Privacy Policy
Last updated: 07.10.2026.
This policy explains which personal data ELAS d.o.o. collects through the website www.elas.ba, why, how long it is kept and what rights you have. Data is processed in accordance with the Law on Personal Data Protection of Bosnia and Herzegovina and the EU General Data Protection Regulation (GDPR).
1. Controller
ELAS d.o.o., Ramićka 32, 78000 Banja Luka, Republika Srpska, Bosnia and Herzegovina.
Phone: +387 51 378 200. Email for privacy questions: info@elas.ba.
2. What we collect and why
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | name, email, message | answering your enquiry, preparing an offer | steps prior to a contract at your request; legitimate interest in answering enquiries |
| Job application (Careers) | name, email, position, CV, additional information | selecting candidates for the advertised position | steps prior to an employment contract at your request |
| Job application – kept for future openings | as above | considering you for future openings | your consent (separate, unticked checkbox in the form) |
| Analytics cookies (Google Analytics) | pseudonymous identifier, pages visited, device and browser, approximate location | visit statistics and improving the website | your consent via the cookie banner |
| Vercel Analytics | pages visited, device and browser, country (no cookies, no persistent identifier) | basic visit and performance statistics | legitimate interest in running and measuring the website |
| Server logs | IP address, time of access, browser | security and proper operation of the website | legitimate interest |
We do not use your data for automated decision-making or profiling.
3. How long we keep data
- Contact form enquiries: for as long as the correspondence lasts and no longer than 2 years after the last message, unless the enquiry leads to a contract (statutory retention periods for business records then apply).
- Job applications: until the selection process ends and no later than 6 months after it.
- Job applications with consent for future openings: up to 2 years, or until you withdraw consent.
- Google Analytics: no longer than 14 months.
- Your cookie choice on your device: until you delete or change it.
4. Recipients and transfers
We do not sell your data or share it with third parties for marketing. We use the following service providers, who process data on our behalf:
- Google Ireland Ltd. / Google LLC (USA) – Google Analytics (only with your consent) and Google Maps (only when you click “Show map”).
- Vercel Inc. (USA) – website hosting and Vercel Analytics.
- Sanity AS (Norway) and its sub-processors – content management system; images are delivered from cdn.sanity.io, which receives your IP address.
- The email provider through which we receive contact and job application messages.
Transfers to the USA rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
5. Cookies and similar technologies
Necessary items are always set. Analytics cookies are set only if you allow them in the cookie banner; until then the Google scripts are not loaded at all. You can change or withdraw your choice at any time through the “Cookie settings” link in the footer.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| elas_cookie_consent | localStorage | elas.ba | Stores your cookie choice | until deleted |
| darkMode | localStorage | elas.ba | Stores the dark theme setting | until deleted |
| _ga | cookie (analytics) | Distinguishes visitors | 2 years | |
| _ga_<ID> | cookie (analytics) | Keeps session state | 2 years | |
| NID and similar | cookie | Google Maps, only after clicking “Show map” | up to 6 months |
We do not currently use marketing cookies. Vercel Analytics does not use cookies.
6. Your rights
Regarding your personal data, you have the right to:
- access your data and obtain a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Send your request to info@elas.ba. We will reply within 30 days.
If you believe the processing is unlawful, you may lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (www.azlp.ba) and, if you live in the EU, with the supervisory authority in your country.
7. Changes
We may update this policy from time to time. The date of the last change is shown at the top of the page.
