Privacy policy

This notice explains what personal data Indevico collects on indevico.com, why we use it, who receives it, and how you can exercise your rights.

1. Who we are

The controller of personal data processed through this website is Indevico, with its seat in Sarajevo, Bosnia and Herzegovina.

• Email: hello@indevico.com
• Phone: +387 61 288 282
• Website: https://www.indevico.com

We process personal data in line with the Law on Personal Data Protection of Bosnia and Herzegovina (Official Gazette of BiH no. 12/25) and, where it applies, the EU General Data Protection Regulation (GDPR) — for example when we offer services to people in the European Economic Area.

2. What this covers

This policy applies to personal data collected through:

• browsing indevico.com and the Bosnian version at /bs;
• the contact form on this website;
• emails you send us at hello@indevico.com or other addresses published here.

It does not cover apps, websites, or software we build for clients. Those products have their own notices. If we start a project with you, the service agreement, NDA, and any data processing addendum govern that work.

3. Data we collect and why

We do not sell personal data. We do not run advertising or remarketing pixels on this site. We do not use analytics, heatmaps, social pixels, or an AI chatbot. We only collect what we need to answer you, run the website, and keep it secure.

When you browse the site

Our hosting provider (Vercel) may automatically record technical logs that can include IP address, browser and device type (user-agent), date and time, requested URL, and referring page. We use this to operate, debug, and secure the site. Inter, the typeface used on this site, is self-hosted at build time; your browser does not request fonts from Google or another third-party font host.

Legal basis: legitimate interests in running a secure, functioning website (and, where required, a legal obligation to keep certain security records).

Contact form

If you submit the form we collect your name, email address, and message. We also receive an optional note of whether you used the English or Bosnian site, so we know which version you wrote from. A hidden anti-spam field is included on the form; legitimate submissions leave it empty and we do not use it as personal data.

We email that inquiry to our team so we can reply.

Legal basis: steps at your request before a contract, and our legitimate interest in answering business inquiries.

Emails, calls, and meetings

If you write to hello@indevico.com or call us, we process the content of that communication and your contact details to respond and, if we work together, to perform the contract.

Appearance preference

If you switch light or dark appearance, or the site follows your system preference after you interact with the theme control, next-themes stores that choice in your browser’s local storage under the key theme. That value stays on your device; we do not read it on our servers.

Language

The language of the site is in the URL (/ for English, /bs for Bosnian). We do not set a language cookie.

Data we do not want

Please do not send special-category data (health, biometric, political opinions, religious beliefs, sexual life, or similar) or other people’s personal data through the form. If you include it anyway, we will treat it only as part of handling your inquiry and delete it where we can.

4. Cookies and similar technologies

We use cookies and similar storage (including local storage in your browser) as described below. You can accept all optional storage or continue with only what is necessary. You can change that later by clearing this site’s cookies and site data in your browser; the consent banner will appear again.

Today this site loads no analytics, advertising, or other optional scripts. Choosing “Accept all” records your consent for a future optional category; it does not currently load extra tools. If we add optional scripts later, they will run only when your stored choice is “all”.

The site cannot remember your cookie choice or appearance without this necessary storage. We do not use advertising, social, or remarketing cookies.

5. Who we share data with

We share personal data only with people and companies who need it to provide our services, and only as much as they need:

• Our team — people at Indevico who handle inquiries and projects.
• Email delivery (Resend) — sends contact-form emails on our behalf.
• Hosting (Vercel) — hosts this website and related logs.
• Professional advisers — lawyers or accountants, if needed for a specific matter.
• Authorities — if the law requires it, or to protect our rights, users, or the public.

Links to email (mailto:) or other websites are not our processing. Those services have their own policies.

6. International transfers

Resend and Vercel may process data in the United States. When we transfer personal data out of Bosnia and Herzegovina or the EEA, we rely on an adequacy decision where one exists, or on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, plus the measures those providers publish.

You can ask us for more detail about the safeguards that apply to a specific transfer.

7. How long we keep data

• Inquiries — about 24 months after the last contact, unless we start a project (then we keep what the contract and accounting rules require) or you ask us to delete sooner where the law allows.
• Server logs — typically about 90 days, longer only if needed to investigate a security incident.
• Cookie consent — until you clear site data or we ask again after a material change.
• Emails — for as long as needed to handle the conversation and meet legal record-keeping duties.

When we no longer need data, we delete it or irreversibly anonymise it.

8. How we protect data

We use HTTPS, restrict access to inquiry mailboxes to the people who need them, and keep API keys and similar secrets off the public site. No method of transmission or storage is perfectly secure. If we become aware of a breach that must be notified under applicable law, we will notify the competent authority and, where required, the people affected.

9. Your rights

Subject to the conditions in BiH law and, where it applies, the GDPR, you can:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete data, or to restrict how we use it;
• object to processing based on legitimate interests;
• receive data you provided in a structured, commonly used format, and ask us to send it to another controller where technically feasible (portability);
• withdraw consent where processing is based on consent, without affecting earlier lawful use;
• lodge a complaint with a supervisory authority (see below).

To use these rights, email hello@indevico.com with enough detail for us to find your data (for example the email you used on the form). We may need to verify your identity. We will respond within the time the law requires.

10. Children

This website is aimed at businesses and adult decision-makers. We do not knowingly collect personal data from children under 16. If you believe a child has sent us data, contact us and we will delete it.

11. Changes to this policy

We may update this page when our processing, tools, or the law changes. The “Last updated” date at the top is the current version. Material changes will be reflected here before they take effect, where that is reasonably possible.

12. Contact and complaints

Questions, requests, or complaints about privacy: hello@indevico.com.

You also have the right to lodge a complaint with the Agency for Personal Data Protection in Bosnia and Herzegovina (AZLP):

• Address: Dubrovačka 6, 71000 Sarajevo, Bosnia and Herzegovina
• Email: azlpinfo@azlp.ba
• Website: www.azlp.ba
• Phone: +387 33 726 250

If you are in the EEA, you may instead complain to your local data protection authority. A list is published by the European Data Protection Board.

This notice describes how this marketing website handles personal data. It is not legal advice and does not replace a contract, NDA, or data processing agreement for client work.