This policy explains which personal data Društvo sa ograničenom odgovornošću za proizvodnju, promet i usluge „MILKUS" collects through the website milkus-pale.com, why it is used, how long it is kept and what rights you have. It follows the Personal Data Protection Act of Bosnia and Herzegovina (Official Gazette of BiH, No. 12/25).
1. Who is responsible for your data
The data controller is Društvo sa ograničenom odgovornošću za proizvodnju, promet i usluge „MILKUS", Ljubogošta bb, 71420 Pale, Bosnia and Herzegovina, company ID (JIB) 4400568820005.
E-mail: maksim_milkus@teol.net
Phone: +387 57 200-733
We have not appointed a data protection officer, because the processing carried out through this website is neither regular nor large-scale. For any question about your data, use the contact above.
2. What we collect and why
Visiting the website
When you open the site, the server automatically records your IP address, the date and time of access, the page opened, the address you came from and browser details. We use this only to keep the site running and secure, for example to detect attacks and errors.
Enquiries through the contact form
When you send an enquiry through the form, we process the subject of the enquiry, your name or company name, e-mail address, phone number if you give one, and the content of your message. We also record the IP address the message was sent from and the time it was sent, to prevent abuse of the form.
The message reaches us as an e-mail at the address of the business unit responsible for that subject. We use it to answer you and, if you wish, to prepare an offer.
Enquiries by e-mail or phone
If you write or call the numbers published on the site, we process the data you give us in that message or conversation. We do not record calls.
Cookies
This website sets no cookies and uses no visitor tracking, so we do not ask for consent and have no cookie banner. Details are in the Cookie Policy.
3. Who else receives your data
We do not sell your data and do not give it to others for their marketing. Access is limited to:
- the software agency „THINK" Momir Cerovina s.p., Bijeljina (think.ba), which hosts and maintains the site as our processor, under a data processing agreement;
- Hetzner Online GmbH, Germany, where the server is located, as a sub-processor of think.ba;
- the e-mail providers hosting our recipients' mailboxes; passenger transport enquiries arrive at a Gmail address, so Google processes them as the service provider;
- public authorities, only where the law requires it.
4. Transfers abroad
The server running this website is located in Germany (Falkenstein), at Hetzner Online GmbH. Passenger transport enquiries arrive at a Gmail mailbox, so Google may process them outside Bosnia and Herzegovina, including in the United States.
As at the date of the last change to this policy, the Council of Ministers of Bosnia and Herzegovina has not adopted an adequacy decision for those countries. The transfer rests on appropriate safeguards under the Act: the data processing agreement concluded with think.ba and the contractual clauses applied by Hetzner and Google. You may request a copy of those safeguards at the address in section 1.
5. How long we keep data
Retention periods are given with each purpose in section 2. Once a period ends we delete the data or anonymise it permanently. Backups of the site are made daily and kept for 30 days, so data in a backup disappears at most 30 days after deletion.
6. Your rights
You have the right to:
- request access to your data and a copy of it (Article 17);
- request correction of inaccurate data (Article 18);
- request erasure (Article 19);
- request restriction of processing (Article 20);
- receive your data in a machine-readable format and transfer it to another controller (Article 22);
- object to processing based on legitimate interest (Article 23);
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Article 9).
Send your request to maksim_milkus@teol.net. We reply free of charge within 30 days at the latest. In complex cases the deadline may be extended by a further 60 days, and we will tell you (Article 14). We may ask you to confirm your identity.
We do not make decisions about you based solely on automated processing, including profiling.
7. Complaint to the Agency
If you believe we process your data unlawfully, you may complain to the Personal Data Protection Agency of Bosnia and Herzegovina (azlp.ba) or bring an action before the competent court. Please contact us first — most questions can be settled straight away.
8. Do you have to give us data
Giving us data is voluntary. Without a name and a contact we cannot answer your enquiry. The phone number is optional.
9. Children
This site is not intended for children under 16 and we do not knowingly collect their data. If we learn that we have received such data without parental consent, we delete it.
10. How we protect data
- The site runs over an encrypted connection (HTTPS), and http is redirected to https.
- The contact form is protected by a hidden field and a timing check, without external services such as Google reCAPTCHA, so visitor data is not sent to third parties.
- Fonts, libraries and video are served from our own server, not from foreign networks.
- Only authorised persons have access to the server, each with a separate account and password.
- The operating system and PHP are updated regularly, and backups are made daily.
11. Changes to this policy
We update this policy when the way we process data changes. The current version is always on this page, with the date of the last change at the top.