Your data, handled with care.
How ITO processes personal data on the RENATA website. Clear, short and without small print.
Who is responsible
The controller for personal data processed through this website is IT Odjel Mostar d.o.o. (ITO), Mostar, Bosnia and Herzegovina, the company behind RENATA Cybercop.
For any question about your personal data, contact us at info@ito.ba or +387 36 830 003.
What this notice covers
This notice explains how we process personal data when you visit this website or send us a request, for example a request for a briefing.
It does not cover data processed inside RENATA installations. There, the client institution is the controller and ITO acts only on its instructions, under a contract. See the Trust Center for details.
What data we process
Briefing and contact requests: name, position, organisation, country, official e-mail address, phone number (optional), your areas of interest, preferences and the message you send us.
Website operation: technical data such as IP address, browser type and time of access, which our servers need to deliver the website securely.
Statistics: anonymous, aggregated visit statistics without cookies and without identifying you.
Why we process it and on what legal basis
To answer your request and organise a briefing, based on your consent and on steps taken at your request before a possible contract.
To keep the website secure and available, based on our legitimate interest in protecting our systems.
To understand, in aggregate, which content is useful, based on our legitimate interest. No profiles are created.
How long we keep it
Data from briefing and contact requests is kept for 12 months after our last contact, unless a business relationship follows, in which case the retention rules of that relationship apply.
Technical server logs are kept only as long as needed for security and are then deleted.
How we protect it
ITO is certified to ISO/IEC 27001 for information security and ISO/IEC 27701 for privacy management. Data is transmitted encrypted, access is limited to authorised staff and every access is logged.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing and to receive it in a portable format. You can withdraw your consent at any time, without affecting processing that took place before.
To exercise your rights, write to info@ito.ba. You also have the right to lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina or with the supervisory authority in your country.
Changes to this notice
We may update this notice when our services or the law change. The date of the latest version is shown at the top of this page.
Questions about privacy or security? Write to info@ito.ba or visit the Trust Center.
