (Mailchimp) — guide lead storage and list emails

Form notifications are sent to info@neraetva.com. These providers may process data outside Bosnia and Herzegovina (including the EU and/or United States) under their contractual safeguards (e.g. standard contractual clauses / provider terms).

7. Retention

  • Contact inquiries: up to 12 months in our mailbox (or earlier if no longer needed)
  • Mailchimp leads: until you unsubscribe or request erasure
  • Cookie consent in the browser and consent event log: up to 3 years
  • Google Analytics: according to the retention setting in our GA4 property

8. Your rights

  • access
  • rectification
  • erasure (where applicable)
  • restriction of processing
  • objection
  • data portability (where applicable)
  • withdraw consent

To exercise your rights, email info@neraetva.com. We aim to respond within 30 days.

You may lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (AZLP). EU residents may also contact their local supervisory authority.

9. Security

We apply appropriate technical and organizational measures, including HTTPS, access controls, and keeping software up to date. No method of transmission is 100% secure.

10. Changes

We may update this Privacy Policy. Changes take effect when published on this page. The “last updated” date above reflects the latest revision.