Bloom.ba website is operated by the company Bloom d.o.o. Sarajevo (hereinafter “We”).
We care about your privacy. We are, in accordance with the General Data Protection Regulation (“GDPR”) controller and processor of your personal data, so here we will introduce how we process Personal Data.
What personal data is collected, for which purposes and on what legal basis?
You agree that we may collect and process your personal data which is given us at the registration, purchase, while using Bitrix24 chat widget on our website and “Contact Us” form, such as:
- name and surname,
- e-mail address,
- job title;
- telephone number;
- other personal data provided by you on our website…
We are using your personal data for the purpose of control of the access to system and registration to use our services. Your input when registering on our website may be used to reach out to you to improve your experience with the service. Furthermore, your personal data may also be used to make anonymized statistics and reports on using our services.
We will not store, transfer or in any other way process your personal data outside of the specific purposes mentioned above.
The processing of your personal data is necessary for the fulfillment of the purpose mentioned above and based on your consent. Your personal data may also be processed where we reasonably consider it necessary for complying with legal or regulatory obligations, or when we have assessed it is necessary for the purposes of the legitimate interests pursued by us or a third party to whom it may be necessary to disclose information.
You are not required to provide the personal information that we may request, but, if you choose not to do so, in many cases we will not be able to provide you with our services or respond to any queries you may have.
You can at any time withdraw your consent, without affecting the lawfulness of processing based on consent before its withdrawal.
We do not take any decisions involving the use of algorithms or profiling that affects you.
Where is data transferred?
Your personal information and data files are generally stored on servers placed in the EEA. Personal Data will not be transferred to third parties other than technological and other service providers, as data processors. Such entities may be located outside the EEA in countries where no equivalent level of protection for personal data is guaranteed (specifically, USA), but appropriate model clauses have been adopted in order for the data subjects not being prevented from exercising their rights in an effective manner. The data subjects can have more information by contacting the e-mail address firstname.lastname@example.org.
Details and recipients of the personal data
The controller of your personal data is Bloom d.o.o. Sarajevo, with registered seat at Maglajska 1, Sarajevo, Bosnia and Herzegovina.
Data processors we work with are Google Analytics, Hotjar, and Bitrix24 Widget. The list of data processors is not exhaustive, and we may work with other data processors in the future.
We use Hotjar and Google Analytics in order to better understand our users’ needs and to optimize this service and experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback.
Also, we use Bitrix24 Widget when interacting with the live chat on our website.
Security measures for the protection of personal data
All collected personal data are electronically stored, and appropriate measures and procedures are applied in order to prevent unauthorized access, maintaining the level of personal data protection and use the data collected online in a correct manner.
We do not collect personal data while using cookies.
For the analysis of user movements on Bloom, we use the Google Analytics, Hotjar and for communication with website visitors we use Bitrix24 Widget chat tools.
Your personal data will be stored only as long as necessary for the purposes mentioned above. If a judicial or disciplinary action is initiated, the personal data may be stored until the end of such action, including any potential periods for appeal, and will then be deleted or archived.
Your personal data will not be kept in a form that allows you to be identified for any longer than is reasonably considered necessary by us for achieving the purposes for which it was collected or processed or as it is established in the applicable laws related to data retention periods.
In short, Bloom is GDPR Compliant
- We store basic identification details of our customers like their name, email, telephone number, company name, & country name, apart from the web data such as the system location, cookies, and IP address
- These details are stored purely for business purposes by Bloom, to contact clients for projects requirements
- We might also contact clients in the future about our services and products, but strictly on an opt-in basis
- We guarantee that none of the data is shared for any marketing purposes to third-parties
- On request, we can provide the electronic copies of the records we save for processing and update where this data is stored and the purpose for which it was stored
- EU citizens are free to request us to delete their personal data or even discontinue to process it
How can you access your personal data? /Further rights
Under the conditions set out in the applicable law, you have, among others, the rights (i) to check whether and which of your personal data We are collecting and to access or to request copies of such data, and (ii) to request correction, supplementation or deletion of your personal data that is inaccurate or processed in non-compliance with applicable requirements, and (iii) to request us to restrict the collection, processing or use of your personal data, (iv) in certain circumstances, to object for legitimate reasons to the processing of your personal data, and (v) to request data portability.
If you would like to know more or wish to use one or more of your above rights, you are welcome to contact us by sending an e-mail to email@example.com.
In case of complaints, you also have the right to lodge a complaint with the competent supervisory authority regarding the processing of your personal data.