Privacy policy

Visiting the website, cookies and tracking

This website does not set cookies, does not use analytics, advertising or other tracking tools, and does not load content from other companies, such as maps, videos or fonts from third-party servers. We keep no record of who visited the site.

Your chosen language is shown only in the page address (for example /en) and is not stored on your device. Only in the rare case of a loading error, for example right after we update the site, your browser may remember the page address until you close the tab, so it can reload the page once. This is not a tracking cookie and contains no personal data.

Hosting and security (Cloudflare)

The website is delivered through the network of Cloudflare, Inc. (USA), which acts as our processor. With every visit your browser sends technical data that Cloudflare has to process to show the page and protect it from attacks: IP address, time of access, the page requested, and browser and device type. We do not look at these logs or combine them with other data. Cloudflare keeps them only briefly, as long as needed for security and for running its network.

If Cloudflare detects suspicious or automated traffic, it may temporarily set a security cookie (such as __cf_bm or cf_clearance). It only serves to tell people from bots and is short-lived. Such cookies are strictly necessary for the security of the site, so we do not ask for consent.

Legal basis: our legitimate interest in a website that is available and secure (Article 8(1)(f) of the BiH Law on Personal Data Protection; Article 6(1)(f) GDPR).

Inquiries by email and phone

When you write to us or call us, we process the details you give us: your name, company, email address, phone number, the content of your inquiry and any attachments, such as a logo, a sketch or tender documents. We use them to reply, to prepare an offer and a sample and, if we work together, to handle the order, delivery and invoicing.

Legal basis: steps taken at your request before entering into a contract, and performance of the contract (Article 8(1)(b) of the BiH law; Article 6(1)(b) GDPR). When you write on behalf of a company or institution, the basis is our legitimate interest in replying to and working with that organisation (point (f)). For invoices and other business records, the basis is our legal obligation (point (c)).

You do not have to give us any data, but without contact details we cannot reply. We do not send marketing emails, and we do not make automated decisions or profile anyone.

We receive email through Gmail (Google LLC, USA). We share your details only where necessary: with courier or transport companies for delivery, with our accountants for invoicing, and with public authorities where the law requires it. We never sell them or pass them on for marketing.

WhatsApp, Viber and links to other sites

If you message us on WhatsApp or Viber, the message goes through that service (WhatsApp, part of Meta, or Rakuten Viber), which processes your data under its own privacy rules. You choose to use these apps; if you prefer not to, email or call us instead. We use the content of these messages in the same way as email inquiries.

Links to Instagram, Google Maps, WhatsApp and Viber only open when you click them. You then leave our website, and the privacy rules of those services apply.

Transfers outside Bosnia and Herzegovina and the EU

Cloudflare and Google are US companies certified under the EU-U.S. Data Privacy Framework. The European Commission has found that such companies provide an adequate level of protection (Article 45 GDPR, Implementing Decision (EU) 2023/1795), and the BiH Law on Personal Data Protection recognises that finding for transfers from Bosnia and Herzegovina (Article 47(2)). Cloudflare also uses the EU standard contractual clauses.

Our company is based in Bosnia and Herzegovina. If you contact us from the EU, your details therefore come directly to us in Bosnia and Herzegovina, a country for which the EU has not adopted an adequacy decision. We protect them here in line with this notice and the BiH data protection law, which is aligned with the GDPR.

How long we keep data

Inquiries that do not lead to business are deleted at the latest two years after our last contact. If an order follows, we keep the related correspondence and documents for as long as we work together and statutory periods run, and invoices and other accounting records for at least ten years, as required by the accounting law of the Federation of Bosnia and Herzegovina.

Your rights

You can ask us at any time what data we hold about you and get a copy, have it corrected or deleted, have its processing restricted, or receive it in a common electronic format. You can also object to processing based on our legitimate interest. Just email us at the address below; we reply without undue delay and at the latest within one month.

If you think we process your data unlawfully, you can lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (Dubrovačka 6, 71000 Sarajevo, www.azlp.ba) or go to the competent court. If you live or work in the European Union, you can also complain to the data protection authority in your country.

Changes

If we change how we process data, for example by adding a contact form or analytics, we will update this notice first. The date of the last change is shown at the top of this page.

About this website

The content of this website is for information only and is not a binding offer. Prices, lead times, availability and technical details apply only as stated in a written offer or contract. Product photos are manufacturer photos used for illustration; the markings on the product itself and the manufacturer's documentation are what count.

Our offer is intended for companies, institutions and tradespeople. Texts, drawings and photos of our workshop belong to INKOS. Names and marks of other manufacturers, for example on footwear, belong to their owners and are shown only to identify the products we sell. We try to keep this information accurate and up to date, but we are not liable for errors in it unless caused intentionally or by gross negligence. Use of this website is governed by the law of Bosnia and Herzegovina.

Data controller

We have not appointed a data protection officer because our processing does not require one. For any question about your data, email us at the address above.