Privacy policy

This Privacy and Cookie Policy has been prepared in accordance with the General Data Protection Regulation (GDPR) and the Law on Personal Data Protection of Bosnia and Herzegovina. It defines how we collect, use, and protect your personal data when you use our website.

1. General Provisions

The website capitalia.ba respects your privacy and is committed to processing personal data in accordance with the Law on Personal Data Protection of Bosnia and Herzegovina (“Official Gazette of BiH”, No. 12/25).
This Policy explains which personal data we collect, for what purposes we use it, how we store it, and what rights you have regarding the processing of your personal data.
This Policy applies to all users and visitors of the website capitalia.ba, including all its content, functionalities, and services.

2. Data Controller

The data controller (the entity that determines the purposes and means of personal data processing) is:
Capitalia d.o.o. Sarajevo
Address: Zmaja od Bosne 47a, Sarajevo
E-mail: info@capitalia.ba
Phone: +387 (0)33 574 500

Capitalia d.o.o. is responsible for lawful, fair, and transparent processing of users’ personal data.

3. Data Protection Officer

If you have any questions regarding data protection, you may contact our Data Protection Officer:
Name: Alma Prutina
E-mail: info@capitalia.ba
Phone: +387 (0)33 574 500

4. Types of Data We Collect

When using our website, we may collect the following types of data:

• Data you provide voluntarily for the purpose of information, job applications, student internships, or newsletter subscription with your consent (e.g., via contact forms, newsletter sign-up, or inquiries): name, surname, e-mail address, phone number, and any other data you voluntarily provide.
• Automatically collected data: IP address, browser type, device, duration of visit, pages viewed, cookies, and other technical information automatically recorded during your visit for informational purposes with your consent.
• Website functionality maintenance – based on legitimate interest.
• Marketing and statistical data – for informational purposes with your consent if you have accepted cookies or subscribed to the newsletter.

We do not collect special categories of personal data (such as health data, political opinions, religious beliefs, etc.).

5. Purpose and Legal Basis of Processing

We process personal data solely for lawful purposes, including:

• managing the website and its functionalities,
• responding to your inquiries and communicating with you,
• sending newsletters (with your prior consent),
• analytical and statistical purposes (to improve user experience),
• system security and prevention of misuse.

The legal basis for data processing is your consent.

6. Use and Disclosure of Personal Data

Your personal data is used only for the purposes stated in this Policy.
We do not share your data with third parties unless:

• required by law,
• necessary for technical maintenance of the website (e.g., hosting provider, IT support), or
• you have provided your explicit consent.

All external processors are bound by a data processing agreement, obliging them to maintain confidentiality and ensure the security of your information.

7. Cookies

This Cookie Policy explains what cookies are, how we use them on the website www.capitalia.ba, what types of cookies we use, what information we collect and how we use it, as well as how you can manage your cookie settings.

We respect your privacy and are committed to processing personal data in accordance with the Law on Personal Data Protection of Bosnia and Herzegovina (“Official Gazette of BiH”, No. 12/25) and applicable privacy regulations.

Cookies are small text files stored on your device (computer, tablet, phone) when you visit a website. They enable the site to remember your actions and preferences (such as language, font size, or login settings) over a certain period of time.

You can choose to enable or disable some or all cookies; however, disabling certain cookies may affect your browsing experience.

The website capitalia.ba uses cookies for the following purposes:

1. to ensure proper website functionality,
2. for analytics and visitor tracking, and
3. to improve content and user experience.

Types of Cookies We Use

Cookies can be classified as follows:

• Necessary Cookies

These cookies are essential for the proper functioning of the website and cannot be disabled in our systems. They are usually set in response to actions you take that amount to a service request, such as setting privacy preferences, logging in, or filling out forms.

Detailed cookie specifications to be added.

• Functional Cookies

Functional cookies help perform specific functionalities, such as sharing website content on social media, collecting feedback, and enabling third-party features. They allow the website to provide enhanced functionality and personalization, such as remembering language or region preferences.

Detailed cookie specifications to be added.

• Analytical / Statistical Cookies

Analytical cookies are used to understand how visitors interact with the website. These cookies allow us to track visits and traffic sources so that we can measure and improve the performance of our website. The data collected is anonymous.

Detailed cookie specifications to be added.

