Privacy Policy

Introduction

This Privacy Policy describes how Isatis d.o.o. (“Company”, “we”, “our”, or “us”) collects, uses, and protects personal data when you visit our website https://isatis.com/ or interact with us.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection laws (The Law on Personal Data Protection of Bosnia and Herzegovina).

By using this website, you acknowledge that you have read and understood this Privacy Policy.

Definitions

For the purposes of this Privacy Policy:

• Personal DataAny information relating to an identified or identifiable natural person.
• ProcessingAny operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• Data SubjectAn identifiable individual whose personal data is processed.
• ControllerThe entity determining the purposes and means of processing personal data.
• ProcessorA third party processing personal data on behalf of the Controller.

Data controller

For the purposes of the GDPR and data protection laws, the data controller responsible for your personal data is:

Scope of this policy

This Privacy Policy applies to personal data collected:

• through our Website
• through email or other direct communication
• through business relationships with clients or partners
• through the use of our services

This policy does not apply to third-party websites linked from our Website.

Personal data we collect

We may collect and process the following categories of personal data:

5.1 Information provided by you

When you contact us or interact with our Website, we may collect: name, email address, and information included in messages or inquiries.

5.2 Automatically collected information

When you visit our Website, we may automatically collect: IP address, browser type and version, device information, pages visited, date and time of visit, referring URLs, and interaction data.

5.3 Cookies and similar technologies

We use cookies and similar tracking technologies to improve website functionality and analyze usage patterns. Further details are available in our Cookie Policy.

Legal basis for processing

We process personal data only when we have a lawful basis under the GDPR, including:

• Legitimate interestProcessing necessary for our legitimate business interests, such as responding to inquiries, improving our Website, and maintaining security.
• ConsentWhere required by law, we process personal data based on your consent, including non-essential cookies and marketing communications.
• Contractual necessityProcessing necessary for entering into or performing a contract.
• Legal obligationProcessing required to comply with legal obligations.

Purpose of processing

We may use personal data for the following purposes:

• responding to contact requests
• providing information about our services
• managing business relationships
• improving our Website and services
• ensuring security and preventing fraud
• complying with legal requirements

Data sharing and disclosure

We do not sell, trade, or rent your personal information to third parties. However, we may share personal data with trusted third parties including:

• hosting providers
• cloud infrastructure providers
• IT support providers
• analytics providers
• legal and professional advisors

These third parties are required to process personal data in accordance with applicable data protection laws and contractual obligations.

International data transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented, including: Standard Contractual Clauses (SCC), adequacy decisions issued by the European Commission, and other lawful mechanisms under GDPR.

Data retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements. Once the retention period expires, personal data will be securely deleted or anonymized.

Security of personal data

We implement appropriate technical and organizational measures designed to protect personal data against:

• unauthorized access
• accidental loss
• destruction or alteration
• unauthorized disclosure

These measures include secure hosting environments, access control, and internal security policies.

Your rights under GDPR

Under the GDPR, you have the following rights:

• Right of accessYou may request confirmation whether we process your personal data and obtain a copy.
• Right to rectificationYou may request correction of inaccurate or incomplete data.
• Right to erasure (“Right to be forgotten”)You may request deletion of personal data where legally applicable.
• Right to restriction of processingYou may request restriction of processing in certain circumstances.
• Right to data portabilityYou may request transfer of your personal data in a structured format.
• Right to objectYou may object to processing based on legitimate interests.
• Right to withdraw consentYou may withdraw consent at any time where processing is based on consent.

Requests can be submitted to: dpo@isatis.com

Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the relevant data protection authority in your country.

Third-party services

Our Website may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any external websites you visit.

Updates to this policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. The updated version will always be available on this page.

Contact

If you have any questions regarding this Privacy Policy or our data protection practices, please contact us: