Privacy Policy
What personal data this website and our business communication collect, why, and how you can exercise your rights.
Last updated 10 October 2026
1. Data controller
The controller of personal data collected through this website and business communication is QualityCert d.o.o. Tuzla, Trg slobode 16, 75000 Tuzla, Bosnia and Herzegovina.
For privacy-related questions and to exercise your rights, you can contact us at: info@qualitycert.ba
2. Contact form and purpose of processing
The contact form requires you to provide your email address, the subject and the content of your message, while providing your name is optional. The message is forwarded to QualityCert’s business email address.
In direct business communication by email or verbally, we process names, business contact details, information about the organisation and the contact person’s role, and other personal data provided during such communication, to the extent necessary to handle enquiries and conduct business cooperation.
We use the data to handle your enquiry, plan, agree on and deliver services, and conduct related business communication, based on our legitimate interest in establishing and maintaining business cooperation with organisations and their representatives. We also process personal data where necessary to comply with QualityCert’s legal obligations.
Providing data through the contact form is voluntary and is not a statutory requirement. You cannot send a message through the form without completing the mandatory fields. In business communication, without the necessary contact details and information, we may be unable to handle your enquiry or carry out the agreed activities.
3. Technical data and cookies
When you access the website, the hosting system may process technical access data, including your IP address and server logs, to enable the website to operate, resolve errors and prevent misuse. The legal basis is our legitimate interest in the secure and reliable operation of the website.
This website does not use cookies. We do not carry out profiling or automated decision-making concerning users.
4. Data access and protection
Data is accessed by authorised personnel at QualityCert and, to the extent necessary to provide their services, by providers of hosting, email and technical maintenance services, subject to appropriate data protection and confidentiality obligations. Data may be disclosed to competent authorities where required by law.
The website is hosted on servers in the European Union, whose Member States provide an adequate level of personal data protection according to the interpretation of the Personal Data Protection Agency in Bosnia and Herzegovina.
5. Data retention
We retain contact form data and business correspondence, technical logs and their backups for as long as necessary for the respective purposes: handling enquiries, planning, agreeing on and delivering services and conducting related business cooperation, ensuring system security and reliability, complying with legal obligations, or exercising and defending legal claims, in accordance with the applicable retention rules.
You may also request the erasure of your personal data earlier, and we will handle your request in accordance with the statutory conditions and exceptions.
6. Your rights
Subject to the statutory conditions, you have the right to request access to your personal data, its rectification or erasure, restriction of processing and data portability.
Where we process data on the basis of legitimate interests, you may object to us on grounds relating to your particular situation. Independently of this, you have the right to lodge a complaint with the competent data protection authority in Bosnia and Herzegovina.
7. Submission of confidential information
The contact form is intended for general enquiries. QualityCert does not request or invite the submission of trade secrets or other confidential information through the contact form. The sender must limit the message to information necessary for a general enquiry and which may be disclosed to third parties. Otherwise, QualityCert may decide not to respond to the enquiry.
The mere sending or receipt of a message, including a message marked as confidential, does not constitute acceptance of a confidentiality agreement or of any additional terms unilaterally stated by the sender. Specific contractual confidentiality obligations are undertaken by express agreement with QualityCert.
This provision does not affect obligations arising from applicable legislation or previously concluded agreements. Personal data is processed in accordance with this Privacy Policy.