Struktura Consulting

Privacy Policy

Last updated: 28 September 2026

Struktura Consulting respects your privacy and processes personal data only where necessary for legitimate business purposes and in accordance with applicable data protection law, including the Personal Data Protection Law of Bosnia and Herzegovina (Official Gazette of Bosnia and Herzegovina No. 12/25). Where the EU General Data Protection Regulation (GDPR) applies to a specific processing activity, its applicable requirements are also taken into account.

1. Data Controller

The controller responsible for processing personal data through this website is:

Struktura Consulting, sole proprietorship (Obrt), owner: Alem MešanovićPrijedorska 6, 77000 Bihać, Una-Sana Canton, Federation of Bosnia and Herzegovina, Bosnia and HerzegovinaTax Identification Number (JIB): 4364770160002Registration decision no.: 05/2-17-1600/26Email: alem@strukturaconsulting.comPhone: +387 61 145-961

2. Personal Data We Collect

When you contact Struktura Consulting through the website inquiry form, we may collect:

  • your name;
  • your email address;
  • your company name, if you provide it;
  • your message and any information you voluntarily include in it.

The inquiry form is intended for ordinary business inquiries. Please avoid submitting sensitive personal information unless it is genuinely necessary.

Providing information through the inquiry form is voluntary. Your name, email address and message are required so that we can receive and respond to your inquiry; your company name is optional. Without the required information, we may be unable to process your request.

If you use the consultation-booking link, Calendly may request information such as your name, email address and other information required for the booking.

We may also process ordinary business correspondence exchanged with you by email and basic contact information required to manage an active or potential business relationship.

When you access the website, infrastructure providers may process technical data such as your IP address, browser and device information, requested pages and access times to deliver and secure the website. Website analytics are described in section 6.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes and, depending on the circumstances, on the following legal bases:

  • to respond to inquiries and arrange consultations: taking steps at your request before entering into a contract with you, or our legitimate interest in responding to other business inquiries;
  • to manage client communication and ongoing business correspondence: performance of a contract with you or, when communicating with a representative of a business or another contact, our legitimate interest in managing that business relationship;
  • to maintain limited records of genuine business opportunities and follow-up activities: our legitimate interest in managing relevant business contacts and responding to expressed interest in our services;
  • to operate and protect our website, email and business systems and prevent misuse or security incidents: our legitimate interest in providing secure and reliable services;
  • to comply with applicable legal, accounting or regulatory obligations: compliance with legal obligations that apply to us;
  • to understand general website performance through limited analytics: our legitimate interest in evaluating and improving the website, where legally permitted; where applicable law requires consent for the relevant technology or processing, we rely on your prior consent instead.

Where we rely on legitimate interests, those interests are balanced against the rights and interests of the individuals concerned.

We do not use contact-form submissions to subscribe you automatically to newsletters or general marketing mailing lists.

4. Contact Form and Business Email

Messages submitted through the website contact form are transmitted using Lovable's transactional email infrastructure and delivered to Struktura Consulting's Microsoft 365 business mailbox.

The website does not currently use a Lovable built-in database to store contact-form submissions.

Where an inquiry represents a genuine business opportunity, limited contact and follow-up information may be recorded manually in an internal Excel lead tracker stored in Microsoft OneDrive for the purpose of managing business communication and follow-up.

5. Appointment Booking Through Calendly

The consultation-booking link opens Calendly as an external website in a separate browser page or tab. Calendly is not automatically embedded or loaded when you visit the Struktura Consulting website.

We use booking information to arrange your consultation and manage related communication. Calendly processes the information needed to provide the booking service; its privacy notice also explains processing for which it is independently responsible: https://calendly.com/legal/privacy-notice. