Introduction – What is considered personal data on this website

For the purposes of this Privacy Policy, personal data means any information relating to an identified or identifiable natural person that is collected or processed when using the MKF EKI website.

When using the website, personal data may include information voluntarily provided by the user through the contact form or other communication channels (such as full name, email address, phone number, and message content), as well as technical data generated during the visit to the website (such as IP address, device type, internet browser, time and duration of the visit, and information about visited pages).

This Privacy Policy applies exclusively to the processing of personal data in connection with the use of the website and does not apply to the processing of personal data within credit operations, contractual relationships, or other business processes of MKF EKI, which are governed by separate internal acts, contracts, and published documents on this website in the sections Personal Data Processing and Terms of Use.

Data Controller

The Data Controller responsible for the processing of personal data is MKF EKI Sarajevo, with its registered office in Bosnia and Herzegovina, which manages and maintains this website.

MKF EKI processes personal data in a lawful, fair, and transparent manner, applying appropriate technical and organizational measures to ensure data protection.

Transparency and User Information

MKF EKI ensures that website users are clearly and understandably informed about the processing of personal data before or at the time of data collection.

Information provided includes the identity of the Data Controller, purposes of processing, legal basis, categories of data, retention periods, and user rights.

Data Minimization

MKF EKI collects and processes only personal data that is necessary for a specific processing purpose.

Data that is not required for the functionality of the website or communication with the user is not collected.

What Personal Data We Collect

When visiting the website, technical data may be automatically collected through information systems, including the IP address, device type, internet browser, date and time of visit, duration of visit, visited pages, and system log records.

This data is used solely for system security, technical maintenance, and statistical analysis of website usage.

When a user voluntarily provides data through a contact form or email, the following data may be collected: full name, email address, phone number, and message content.

This data is used exclusively for communication, responding to inquiries, and recording requests.

Purpose and Legal Basis for Processing Personal Data

Personal data is processed in accordance with applicable personal data protection regulations, in particular the Law on Personal Data Protection of Bosnia and Herzegovina.

The legal basis for processing may include the user's consent, the legitimate interest of the Data Controller (such as website security and functionality), or a legal obligation.

Personal data is processed only to the extent necessary to achieve the stated purposes.

Logging and Security Records

For the purpose of ensuring system security and stability, the website may automatically record technical logs, including IP address, access time, and technical data about the device and browser.

This data is used exclusively for system protection, detection of technical issues, and optimization of website functionality.

Disclosure of Data to Third Parties

Personal data is not disclosed to unauthorized third parties.

Data may be made available to IT and hosting service providers, authorized technical partners responsible for maintaining the website, and competent authorities when required by law.

All third parties are required to ensure confidentiality and protection of personal data.

Use of Cookies

The website uses cookies and similar technologies for functionality, security, and website usage analysis.

Detailed information about cookies, their types, and management is available in a separate Cookie Policy.

Essential cookies are necessary for the operation of the website.

Functional and analytical cookies are used only with the user's consent where applicable.

Users may manage cookies at any time through their browser settings or through the Cookie Policy.

Data Security and Integrity

MKF EKI applies appropriate technical and organizational measures to protect personal data in order to ensure confidentiality, integrity, and availability of data.

Measures include access control, system protection, data backup, and monitoring of system access.

Retention Period of Personal Data

Personal data collected through the website is retained for a maximum period of six (6) months from the date of collection, or for a shorter period, unless legal regulations or justified reasons (such as a security incident or legal proceedings) require longer retention.

After the retention period expires, the data is deleted or anonymized.

User Rights Regarding Personal Data

Users have the right, in accordance with applicable personal data protection regulations, to exercise the following rights:

right of access to personal data
right to rectification of personal data
right to erasure of personal data
right to restriction of processing
right to object to processing
right to withdraw consent where processing is based on consent

Data Protection Officer (DPO)

For all questions regarding the processing and protection of personal data, as well as for exercising your data protection rights, users may contact the Data Protection Officer (DPO) directly using the contact details below.

MKF EKI
Data Protection Officer (DPO)

Mehmedalije Maka Dizdara 29,
75000 Tuzla
Bosnia and Herzegovina
Email: szzlp.mkf@eki.ba

Users also have the right to submit a complaint to the competent supervisory authority.

Privacy Contact

For general questions related to privacy and the use of the website, users may contact the following email address: privacy@eki.ba

Governing Law

This Privacy Policy shall be governed by the laws of Bosnia and Herzegovina.

Informational Nature of Website Content

The content of this website is provided for informational purposes only and does not constitute an offer, advice, legal opinion, or financial recommendation.

English Language Version

This document represents the English version of the Privacy Policy adopted by the competent authority of the Company. In case of any discrepancy, the Bosnian language version shall prevail.