Privacy policy

Last updated: 24 October 2026

Spanish Market d.o.o. Sarajevo respects your privacy. This policy explains which personal data we collect through spanishmarket.ba, for what purposes, how long we keep it and what rights you have, in accordance with the Personal Data Protection Law of Bosnia and Herzegovina.

Who is responsible for your data

The controller of your personal data is:

Spanish Market d.o.o. Sarajevo
Bojnička 44, 71000 Sarajevo, Bosnia and Herzegovina
ID number: 4200093060001
[email protected]

Which data we collect

We only collect data that you send us yourself through one of the forms on the site:

  • Contact form: name, email address, topic and message.
  • "Become a partner" form: name, company, country, email address, phone (optional), product category and message.
  • "For customers" form: venue name, type and city, contact person, phone and email address (optional).
  • Job application: name, email address, phone, city, the position you are interested in and your CV with the data you include in it.
  • Technical data: IP address and time of the form submission, and the usual data a browser sends when visiting a website.

Please do not send us special categories of personal data, such as data on health, religion or political opinions, especially not in your CV.

Purpose and legal basis

  • Answering your inquiry and communicating with you: based on the consent you give when submitting the form.
  • Considering business cooperation with principals and customers: to take steps at your request before entering into a contract.
  • Selecting job candidates: based on your consent.
  • Protecting the site and forms against abuse and spam (IP address, submission limits): based on our legitimate interest.
  • Meeting legal obligations, where we have them.

How data is sent and who can access it

Form data is sent over an encrypted connection (HTTPS) to an email service that delivers it to Spanish Market's official email address. Only employees who need the data to answer the inquiry or to select candidates have access to it.

For the technical operation of the site we use external service providers (processors) who process data only on our instructions: the hosting provider, the form processing service and the email delivery provider. Some of them may process data outside Bosnia and Herzegovina; in that case the transfer is made with the safeguards required by law.

We do not sell your data or share it with third parties for marketing purposes.

How long we keep data

  • A copy of the message is kept encrypted in the form processing service for at most 90 days, as a delivery record and for abuse protection, and is then deleted automatically. An attached CV is deleted from the service as soon as it has been delivered.
  • We keep inquiries and business correspondence for as long as needed to answer and for any cooperation, and at most two years after the last contact, unless the law requires a longer period.
  • We keep job applications until the selection is complete, and open applications for at most 12 months, after which we delete them.

Cookies and external content

The site does not use cookies for analytics or advertising and does not track you across pages. Fonts are loaded from our own server.

On the Contact page we show maps from Google Maps. When a map loads, your browser connects to Google's servers, and Google may process your IP address and set cookies in accordance with its own privacy policy.

Your rights

Regarding your personal data, you have the right to:

  • find out whether we process your data and access it;
  • have inaccurate data corrected or incomplete data completed;
  • request erasure of your data or restriction of processing;
  • object to processing based on legitimate interest;
  • receive your data in a common electronic format;
  • withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

You can send a request to the email address above or by post to our registered address. We will reply within the statutory deadline.

If you believe that your data is not processed lawfully, you can file a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (azlp.ba).

Data security

We apply appropriate technical and organisational measures: an encrypted connection, encrypted storage of messages and attachments in the form processing service, and restricted access to the data.

Changes to this policy

We may update this policy from time to time, for example when we introduce new services or tools. The current version and the date of the last change are always published on this page.