Legal
Privacy policy
This page explains what data we collect through the website and what we do with it.
Data
What we do with your data
The site has no cookies, no advertising scripts and does not follow you onto other websites. Apart from what you send us yourself, only anonymous visit statistics are recorded.
Who processes the data
A & D Društvo za trgovinu i usluge, export-import d.o.o. Sarajevo, Halilovići bb, 71000 Sarajevo. Contact: info@ad-bh.ba, +387 33 943 301.
Legal basis
We process the data from the contact form on the basis of your consent, which you give by ticking the box before sending the enquiry. You may withdraw that consent at any time, without giving a reason, and doing so does not affect the lawfulness of processing before the withdrawal.
If business follows from an enquiry, further processing rests on performing the contract and on our statutory obligation to keep accounting records.
What we collect
Through the contact form we collect your name, phone number and/or email address, the selected material, the message text and, if you attach one, a photo of the material. We also record which page the enquiry was sent from.
We do not use cookies or third-party advertising scripts.
Visit statistics
So that we know which pages people actually use, we count visits with Vercel Web Analytics. The statistics are anonymous and use no cookies: what is recorded is the time, the page address, the page you arrived from, your country and city, your device type and your browser. A visitor is recognised through a hash computed from the request itself, which is discarded after 24 hours.
We also record three actions, with no personal data in them: that an enquiry was sent and which material was selected, a click on an enquiry button and which page it came from, and a tap on the phone number. None of it contains your name, number or message.
Why we use it
Solely to answer your enquiry and, if business follows, to arrange collection and payment. We do not sell your data or pass it to third parties for marketing.
Where it is stored
Enquiries are stored in the website database. Attached photos are kept in private storage accessible only to authorised staff.
How long it is kept
An enquiry and its attached photos are kept for 30 days from the day they are sent, after which they are deleted. If business follows from an enquiry, the records of that business are kept in the accounting documentation, for the periods required by law.
Who the data is passed to
We do not sell your data and we do not pass it to third parties for marketing. Two service providers keep the site itself running; they process the data solely on our instructions and may not use it for their own purposes:
- Vercel Inc. — Website hosting and anonymous visit statistics.
- Supabase Inc. — The database the enquiry is stored in, and the private storage for an attached photo.
Their servers are outside Bosnia and Herzegovina, so in technical terms the data is processed outside BiH as well. With each of them the processing is governed by their data processing terms, which the links above point to. We will also hand data to a public authority where the law expressly requires it.
Security
The site runs only over an encrypted connection (HTTPS). Enquiries are held in a database that can only be reached by signing in, and attached photos in private storage that is not publicly accessible. Only a limited number of authorised people in the company have access.
No automated decision-making
Your enquiry is read and answered by a person. We make no decisions by automated processing and we build no profiles. We collect no special categories of data (health, biometric and the like), and the site is not intended for children.
Changes to this policy
We may change this policy when the way we work changes. The version published on this page, with the date shown beside it, is the one that applies.
In short
- We collect only what you typed into the contact form yourself.
- We use it solely to answer your enquiry.
- We do not sell your data and we do not pass it on for marketing.
- We keep an enquiry for 30 days, then delete it.
- You can withdraw your consent whenever you like.
- You have the right to access, correction, erasure and objection — with one email.
Rights
Your rights
A request needs no particular form — an email from the address, or a message from the number, you sent the enquiry from is enough. We answer within 30 days at the latest.
- Access
- Confirmation of whether we process your data, and a copy of what we hold.
- Rectification
- Correction of anything inaccurate, and completion of anything incomplete.
- Erasure
- Deletion of your enquiry and any attached photo, before the 30 days are up if you wish.
- Restriction
- Keeping the data but pausing our use of it while something is being clarified.
- Portability
- The data you gave us yourself, handed back in a common, machine-readable format.
- Objection
- To object to the processing. We do no direct marketing, so there is nothing to object to on that front.
- Withdrawing consent
- At any time and without giving a reason. Once you withdraw it we delete the enquiry.
If you are not satisfied
Come to us first — it is quickest and it is usually enough. If you believe we have handled your data unlawfully, you have the right to complain to the supervisory authority.
- Supervisory authority
- Agencija za zaštitu ličnih podataka u Bosni i Hercegovini
- Address
- Dubrovačka br. 6, 71000 Sarajevo
- Phone
- +387 33 726 250
- azlpinfo@azlp.ba
This version has applied since 2 September 2026.