This Privacy Policy (“Policy”) describes how Rakić Advisory d.o.o. Banja Luka (“Rakić Advisory”, “we”) collects and processes personal data of natural persons (e.g., website visitors, contact persons of clients and suppliers, job applicants, and other individuals we communicate with). The purpose of this Policy is to provide clear information about which data we process, for what purposes, on what legal basis, how long we retain it, to whom we disclose it, and what rights you have.
We apply the applicable regulations of Bosnia and Herzegovina on personal data protection and, where applicable, standards from the General Data Protection Regulation (GDPR), especially in the areas of transparency and informing data subjects.
Controller: Rakić Advisory d.o.o. Banja Luka.
Data protection contact: info@rakicadvisory.com (please indicate “Data Protection” in the subject line).
This Policy applies in particular to:
Depending on the specific relationship, we may process:
We most often obtain data:
We process your data only when we have an appropriate legal basis, in particular for the following purposes:
Purpose: handling inquiries, preparing offers, negotiations, performance of contracts for tax advisory, accounting and related services, and communication during engagement.
Legal basis: necessity for the performance of a contract or for taking steps at your request prior to entering into a contract.
Purpose: compliance with obligations arising from tax, accounting, contract and other regulations (e.g., records, document retention, responding to requests from competent authorities).
Legal basis: legal obligation.
Purpose: protecting IT systems and the network, preventing misuse, keeping communication records to protect legal interests, internal quality control, risk management and claims management.
Legal basis: legitimate interest, with a balancing test where applicable.
Purpose: sending professional updates, event invitations, and similar information about our work and services.
Legal basis: consent (where required) or legitimate interest for business (B2B) communication, in accordance with applicable regulations. You can request to stop receiving such communications at any time.
Purpose: processing applicants’ submissions, assessing qualifications, scheduling interviews, and making hiring decisions. We receive applications (CV and supporting documents) by email.
Legal basis: taking steps prior to entering into a contract; after the selection process ends, we retain documentation only for a reasonable period for record-keeping and protection against potential legal claims, and longer only with your explicit consent.
We may make your data available only to persons who need it to achieve the processing purposes, including:
Where applicable, we enter into appropriate data processing/confidentiality agreements with processors.
As a rule, we process data in Bosnia and Herzegovina. However, certain IT services (e.g., email/hosting) may involve processing or storage outside Bosnia and Herzegovina/EEA. In such cases, we take measures to ensure transfers are lawful and protected (e.g., contractual clauses, risk assessments and appropriate technical measures), in line with applicable regulations.
We retain data only as long as necessary for the processing purpose, unless regulations require longer retention. Typically:
If we cannot specify an exact retention period in advance, we apply the following criteria: the nature and purpose of the data, legal obligations, limitation periods and dispute risks, and the principle of minimization (we keep only what is necessary).
We apply appropriate technical and organizational security measures (access control, authorization restrictions, passwords and authentication, encryption where justified, backups, antivirus/antimalware, confidentiality training, physical security of premises). However, no system is absolutely secure; if an incident occurs that may result in a risk to your rights and freedoms, we will take measures in accordance with regulations, including notifying competent authorities and/or individuals, where required.
We use only essential (technical) cookies on our website to enable basic site functionality and protect session security. We do not use analytics or marketing cookies (e.g., Google Analytics, Meta Pixel, etc.).
You can configure your web browser to refuse or delete cookies. Please note that disabling essential cookies may affect the functionality of certain parts of the website.
In addition to cookies, our servers may automatically record technical logs (e.g., IP address, access time, browser type) solely for system maintenance and security and for troubleshooting.
In accordance with applicable regulations, you have the right to:
To exercise your rights, contact us at info@rakicadvisory.com with “Data Protection” in the subject line. For protection purposes, we may request additional identity verification.
If you believe your data is being processed contrary to regulations, you have the right to lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina (AZLP).
Our services are primarily intended for business entities. We do not knowingly target the collection of children’s data. If you believe we have collected a minor’s data by mistake, please contact us so we can delete it or align the processing accordingly.
We may update this Policy from time to time to ensure compliance with regulations or changes in our processes. We will publish the updated version on our website with the date of the last update.
