Privacy Policy

Version date: 25 September 2026 • Company: Niatel d.o.o. Sarajevo

1. Who Processes Data and What this Policy Covers

Niatel d.o.o. Sarajevo, Milana Preloga 12A, 71000 Sarajevo, Bosnia and Herzegovina (“Niatel”, “we”) is responsible for the processing of personal data described in this Policy. You can contact us at info@niatel.ba or +387 (0)33 713-230.

This Policy explains what happens to personal data when you visit the Website niatel.ba/niatel.com.ba, use its functions, send us an inquiry through the contact form, or contact us using the contact details published on the Website. It applies to natural persons, including persons who contact Niatel on behalf of a legal entity or an institution.

Here we describe processing connected with the Website and initial communication. If an inquiry develops into a separate business relationship, data necessary for carrying it out, accounting, or fulfilling other legal obligations is processed according to the rules applicable to that relationship. This Policy does not govern recruitment procedures or other separate procedures of Niatel.

2. What Data We Receive

When you contact us, we may receive your first and last name, business or other email address, telephone number, organization name, position, the content of your inquiry, and information you enter yourself in the message. If you contact us on behalf of another natural or legal person, we may also receive data from that natural or legal person. Information you voluntarily send may include details needed to prepare information or an offer.

When you use the Website, hosting and security systems may process your IP address, browser and device information, access time, requested page, referring page, and records of errors or security events. This is necessary to deliver the Website, troubleshoot problems, and protect against abuse.

The consent-management system remembers your choice regarding optional technologies. If you enable statistics or external services, additional technical data described in section 4 of this Policy is generated.

Through the public contact form, we do not ask for a unique personal identification number, date of birth, identity-document number, health data, biometric data, or other particularly sensitive data. Please do not send such data unless it is necessary for your inquiry and its submission has been agreed in advance.

3. Why We Process Data and on What Basis

Operation and protection of the Website. We use technical data and security logs to display the Website, maintain it, detect errors, and prevent abuse. The basis is our legitimate interest in a functional and secure Website, with appropriate consideration of your rights.
Responding to inquiries. We use contact details and message content to respond, provide requested information, or prepare an offer. If you, as a natural person, request steps before a possible contract is concluded, the basis may be those steps taken at your request. For business inquiries and general communication, the basis is our legitimate interest in responding and conducting business correspondence.
Compliance with law and protection of rights. We may use certain data where necessary to comply with a legal obligation or to establish, exercise, or defend a legal claim, in accordance with the appropriate legal basis.
Statistics and external services. We enable Cloudflare Web Analytics, Google Maps, and Google reCAPTCHA only after your choice for the relevant optional category or individual service. Where personal-data processing is based on your consent, you can withdraw it at any time.
Newsletter. If you voluntarily subscribe to Niatel’s Newsletter, we use the data necessary for sending and administering the subscription on the basis of your consent. You can cancel your subscription at any time.

The data requested in the contact form is provided voluntarily, but without the data necessary to respond we will not be able to process the inquiry. You do not have to enable optional statistics or external services in order to browse the Website. If you do not enable reCAPTCHA, the contact form will not be available for submission, but you can contact us by email at info@niatel.ba.

4. Cookies, Statistics, and Google Services

We use Complianz to remember consent choices. Its necessary technologies allow the Website to remember which categories or services you accepted or rejected.

Cloudflare Web Analytics provides information about visits to and operation of the Website through a script that does not use analytics cookies or browser local storage to collect statistics. On our Website, this script loads only after the Statistics category is selected.

Google Maps displays our location, and Google reCAPTCHA v3 protects the contact form from automated messages. These services do not load before you enable the relevant service. After they are enabled, Google may receive, for example, your IP address and browser information and may use its own cookies or similar technologies. Information about Google’s processing is available in Google’s Privacy Policy.

You can reject optional services or later disable them through the permanently available Cookie Settings option. Withdrawal of consent prevents their future loading but does not invalidate processing carried out before withdrawal. For more about the technologies, their duration, and managing your choice, see our Cookie Policy.

5. Contact by Form and Email

A message sent through the form is delivered to the email address info@niatel.ba. This process uses hosting and mail-delivery infrastructure and our Microsoft 365 / Outlook business email system. We use the data from the message to respond to and follow up on the inquiry. The exchange of an inquiry or information about an offer through the Website and email does not by itself mean that a contract with Niatel has been concluded.

If your inquiry develops into an offer, contract, complaint, dispute, or another matter requiring a separate record, we may separate the relevant data from ordinary correspondence and retain it according to the legal basis and retention period applicable to that matter.

