Privacy Policy

1. Introduction

Integris Group d.o.o. takes the protection of personal data seriously. We process personal data in line with the applicable data protection laws, in particular:

• the EU General Data Protection Regulation (GDPR),
• the Swiss Federal Act on Data Protection (DSG) and its implementing provisions, and
• the Personal Data Protection Act of Bosnia and Herzegovina.

This Privacy Policy explains which personal data we process when you use our website and how we handle that data. It does not constitute legal advice.

2. Data We Process

We only process personal data to the extent necessary to operate this website and to respond to inquiries.

2.1 Data collected automatically

When you access our website, technical information may be stored in server log files, such as:

• IP address (where possible stored in shortened or anonymised form),
• date and time of access,
• pages accessed,
• browser type and version,
• operating system and device type,
• referring website (referrer URL).

These data are used for the technical operation of the website, to ensure security and stability, and for error analysis. They are not used to identify individual users, unless this is necessary to clarify security incidents.

2.2 Data you provide to us

If you contact us (for example by email or via a contact form), we may process:

• name,
• email address,
• company name,
• subject and content of your message,
• any other information you voluntarily choose to provide.

We use this data solely to process and respond to your request and, where applicable, to prepare or perform a contract.

3. Purposes of Processing

We process personal data in particular for the following purposes:

• enabling and maintaining the technical operation of the website,
• responding to inquiries and communicating with users and clients,
• preparing and performing contractual relationships,
• fulfilling legal obligations and documentation requirements,
• protecting legitimate interests such as IT security, fraud prevention and service improvement.

We do not use personal data for automated decision-making or profiling within the meaning of GDPR.

4. Legal Basis

Depending on the specific situation and applicable law, the processing of personal data is based on:

• GDPR Art. 6(1)(b): performance of a contract or steps prior to entering into a contract,
• GDPR Art. 6(1)(f): legitimate interests (e.g. website security, communication, service maintenance),
• Swiss DSG: processing in accordance with the principles of lawfulness, good faith and proportionality,
• applicable provisions of the Personal Data Protection Act of Bosnia and Herzegovina.

Where we rely on legitimate interests, we balance these interests against the rights and expectations of the data subjects.

5. Third-Party Service Providers

For hosting and operating this website and for communication we may use external service providers (processors), such as:

• website hosting providers,
• email service providers.

If we use analytics tools, chat tools or other third-party services that process personal data, these services will be listed here or in an updated version of this Privacy Policy, including information about their role and location.

We do not sell personal data and do not share personal data with third parties for their own marketing purposes.

6. Data Storage and Retention

We store personal data only for as long as it is necessary for the purposes described in this Policy or as required by applicable law.

This may include, for example:

• correspondence data: for the duration of the communication and any subsequent retention period required by law,
• contractual data: for the duration of the contract and the statutory retention periods,
• server log files: typically for a limited period required for security and technical reasons (depending on the hosting provider).

After these periods, data are deleted or anonymised where technically and legally possible.

7. Data Transfers

Our website is operated from Bosnia and Herzegovina. Depending on where you access the site from, personal data may be transferred across borders (for example between BiH, EU and Switzerland).

Where we use service providers or where access from Switzerland or the EU occurs, we seek to ensure adequate protection of personal data through appropriate safeguards, such as:

• contractual arrangements with service providers,
• use of providers in countries with an adequate level of data protection where possible,
• technical and organisational security measures.

8. Your Rights

Subject to applicable law, you may have the following rights in relation to your personal data:

• right of access to the data we hold about you,
• right to rectification of inaccurate or incomplete data,
• right to erasure (“right to be forgotten”) where legal requirements are met,
• right to restriction of processing,
• right to data portability,
• right to object to processing based on legitimate interest,
• right to withdraw consent, where processing is based on consent.

To exercise your rights, you can contact us at any time at: info@integrisgroup.ch.

We may need to verify your identity before responding to your request. Legal retention obligations or other legal grounds may prevent immediate deletion in some cases.

9. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure; absolute security cannot be guaranteed.

10. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time, for example if our data processing changes or if legal requirements are updated. The current version as published on this website applies.

11. Contact for Data Protection

Integris Group d.o.o.

Data Controller: Lorenz Schaffner
Srdjana Aleksica 14
71000 Sarajevo
Bosnia and Herzegovina

Email: info@integrisgroup.ch