Privacy Policy

11. Controller (who processes your data)

The controller is:

• Z2 Solutions, trade name of the craft business “Z2 Rješenja”, ID 4304104670001
• Address: Trg nezavisnosti 15, Sarajevo, Bosnia and Herzegovina
• E-mail: info@z2sol.com
• Phone: +387 61 817 061

For any questions about the protection of personal data and to exercise your rights, contact us at info@z2sol.com.

22. Which data we process

We process only the data we need for the stated purposes, depending on your relationship with us:

• Identification and contact data: first and last name, company name, phone number, e-mail address, place / location.
• Business cooperation data: enquiry, quote, agreed jobs, invoices and payments, location of the works, year of first cooperation, how you heard about us.
• Communication and choices data: which types of notifications you have consented to, when and through which channel, and whether you have withdrawn consent.
• Data for the public presentation of work: photos of the premises we take before, during and after the works, photos of completed work, the client's company name, location and description of the job (type of job, materials, dimensions), when a job is presented publicly (see section 3).
• Technical data: data generated when you visit the website (e.g. device and browser type), to the extent it is collected (see section 10).

We do not request or deliberately process special categories of personal data (e.g. data on health, religious or political beliefs). Please do not send us such data.

Data from public sources: when we contact potential business clients, we may use publicly available business data (company name, business e-mail and phone, place), solely to offer our services and on the basis of our legitimate interest. We do not add such persons to marketing mailing lists without their consent. At first contact we will tell you who we are and how we obtained your data. You can object or ask us not to contact you again, after which we record you as “do not contact” so that we respect your request. If there is no response, we delete such data within 12 months.

33. Purposes and legal basis

Consent for marketing messages is separate for each channel (e-mail, WhatsApp, Viber). Withdrawing consent does not affect the lawfulness of processing before the withdrawal, nor the service you use. We do not carry out automated decision-making or profiling that produces legal effects for you.

44. Communication channels

We send marketing messages only to people who have signed up for them. Depending on your choice, these may be:

• an e-mail newsletter (every message includes an option to unsubscribe),
• posts in a WhatsApp Channel and/or Viber Community,
• messages via WhatsApp or Viber, which we send only if you have expressly asked for them or given consent.

55. Recipients of data

We do not sell your personal data. Only authorised persons in our company have access to it, and only as far as needed to do their work. We may entrust data to reliable service providers who process it solely on our instructions and under a duty of confidentiality and protection, in the following categories:

• providers of web hosting, business e-mail and data storage (including cloud services),
• providers of tools for sending e-mails and managing contact lists,
• providers of the communication platforms we use to communicate with you (e.g. WhatsApp, Viber),
• accounting and legal advisers,
• competent public authorities, when required by law.

A list of the specific providers is available on request at info@z2sol.com.

66. Transfers outside Bosnia and Herzegovina

Some service providers may process data outside Bosnia and Herzegovina, including in countries of the European Economic Area or other countries. In that case we take reasonable measures to ensure your data is protected at a level consistent with applicable regulations, including the provider's contractual obligations and, where applicable, appropriate safeguards.

77. Retention periods

We keep data only as long as needed for the purpose for which it was collected:

• Marketing contacts: until consent is withdrawn or you unsubscribe. After you unsubscribe we keep only the minimum data needed not to contact you again and to prove that the unsubscription was carried out.
• Data on jobs, quotes, contracts and invoices: for the periods set by accounting, tax and other regulations, and as far as needed to establish or defend legal claims and warranty obligations.
• Enquiries that did not result in a job: 1 year from the last contact, after which the data is deleted or anonymised.
• Posts about completed work: for as long as we present them publicly or until you ask us to remove them.
• Proof of consent: for as long as the consent lasts and afterwards for a reasonable period to protect against possible claims.

88. Your rights

In accordance with applicable personal data protection regulations in Bosnia and Herzegovina and, where applicable, the General Data Protection Regulation (GDPR), you have the right to:

• access your data and obtain a copy,
• rectification of inaccurate or incomplete data,
• erasure of data, where the conditions are met,
• restriction of processing,
• object to processing based on legitimate interest and to processing for direct marketing,
• data portability, where applicable,
• withdraw consent at any time,
• lodge a complaint with the competent supervisory authority: in Bosnia and Herzegovina this is the Personal Data Protection Agency in Bosnia and Herzegovina (Agencija za zaštitu ličnih podataka u Bosni i Hercegovini); if you reside in an EU member state, you can also contact the supervisory authority in your country.

Send requests to info@z2sol.com. To protect your data, we may ask you to verify your identity. We respond to requests without undue delay and no later than within 30 days.

99. How to unsubscribe

• E-mail: click the unsubscribe link at the bottom of every message.
• WhatsApp Channel and Viber Community: leave the channel or community.
• Any channel: send us a message saying “ODJAVA” (unsubscribe) or an e-mail to info@z2sol.com and we will remove you from all marketing lists, as a rule within 48 hours.

Unsubscribing from marketing messages does not affect processing of data that is necessary to perform a contract or meet legal obligations.

1010. Website and cookies

Necessary for the website to work: we store only your cookie choice in your browser's memory, so that the banner does not ask you on every visit.

Measuring visits (Google Analytics): with your consent we use Google Analytics, a service of Google, to see how the website is used and how people find us. This sets cookies and processes visit data such as the pages you open, the type of device and browser, approximate location and the source of the visit. Google Analytics is not loaded until you click “Accept”. If you click “Decline”, no measurement is made. The legal basis is your consent. You can change or withdraw your choice at any time through the “Cookie settings” link at the bottom of the page, and you can also delete cookies in your browser settings. Google may process data outside Bosnia and Herzegovina (see section 6).

Third-party content: fonts are loaded from Google's servers, and the contact page displays a Google map. In doing so Google may receive your IP address and browser data, as with any content loaded from another party's server. The website may also contain links to third-party sites (e.g. Google, social networks) for which we are not responsible and whose privacy policies apply to their services.

1111. Data security

We apply appropriate technical and organisational protection measures proportionate to the risk, to prevent unauthorised access, loss, alteration or misuse of data. Access is limited to authorised persons on a “need to know” basis. No system can guarantee absolute security, and in the event of an incident that requires notification we will act in accordance with the law.

1212. Minors

Our services and communication channels are not intended for persons under 16 and we do not knowingly collect their data. If you believe we have collected such data, please let us know so that we can delete it.

1313. Changes to this policy

We may change this policy when our activities or regulations change. The current version is always published on our website with its effective date. We will notify you of material changes concerning marketing messages through the channels you use.