Privacy Policy

1. Overview of Data Protection

General Information

The following information provides a clear and concise overview of how personal data will be processed when you visit www.allops.co website.

“Personal data” means any information that can identify you directly or indirectly, such as your name, email address, IP address, or other data associated with you.

This Privacy Policy explains:

• what personal data we collect,
• how and why we collect it,
• how long we retain it,
• with whom it may be shared,
• and what rights you have in relation to your data.

For more detailed information about specific tools (e.g. cookies and analytics technologies), please refer to the relevant sections below and to our Cookie Policy.

Who is responsible for data processing?

The controller responsible for processing personal data on this website is allOps d.o.o. (hereinafter referred to as “allOps”, “we”, “us” or “our”).

allOps determines the purposes and means of processing personal data in connection with this website.

Our contact details are provided in Section 2. of this Privacy Policy.

How do we collect your data? 

We collect personal data in two primary ways:

1. Data you provide to us
   This includes information you voluntarily submit to us, for example by completing a contact form, sending us an email, or scheduling a meeting.
2. Data collected automatically
   Certain technical data will be collected automatically when you access our website. This may include information about your browser, device, operating system, IP address, and the time of access.
   Where required by law, such data will only be collected after you have provided your consent.

For what purposes do we use your data?

We will process personal data for the following purposes:

• to ensure the secure and stable operation of our website,
• to respond to inquiries and communicate with you,
• to organize and schedule meetings,
• to improve the performance and usability of our website through statistical analysis (subject to consent where required),
• to comply with applicable legal obligations.

We will not use your personal data for purposes that are incompatible with those described in this Privacy Policy.

What rights do you have?

You have the right to request access to your personal data, as well as the correction or deletion of inaccurate or unlawfully processed data, subject to applicable legal conditions.

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to object to certain types of processing and to lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina (the “Agency”).

Detailed information about your rights is provided in Section 9. of this Privacy Policy.

2. Controller of Personal Data

The controller responsible for the processing of personal data in connection with this website is:

allOps d.o.o.
Podgorani bb, Potoci, 88 000 Mostar, Bosnia and Herzegovina
MBS:58-01-0041-19
JIB:4227993630003

E-mail: info@allops.co

allOps will determine the purposes and means of processing personal data collected through this website.

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the details above.

3. How We Collect Personal Data

We collect personal data directly from you and automatically when you use our website.

3.1 Data You Provide to Us

We will collect personal data that you voluntarily provide, including:

• your name,
• your email address,
• the content of your message,
• any other information you choose to include in your communication with us.

If you schedule a meeting through our website, we will also process the information necessary to organize that meeting, such as your contact details and preferred time slot.

We will use this data solely for the purpose of responding to your inquiry, organizing meetings, and conducting related business communication.

This Privacy Policy applies to website visitors, individuals who contact us, and applicants for employment.

3.2 Data Collected Automatically

When you access our website, certain technical data will be collected automatically by our systems. This may include:

• your IP address,
• browser type and version,
• operating system,
• referring URL,
• pages visited,
• date and time of access.

This information is required to ensure the security, stability, and proper functioning of the website.

Where the collection of such data involves the use of cookies or similar technologies that are not strictly necessary, processing will take place only after you have provided your consent, as described in our Cookie Policy.

4. Purposes and Legal Bases for Processing

We will process personal data only where there is a valid legal basis to do so and only for clearly defined purposes.

4.1 Purposes of Processing

We will process personal data collected through this website for the following purposes:

• to ensure the secure, stable, and technically proper operation of the website,
• to respond to inquiries and communicate with you,
• to organize and manage meetings or business discussions,
• to analyze website performance and usage patterns in an aggregated and statistical manner (subject to consent where required),
• to protect our legal interests and prevent misuse of our website,
• to comply with applicable legal and regulatory obligations.

We will not process personal data for purposes that are incompatible with the purposes described above.