• Performance Cookies

Performance cookies are used to understand and analyze key performance indicators of the website, helping to provide a better user experience for visitors.

Detailed cookie specifications to be added.

• Marketing Cookies

(e.g., Google Analytics, Meta Pixel)

Advertising cookies are used to deliver personalized ads to visitors based on the pages they have previously visited and to analyze the effectiveness of advertising campaigns. They are used to track visitors across websites and display relevant advertisements based on their interests.

These cookies are set only with your consent.

Detailed cookie specifications to be added.

Legal Basis for Processing Personal Data via Cookies

The legal basis for processing personal data collected through cookies is:

Legitimate interest for necessary cookies (for the proper functioning of the website), and

Your consent for all other types of cookies, in accordance with Articles 4 and 6 of the Law on Personal Data Protection of Bosnia and Herzegovina.

Managing Cookies and Consent

Upon your first visit to the website, a cookie banner will appear, allowing you to:

accept all cookies,

reject all except necessary cookies, or

customize your cookie settings.

You can change your preferences at any time by accessing the “Cookie Settings” option located at the bottom of the page.

Your Rights

You have the right to request access, correction, restriction of processing, or deletion of personal data collected through cookies at any time, in accordance with the Law on Personal Data Protection of Bosnia and Herzegovina.

To exercise your rights, you can contact us at: info@capitalia.ba.

You may withdraw or modify your consent at any time via the “Cookie Settings” option available at the bottom of the page.

Changes to the Cookie Policy

We reserve the right to modify this Cookie Policy to ensure compliance with applicable laws or to improve our privacy practices.

Updated versions will be published on this page with the corresponding revision date.

8. Newsletter and Subscription

If you have given explicit consent to receive newsletters, we use your data (name and e-mail address) solely for that purpose.
You can withdraw your consent at any time by clicking the “unsubscribe” link included in every newsletter.
Once consent is withdrawn, processing of your data for this purpose will cease.

9. Job and Internship Applications

When applying for a job or internship, we collect and process the following personal data that you voluntarily submit via the application form or accompanying documentation:
name and surname, citizenship, e-mail address, date of birth, educational background, and any other data you voluntarily provide in your CV or accompanying documents.

The legal basis for processing your data is your explicit consent, which you provide when submitting your application.
You may withdraw your consent at any time, which will not affect the lawfulness of processing carried out before the withdrawal.

Access to your data is restricted to authorized personnel involved in the selection process.
Your data is stored for a maximum of 24 months from the date of submission, after which it will be deleted.

10. Data Retention Period

Data is stored only as long as necessary to fulfill the purpose for which it was collected, unless a longer period is required by law.
Data collected through cookies is stored for up to 26 months, unless deleted earlier by the user.
Newsletter data is stored until consent is withdrawn.

11. User Rights

In accordance with the Law on Personal Data Protection of Bosnia and Herzegovina, you have the right to:

• request access to your personal data,
• request correction of inaccurate or incomplete data,
• request deletion of data (“right to be forgotten”),
• request restriction of processing,
• object to processing based on legitimate interest,
• exercise data portability (if technically feasible),
• withdraw previously given consent at any time.

To exercise these rights, you can contact us via e-mail: info@capitalia.ba.
Our usual response time for requests is 30 days.
You also have the right to file a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina if you believe your rights have been violated.

12. Automated Processing and Profiling

Our website uses analytics tools that automatically process certain technical data (e.g., IP address, browser type, visit duration).
This processing is not used to make automated decisions that would have legal or similar significant effects on the user.

13. Links to Other Websites

The website capitalia.ba may contain links to other websites.
We are not responsible for the privacy and data protection policies of those websites and encourage you to review the privacy policies of each site you visit.

14. Data Security

We apply appropriate technical and organizational protection measures (encryption, access protection, regular backups, employee access control, etc.) to ensure the confidentiality, integrity, and availability of your data.
In the event of a personal data breach, we will take all legally required measures and, if necessary, notify the Personal Data Protection Agency of BiH and affected individuals.

15. Changes to the Policy

We reserve the right to modify this Policy at any time at our discretion.
The date of the latest revision will be indicated at the bottom of this document, and such amended or supplemented Privacy Policy will take effect from that revision date.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Date of last revision: October 2025