7. Who May Have Access to Data

We do not sell data or provide it to third parties for their advertising. To the extent necessary for the described purposes, data may be accessible to:

BH Telecom, for Website hosting and part of the email-delivery infrastructure;
Microsoft, for business email through Microsoft 365 / Outlook;
providers of Website maintenance, security, and backups, including tools that protect the Website from abuse;
Cloudflare, if you enable statistics;
Google, if you enable Maps or reCAPTCHA;
Mailchimp, if you subscribe to the Newsletter; and
competent authorities or professional advisers where necessary and where an appropriate legal basis exists.

Service providers that process data on our behalf may use it in accordance with their contracted tasks and applicable law. Certain external providers may, in connection with their services, also process data under their own rules; their role depends on the specific service.

8. Transfers to Other Countries

Microsoft, Cloudflare, Google, and Mailchimp may, depending on the service and their infrastructure, process data or access it outside Bosnia and Herzegovina. This does not mean that every item of data is sent to the same country or that all listed services load on every visit.

When Niatel transfers personal data to another country, the transfer is carried out only under the conditions prescribed by the Law on the Protection of Personal Data of Bosnia and Herzegovina: on the basis of an appropriate adequacy decision, with prescribed safeguards, or in another case permitted by law. If contractual safeguards apply to a particular transfer, we will, upon request, provide you with information about them and how to obtain a copy or where they are available. Write to us at info@niatel.ba and identify the service to which your inquiry relates.

9. How Long We Keep Data

Inquiries through the contact form and email: up to 12 months after the last exchange of messages, after which they are deleted, unless they are connected with an offer, contract, complaint, legal claim, or another matter for which a separate retention basis exists.
Routine server and security logs: up to 6 months. Records needed to handle a particular security event or legal claim may be separated and kept longer for as long as a justified need exists.
Consent choices: records in the browser may be retained for up to 12 months unless you change or delete them earlier.
Website backups: up to 90 days in the normal recovery cycle; an individual copy needed for verification, recovery, or a legal claim may be kept longer only for as long as a justified need exists.
Newsletter: data is used while the subscription is active. After unsubscribing, only a minimal record necessary to respect the opt-out or comply with a legal obligation may remain.

Data separated from an inquiry because it became part of a separate business or legal matter is retained according to the rules applicable to that matter, rather than according to the inquiry period above. When data is no longer needed and no other basis for retention exists, we delete it or make it permanently anonymous. Retention periods applied by a particular external provider to its own processing can be found in that provider’s rules or requested from us.

10. Data Security

We apply appropriate organizational and technical measures to protect data, including access controls, protection of data in transit, system maintenance, and backups. We adapt the measures to the type of data and the risks of processing. No internet system can be protected against every possible threat, but this does not reduce our obligations under the law.

11. Your Rights

Subject to the conditions prescribed by the Law on the Protection of Personal Data, you may request access to your data, correction of inaccurate data, erasure, restriction of processing, and data portability, and you may object to processing based on legitimate interests. If data is used for direct marketing, you have the right to object to such processing at any time.

Where processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before that point. You can change consent for optional Website services through Cookie Settings, and for the Newsletter you can use the unsubscribe link or write to us at info@niatel.ba.

We do not use the Website for decisions that produce legal or other significant effects for you solely on the basis of automated processing. Google reCAPTCHA may technically assess the risk of form abuse; if the protection prevents you from submitting the form, you can contact us by email.

Send a request to exercise your rights to info@niatel.ba. If necessary, we may request additional data only to verify your identity. We will inform you of the action taken without undue delay, and no later than 30 days after receiving the request. If the request is complex or there are multiple requests, the statutory period may be extended by 60 days; we will inform you within the first 30 days and explain the reason.

12. Complaint to the Agency and Judicial Protection

If you believe that your data is being processed contrary to law, you may contact the Personal Data Protection Agency in Bosnia and Herzegovina through azlp.ba or initiate proceedings before the competent court. You may contact us first so that we can try to resolve the issue, but this is not a condition for contacting the Agency or the court.

13. External Links and Children

The Website may contain links to websites of other organizations. Clicking such a link takes you to a service with its own privacy rules; before providing data, review those rules.

The Website is primarily intended for a business audience and is not specifically directed at children. We do not ask children to provide us with personal data through the Website. If we learn that we have received a child’s data without an appropriate basis, we will act in accordance with the law.

14. Changes to this Policy and Contact

We may update this Policy when the Website, the services it uses, or legal requirements change. The version date is stated at the beginning. Where consent is required for new processing, we will request it before that processing begins.

For questions about this Policy or data processing, contact us:

Niatel d.o.o. Sarajevo
Milana Preloga 12A
71000 Sarajevo
Bosnia and Herzegovina
Email: info@niatel.ba
Phone: +387 (0)33 713-230