4.2 Legal Bases for Processing

Depending on the nature of the interaction, processing will be based on one or more of the following legal grounds under the Law on Personal Data Protection in Bosnia and Herzegovina (Official Gazette of BiH, No. 12/25) (the “Personal Data Protection Law”):

Consent
Where you have given your explicit consent, we will process your data within the scope of that consent. This applies to the use of analytical cookies and similar technologies that are not strictly necessary. You may withdraw your consent at any time.

Pre-contractual steps and contractual necessity
Where you contact us with a business inquiry, request a meeting, or submit an employment application, we will process your personal data to take steps at your request before entering into a contract or employment relationship and, where applicable, to perform contractual or employment-related obligations.

Legal obligation
We may process personal data where such processing is necessary to comply with legal or regulatory requirements.

Legitimate interest
We may process certain technical and limited personal data where this is necessary for the purposes of our legitimate interests, such as ensuring website security, preventing fraud or misuse, and improving the performance and reliability of our online services.
In such cases, we will ensure that our interests do not override your fundamental rights and freedoms.

5. Recipients and Service Providers

We will treat your personal data as confidential and will not sell or rent your data to third parties.

However, while operating our website and conducting our business activities, we may engage selected service providers who process personal data on our behalf or support us in providing our services.

These may include:

• website hosting providers,
• IT, cloud and business email service providers,
• analytics and tag management providers,
• scheduling or communication tool providers,
• professional advisors where necessary.

Where such providers process personal data on our behalf, they will do so strictly in accordance with our instructions and subject to appropriate contractual safeguards.

We will only disclose personal data to third parties where:

• this is necessary for the purposes described in this Privacy Policy,
• we are legally required to do so,
• you have provided your consent, or
• such disclosure is otherwise permitted under applicable law.

 

6. Analytics and Tag Management Tools

Google Tag Manager

We use Google Tag Manager, a tag management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to manage and deploy tracking and analytics tools on our website. The Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform independent analyses. It only facilitates the integration and management of other tools.

However, technical data such as your IP address may be transmitted to Google in connection with the use of this service. Such data may be processed outside Bosnia and Herzegovina, including in the United States.

The use of Google Tag Manager is based on our legitimate interest in the efficient and secure administration of our website infrastructure. Where the activation of specific tools managed via Google Tag Manager requires your consent, such tools will only be activated after your consent has been obtained in accordance with our Cookie Policy.

Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyze how visitors interact with our website. In doing so, aggregated statistical information is generated, such as:

• pages visited,
• time spent on pages,
• device and browser type,
• approximate geographic region,
• referral sources.

Google Analytics uses cookies and similar technologies to collect information about website usage. This processing takes place only after you have provided your consent via our cookie consent mechanism. You may withdraw your consent at any time.
The information generated by Google Analytics may be transmitted to and stored on servers outside Bosnia and Herzegovina, including in the United States.

We use Google Analytics with IP anonymization enabled. This means that your IP address will be shortened before being processed, so that it can no longer be directly associated with you, except in exceptional technical circumstances.

Google will process this information on our behalf in order to evaluate website usage, generate statistical reports, and improve the performance of our website.

We have concluded a data processing agreement with Google, ensuring that personal data is processed only in accordance with our instructions and applicable data protection law.

For more information on how Google processes personal data, please refer to Google’s Privacy Policy:
https://policies.google.com/privacy

7. International Data Transfers

In connection with the use of certain service providers (for example, analytics or scheduling tools), personal data may be processed or stored outside Bosnia and Herzegovina.
Where personal data is transferred to another country, such transfers will take place only where an adequate level of protection is ensured in accordance with the Personal Data Protection Law, or where appropriate safeguards are implemented as required by applicable law.
These safeguards may include contractual protections, technical and organizational measures, and other mechanisms required under applicable law.
Further details regarding specific tools and related transfers, where applicable, are provided in Section 6. of this Privacy Policy and in our Cookie Policy.

8. Data Retention

We will retain personal data only for as long as it is necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
For specific retention periods of analytics cookies, please refer to our Cookie Policy.

