
Privacy Policy
(Last updated on April 24, 2023)
Company ODM Collections d.o.o. Sarajevo, with headquarters at Maršala Tita no. 28, 71000 Sarajevo, JIB: 4202591080004 (hereinafter: “Company”) makes maximum efforts in order to comply with the relevant regulations on the protection of personal data and to enable the realization of the rights of the persons whose data is processed. Accordingly, this Privacy Policy was created in accordance with the Law on Protection of Personal Data (“Official Gazette of Bosnia and Herzegovina” No. 49/06, 76/11 and 89/11), including by-laws adopted on the basis of this law (hereinafter: Relevant regulations).
This Privacy Policy provides a general overview of the personal data processing and protection system implemented by the Company. Accordingly, if necessary, and especially at your request, the Company can provide you with additional information related to the processing of your personal data.
The Company reserves the right to amend and supplement this Privacy Policy as necessary, especially in the case of changes to relevant regulations and/or methods of processing and protection of personal data by the Company, and please check when the last update was made each time you review this Privacy Policy updating it.
This Privacy Policy provides information about:
- METHOD OF COLLECTION AND PROCESSING OF YOUR PERSONAL DATA
- CATEGORIES OF PERSONS INCLUDED IN THE PROCESSING AND PURPOSES OF PERSONAL DATA PROCESSING
- PERSONS TO WHOM WE DISCLOSE PERSONAL DATA
- COOKIES
- TRANSMISSION OF PERSONAL DATA
- PERSONAL DATA PROTECTION MEASURES
- EXERCISE OF THE RIGHTS OF THE PERSONS WHO’S PERSONAL DATA ARE PROCESSED
- CONTACT DATA OF THE COMPANY
- METHOD OF COLLECTION AND PROCESSING OF YOUR PERSONAL DATA
The company strives to collect personal data directly from the persons to whom the data refer. As a rule, this will already be the case when establishing the first contact and cooperation with you. However, in certain cases, the direct collection of personal data to which the data refers is not possible or is not an effective solution considering the nature, legal basis and purposes of personal data processing. Accordingly, the Company may collect and process your data provided by other persons. As a rule, other persons are Clients, i.e. subjects with whom the Company has concluded a contract. At the same time, considering the nature, legal basis and purposes of the processing, your personal data may be disclosed to the Company by competent state authorities and other persons in the appropriate judicial, administrative or enforcement and security proceedings. Regardless of the method of collecting personal data the Company is focused on establishing and implementing appropriate mechanisms for enabling the exercise of the rights of persons regulated by relevant regulations.
When processing your personal data, the Company adheres to the basic principles of processing defined by the relevant regulations. Accordingly, the Company strives to ensure that the processing of your personal data is legal, fair and transparent, and that it is carried out exclusively to the extent and to the extent necessary for the achievement of explicitly defined and justified purposes. Bearing in mind the fact that the processing of personal data creates a series of obligations for the Company, the Company has an interest in processing the minimum amount of personal data necessary to achieve the purposes of the processing and within the deadlines justified by the purpose of the processing. We strive to keep your personal data up-to-date and accurate, and in this regard, we invite you to help us in this by pointing out the need to correct and supplement your data. The company undertakes a number of measures and invests significant funds and resources in order to establish an efficient system for the protection of your personal data.
- CATEGORIES OF PERSONS INVOLVED IN PROCESSING AND PURPOSES OF PERSONAL DATA PROCESSING
The Company processes the personal data of its employees and other engaged persons, as well as candidates for employment, i.e. establishing business cooperation with the Company, exclusively for the purposes and to the extent necessary for the fulfillment of the Company’s legal obligations in the field of work, social insurance, social protection and other legal obligations of the Company regarding establishing an employment relationship, i.e. establishing cooperation with these persons, as well as for the purpose of concluding and executing an employment contract, i.e. another appropriate contract concluded with these persons.
The Company also processes the personal data of persons against whom the Company or a person to whom the Company provides services in the Company’s business area has a claim, and for the purpose of collection, i.e. realization of said claim.
The Company also processes the personal data of the users of the Website, for the purposes of enabling more efficient use of the Website, improving the business and operation of the Company and the Website.
- PERSONS TO WHOM WE DISCLOSE PERSONAL DATA
The basic policy of the Company from the aspect of sharing, i.e. the exchange of personal data, is to undertake the same only if it is necessary, in compliance with all the rules and obligations established by the relevant regulations regarding such transfer.
Given that modern business conditions dictate the division of tasks and specialization, your data may be delivered to entities that the Company hires to provide specialized services, i.e. whose applications and technologies the Company uses, and to the extent that such delivery is necessary for the performance of the contract concluded with these entities.
Your personal data may also be disclosed to the competent authorities in procedures for exercising your rights and/or the rights of the Company, as well as for the purpose of execution, supervision over the execution and proof of the execution of your and/or the Company’s obligations established on the basis of law or contract.
- COOKIES
For more efficient and better use of the functions of our website, as well as for the purpose of improving the website and the Company’s operations, the Company uses cookies, namely: session cookies and third-party cookies. You can view more detailed information about the processing of personal data carried out through cookies HERE.
- TRANSFER OF PERSONAL DATA
We inform you that the Company does not transfer personal data outside the borders of Bosnia and Herzegovina, with the exception of data collected through third-party cookies that may be stored on servers outside Bosnia and Herzegovina.
If, taking into account the nature, legal basis and purposes of the processing, there is a need to transfer personal data to other countries and international organizations, in the event that these countries and international organizations do not provide an adequate level of protection in accordance with the relevant regulations, the Company will endeavor to ensure the application appropriate personal data protection measures.
- PERSONAL DATA PROTECTION MEASURES
The company takes significant steps in the direction of educating its employees and other engaged persons on matters of importance for the protection of personal data. All entities involved in the processing of personal data carry out the processing based on the authorization given by the Company, which defines the limitations of access and processing of personal data, conditions and responsibilities regarding the processing of personal data. In accordance with the aforementioned, the “need-to-know-basis” principle applies within the Company. At the same time, all persons involved in the processing are obliged to preserve the confidentiality of data related to the processing.
In order to ensure compliance with relevant regulations, the Company has established a number of internal procedures and acts that apply to the processing of personal data within the Company. At the same time, the Company has a Certificate on the implementation of the management system, which is in accordance with the requirements of the ISO/IEC 27001:2013 standard.
The company undertakes appropriate measures for the physical and technical protection of personal data, which prevent unauthorized access and processing of personal data, but at the same time protects the integrity personal data. The applied personal data protection measures are tested by the Company, in order to assess the need for their improvement and change.
- EXERCISE OF THE RIGHTS OF THE PERSONS WHO’S PERSONAL DATA ARE PROCESSED
See more detailed information about the processing of personal data carried out in connection with the website HERE.
Internal procedures within the Company, as well as contracts concluded by the Company with other persons, have established mechanisms for enabling the exercise of the rights of persons whose personal data is processed. If the Company is not authorized to act on your request in a given case, it will be forwarded to an authorized person.
In order to more effectively enable the exercise of personal rights, the Company has prescribed a request form for the exercise of personal rights in connection with the processing of personal data. You can download the application form HERE.
Of course, the use of the form created by the Company is not binding on you, and if you think it is simpler and more efficient, you can submit the request in a free form, that is, in a way that you consider adequate.
- CONTACT US
For additional questions, and especially for the purpose of submitting a request for the exercise of rights related to processing, you can contact us via the following contact details:
Address: Maršala Tita 28, Sarajevo 71000
Phone: +387 33 821 841
Mail: office@odmc.ba