PRIVACY POLICY

02.04.2026

Neraetva o.d. is committed to protecting the privacy and security of users' personal data. This Privacy Policy explains how we collect, use, and protect personal data of visitors to the website.

The processing of personal data is carried out in accordance with applicable data protection laws, including the Law on Personal Data Protection of Bosnia and Herzegovina.

1. Data Controller

The controller of personal data is:

Neraetva o.d. Trg nezavisnosti 21 Sarajevo, Bosnia and Herzegovina Email: info@neraetva.com

For any questions regarding personal data protection, you may contact us at: info@neraetva.com

2. What Data We Collect

During the use of the website, the following categories of data may be collected:

Technical data

  • IP address
  • browser type and version
  • operating system
  • time of access to the website

    • Website usage data

  • pages visited
  • duration of visit
  • navigation behavior on the website

    • Data voluntarily provided by the user

  • full name
  • email address
  • content of messages sent via contact form or email

    • 3. Purpose of Processing Personal Data

  • ensuring the functionality and security of the website
  • communication with users
  • responding to user inquiries
  • improving the quality of website content
  • fulfilling legal obligations

    • 4. Legal Basis for Processing

    The processing of personal data is based on:

  • legitimate interest in ensuring the security and functionality of the website
  • compliance with legal obligations
  • user consent (e.g., for marketing or cookies)

    • 5. Cookies

    The website uses cookies to improve functionality and user experience.

    Through the cookie banner, users can manage their settings and give or withdraw consent for the use of cookies.

    Detailed information is available in the Cookie Policy.

    6. Sharing Data with Third Parties

    Neraetva o.d. does not sell or transfer personal data to third parties.

    Data may be shared only when it is:

  • legally required
  • necessary for the technical maintenance of the website
  • necessary for system security

    • 7. Data Processors

    For website maintenance, we use trusted IT service providers (e.g., hosting, analytics).

    These providers have limited access to data and are obligated to act in accordance with data protection laws.

    8. Data Transfer to Other Countries

    In certain cases, data may be processed on servers located outside Bosnia and Herzegovina.

    In such cases, we ensure appropriate safeguards in accordance with data protection laws.

    9. Data Retention Period

    Personal data is stored only as long as necessary to achieve the purpose of processing or as required by law.

  • Contact form data is stored for up to 12 months
  • Marketing data is stored until consent is withdrawn
  • Cookie consent data is stored for 3 years

    • 10. User Rights

  • right of access to data
  • right to rectification
  • right to erasure (where applicable)
  • right to restriction of processing
  • right to object

    • 11. Data Security

    Neraetva o.d. implements technical and organizational protection measures, including:

  • access control
  • security protocols
  • regular system maintenance

    • 12. Changes to the Privacy Policy

    Neraetva o.d. reserves the right to amend this Privacy Policy.

    All changes shall take effect upon publication on the website.