In particular:

• Contact inquiries and business communications
  We will retain personal data submitted through contact forms, email communication, or meeting scheduling tools for as long as necessary to respond to your inquiry and to manage any related business relationship.
  Where appropriate, such data may be retained for a reasonable period to document communications or to protect legal interests.
• Technical and server log data
  Automatically collected technical data will be retained for a limited period necessary to ensure website security, stability, and performance monitoring.
• Analytics data
  Where analytics tools are used based on your consent, retention periods will depend on the configuration of the respective tool. Analytics data will be processed in aggregated or pseudonymized form where possible.
  Where personal data is no longer required for the purposes described above, it will be deleted or anonymized, unless statutory retention obligations or legitimate legal interests require continued storage.

9. Your Rights

Under the Personal Data Protection Law you have the following rights in relation to your personal data:

Right of access
You have the right to obtain confirmation as to whether personal data concerning you is being processed and, where that is the case, to access such data and receive a copy thereof.

Right to rectification
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data concerning you.

Right to erasure (“right to be forgotten”)
You have the right to request the deletion of your personal data where the legal conditions for erasure are fulfilled.

Right to restriction of processing
You have the right to request the restriction of processing in circumstances provided by law, including where the accuracy of the data is contested or where processing is unlawful but you oppose erasure.

Right to object
Where processing is based on legitimate interest, you have the right to object to such processing on grounds relating to your particular situation.

Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

Right to data portability
Where processing is based on your consent or on pre-contractual or contractual necessity and is carried out by automated means, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit that data to another controller, where technically feasible.

Right to lodge a complaint
If you believe that your personal data has been processed in violation of applicable law, you have the right to lodge a complaint with the Agency.

How to Exercise Your Rights

You may exercise your rights by contacting us using the contact details provided in Section 2. of this Privacy Policy.
We may request additional information to verify your identity before responding to your request. We will respond within 30 days from the date of receipt of your request. Where necessary, this period may be extended by up to an additional 60 days, taking into account the complexity and number of requests, in accordance with the Personal Data Protection Law.

10. Data Security

We will implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction.

These measures will include where appropriate:

• encryption of data in transit (e.g. TLS/HTTPS),
• access controls and role-based authorization,
• restricted access to systems containing personal data,
• regular monitoring of website security,
• contractual safeguards with service providers.

While we will take reasonable and proportionate steps to safeguard personal data, please note that the transmission of information via the Internet cannot be guaranteed to be completely secure.

For this reason, any data transmission to our website is carried out at your own risk.

11. Processing of Applicant Data

If you apply for a position through our Careers section, by email, or via any recruitment platform linked on our website, we will process the personal data you provide for the purpose of evaluating your application and conducting the recruitment process.

This may include:

• identification and contact details,
• CV and employment history,
• education and qualifications,
• interview notes,
• any additional information you choose to provide.

Legal basis
Processing is based on taking steps at your request prior to entering into an employment relationship and, where applicable, on our legitimate interest in conducting an efficient recruitment process.

Retention period
If your application is unsuccessful, we will retain your personal data until the recruitment process has been formally concluded. Any retention beyond that point will take place only on the basis of your explicit consent.

Recipients and transfers
Your data may be processed by authorized personnel involved in recruitment and, where applicable, by service providers supporting our recruitment process.

12. External Links to Social Media Platforms

Our website contains links to external social media platforms, including GitHub, LinkedIn, and Instagram.
These links are provided for informational purposes only. The mere display of social media icons on our website does not result in the automatic transmission of personal data to the respective provider.
If you choose to click on a social media link, you will be redirected to the external platform. From that moment onward, the processing of your personal data is carried out solely by the respective platform operator in accordance with their own privacy policies.
We do not control and are not responsible for the data processing practices of these external providers.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technical developments, or the way we process personal data.
Any updated version will be published on this website and will become effective upon publication, unless stated otherwise.
We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal data.

Last updated: 18.03.2026.