Privacy Policy

1. Data controller and contact

Digital X is a business brand for digital, web, marketing and AI services with the headquarters of business in Sarajevo, Bosnia and Herzegovina. Full identification of the contract party is indicated in the offer, contract and/or account before the obligation to pay.

Contact for privacy questions: info@digitalx.ba · +387 64 438 35 66.

2. Legal framework

We are in line with the Data Protection Act of Bosnia and Herzegovina ("Official Gazette of BiH", No. 12/25), and when applicable also with the EU General Data Protection Regulation (GDPR) and other mandatory regulations.

3. Data we can collect

• Contact details: name, name of the company, email, phone, message and selected service.
• Audit data: The URL of the page you want to analyze, the email to deliver the results and the technical result of the analysis.
• Information on the offer and the project: requirements, budget, deadline, project communication, documentation, access and feedback necessary for delivery.
• Transaction and administrative data: offer, contract, account, status of payment and data required for accounting.
• Technical data: IP address, access time, device type and browser, approximate location, visited pages, source of visit and security records.
• Organisation your choice of necessary, analytical and advertising categories.

By public means, do not send passwords, card numbers, health information, identity documents or other sensitive information that is not required for the request.

4. Purposes and legal basis

• the response to the request, the preparation of tenders and the actions before the conclusion of the contract;
• the provision of services, communication, support, payment and project management;
• compliance with legal, tax and accounting obligations;
• the security of the site, the prevention of abuse and the protection of legal requirements;
• the measurement of visits and the improvement of the site after appropriate consent;
• marketing and marketing only when there is valid consent or other legal basis.

When the processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the legality of the processing performed before withdrawal.

5. Providers and services

We do not sell personal data. To the extent necessary for the operation of the site and the provision of services, data can be available to host and infrastructure providers, email and communication services, analysts, automation, accounting and professional associates who have an appropriate obligation of confidentiality.

The site uses Vercel for hosting and technical delivery, Google Tag Manager and Google Analytics 4 to measure when the appropriate consent is given, and external communication services when the user chooses them.

6. International transfer

Some providers may process data in the European Economic Area or other countries. When an international transfer is needed, available legal, contractual and organisational measures, including appropriate standard contractual clauses or other recognised mechanisms, are applied.

7. Storage periods

We only store data for the purpose of collecting. Request without complete cooperation is periodically deleted or anonymized. Project, contractual, tax and accounting data are stored during co-operation and legal deadlines. We store marketing data until the consent or termination of the justified purpose is withdrawn. Security records are stored for limited time needed to protect the system.

8. Your Rights

Depending on applicable regulations and circumstances, you can request access, copy, correction, deletion, processing restriction and data transferability, and submit an objection. You can also withdraw the consent.

To exercise your right, write on info@digitalx.baTo protect data we can request a reasonable confirmation of identity. You have the right to address and Data Protection Agency in Bosnia and Herzegovina.

9. AI tools and automated processing

On the public site we do not make decisions with legal or similar significant consequences exclusively automated processing. When used in the project, the scope, sources, roles, approvals and human control are defined according to a concrete solution.

10. Security

We apply reasonable technical and organisational measures, including HTTPS, restricted access, minimization of data, control of secret and backups when they are applicable.

11. Children

Services and forms are not directed to children. We do not collect conscious data of children without the proper consent of parents or guardians when needed.

12. Amendments

We can update the policy to change functions, providers or regulations. An important version and date are always posted on this page.

Details of measurement technologies are in Cookie policiesLook at that. Legal information t Terms of Use.

The document is a general framework and needs to be aligned with final registration data, contracts and really active integrations.