Introduction

Bloom.ba website is operated by the company Bloom d.o.o. Sarajevo (hereinafter “We”).

We care about your privacy. We are, in accordance with the General Data Protection Regulation (“GDPR”) controller and processor of your personal data, so here we will introduce how we process Personal Data.

This Privacy Policy explains our procedures related to personal data which you voluntarily give while using our services on our website.

Processing of personal data is necessary for maintaining our business and providing the services, so please read the Terms and Conditions of Use and Privacy Policy carefully in order to become familiar with the way we work. If you do not want us to collect and process your personal information as here stipulated in this Privacy Policy, you should not use our services. We are not responsible for the content and/or Privacy Policy of any other user, links to which you can be contacted via our website, other websites and/or applications.

What personal data is collected, for which purposes and on what legal basis?

You agree that we may collect and process your personal data which is given us at the registration, purchase, while using Bitrix24 chat widget on our website and “Contact Us” form, such as:

  • name and surname,
  • e-mail address,
  • job title;
  • telephone number;
  • other personal data provided by you on our website…

We are using your personal data for the purpose of control of the access to system and registration to use our services. Your input when registering on our website may be used to reach out to you to improve your experience with the service. Furthermore, your personal data may also be used to make anonymized statistics and reports on using our services.

We will not store, transfer or in any other way process your personal data outside of the specific purposes mentioned above.

The processing of your personal data is necessary for the fulfillment of the purpose mentioned above and based on your consent. Your personal data may also be processed where we reasonably consider it necessary for complying with legal or regulatory obligations, or when we have assessed it is necessary for the purposes of the legitimate interests pursued by us or a third party to whom it may be necessary to disclose information.

You are not required to provide the personal information that we may request, but, if you choose not to do so, in many cases we will not be able to provide you with our services or respond to any queries you may have.

You can at any time withdraw your consent, without affecting the lawfulness of processing based on consent before its withdrawal.

We do not take any decisions involving the use of algorithms or profiling that affects you.

Where is data transferred?

Your personal information and data files are generally stored on servers placed in the EEA. Personal Data will not be transferred to third parties other than technological and other service providers, as data processors. Such entities may be located outside the EEA in countries where no equivalent level of protection for personal data is guaranteed (specifically, USA), but appropriate model clauses have been adopted in order for the data subjects not being prevented from exercising their rights in an effective manner. The data subjects can have more information by contacting the e-mail address my-data@bloom.ba.

Details and recipients of the personal data

The controller of your personal data is Bloom d.o.o. Sarajevo, with registered seat at Maglajska 1, Sarajevo, Bosnia and Herzegovina.

Data processors we work with are Google Analytics, Hotjar, and Bitrix24 Widget. The list of data processors is not exhaustive, and we may work with other data processors in the future.

We use Hotjar and Google Analytics in order to better understand our users’ needs and to optimize this service and experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback.

Also, we use Bitrix24 Widget when interacting with the live chat on our website.

Security measures for the protection of personal data

All collected personal data are electronically stored, and appropriate measures and procedures are applied in order to prevent unauthorized access, maintaining the level of personal data protection and use the data collected online in a correct manner.

Even though we take all appropriate measures to ensure against unauthorized disclosure of your personal data, we cannot guarantee that some of the collected personal data shall never be disclosed in a manner that is not in accordance with this Privacy Policy. Accidental disclosure may be, for example, a consequence of false misrepresentation when accessing websites that contain such data, with the purpose of correcting possible errors in the data. We shall not be liable, to the fullest extent permitted by law, for any damage caused to users or third parties relating to accidental disclosure of personal data.

Cookies

We do not collect personal data while using cookies.

For the analysis of user movements on Bloom, we use the Google Analytics, Hotjar and for communication with website visitors we use Bitrix24 Widget chat tools.

Google Analytics does not identify individual users or associate your IP address with any other data held by Google. For more information about Google Analytics use of cookies please follow this link. You can opt-out of Google Analytics cookies altogether by linking to this Google Analytics Opt-Out Add-on.

Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices (in particular device’s IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link. You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

Retention period

Your personal data will be stored only as long as necessary for the purposes mentioned above. If a judicial or disciplinary action is initiated, the personal data may be stored until the end of such action, including any potential periods for appeal, and will then be deleted or archived.

Your personal data will not be kept in a form that allows you to be identified for any longer than is reasonably considered necessary by us for achieving the purposes for which it was collected or processed or as it is established in the applicable laws related to data retention periods.

Amendments

This Privacy Policy is subject to changes.

In case of any material change of this Privacy Policy you will be notified via Bloom website or via e-mail.

In case of material changes, you need to update previously given consent or you can use other rights provided in Privacy Policy.

In short, Bloom is GDPR Compliant

  • We store basic identification details of our customers like their name, email, telephone number, company name, & country name, apart from the web data such as the system location, cookies, and IP address
  • These details are stored purely for business purposes by Bloom, to contact clients for projects requirements
  • We might also contact clients in the future about our services and products, but strictly on an opt-in basis
  • We guarantee that none of the data is shared for any marketing purposes to third-parties
  • On request, we can provide the electronic copies of the records we save for processing and update where this data is stored and the purpose for which it was stored
  • EU citizens are free to request us to delete their personal data or even discontinue to process it

How can you access your personal data? /Further rights

Under the conditions set out in the applicable law, you have, among others, the rights (i) to check whether and which of your personal data We are collecting and to access or to request copies of such data, and (ii) to request correction, supplementation or deletion of your personal data that is inaccurate or processed in non-compliance with applicable requirements, and (iii) to request us to restrict the collection, processing or use of your personal data, (iv) in certain circumstances, to object for legitimate reasons to the processing of your personal data, and (v) to request data portability.

If you would like to know more or wish to use one or more of your above rights, you are welcome to contact us by sending an e-mail to my-data@bloom.ba.

In case of complaints, you also have the right to lodge a complaint with the competent supervisory authority regarding the processing of your personal data.