Privacy Policy

1. Data Controller

KD CONCEPT BOJAN TOMIĆ S.P BANJA LUKA, with its registered office at Stojana Novakovića br. 1, is the controller of personal data processed through this website.

Contact for privacy enquiries: info@kdconcept.ba
Telephone: +387 65 793 517

2. Contact Form Data

Through the contact form, we process your full name, company name, business email address, telephone number if provided, the content of your message and your preferred deadline if provided.

We use this information to respond to your enquiry, assess the possibility of working together and take steps before potentially entering into a contract. The legal basis is Article 8(1)(b) of the Law on Personal Data Protection of Bosnia and Herzegovina. Without the information marked as required, we cannot process your enquiry.

3. Technical Data on Website Use

For security, prevention of misuse, detection of technical issues and stable website operation, the hosting system may record the IP address, date and time of access, requested page, server response status and browser information.

These data are processed on the basis of legitimate interests under Article 8(1)(f) of the Law. The legitimate interest is the secure, stable and reliable operation of the website.

4. Recipients and Service Providers

Data may be accessed by authorised KD CONCEPT personnel and the following service providers, which process data on our behalf:

• website hosting: Globalhost d.o.o., Bosnia and Herzegovina, a processor that stores the data on its servers;
• business email: Microsoft (Microsoft 365 service), a processor that stores and delivers email messages;
• technical maintenance of the website: a website maintenance provider, Bosnia and Herzegovina, with access to data only to the extent needed for maintenance.

Data are disclosed to the competent authorities only when required by law.

5. Data Transfers Outside Bosnia and Herzegovina

Data held on the website hosting are stored in Bosnia and Herzegovina. Enquiries sent through the contact form are delivered to a business mailbox in the Microsoft 365 service, so Microsoft may process them in [country/region shown as the data location in the Microsoft 365 admin centre, e.g. the European Union]. Transfers are made on the basis of the data processing agreement with Microsoft (Microsoft Products and Services Data Protection Addendum), which includes standard contractual clauses. Information on the safeguards in place is available from info@kdconcept.ba.

6. Retention Periods

• data from an enquiry that does not lead to a business relationship: deleted once the related correspondence has ended;
• data relating to a contractual business relationship: during the relationship and afterwards for the periods required by contractual, accounting, tax and other legal obligations;
• server logs: [actual retention period applied by the hosting provider];
• backups: [actual retention period or deletion cycle, if they contain these data].

Data are not retained for longer than necessary for the purpose for which they were collected or to fulfil legal obligations.

7. Data Subject Rights

Subject to the conditions laid down by law, you may:

• request access to your personal data;
• request rectification of inaccurate or incomplete data;
• request erasure of data;
• request restriction of processing;
• request data portability;
• object to processing based on legitimate interests.

You may send your request to info@kdconcept.ba. Before acting on a request, we may ask for information needed to verify the requester’s identity.

You may lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina and seek a judicial remedy before the competent court.

8. Automated Decision Making

We do not carry out automated decision-making or profiling based on data collected through the contact form.

9. Data Protection

We implement appropriate organisational and technical measures to protect data against unauthorised access, loss, alteration or disclosure.

10. Cookies and Analytics

The website does not use analytics or marketing cookies. Only strictly necessary cookies required for the secure and proper operation of the website may be used.

11. Policy Updates

We may update this policy when our data processing practices, service providers or legal obligations change. The current version is always available on this page.

Last updated: 7 October 2026

This policy has been prepared in accordance with the Law on Personal Data Protection of Bosnia and Herzegovina (Official Gazette of Bosnia and Herzegovina, No. 12/25), in particular its requirements regarding the information the controller must provide under Article 15.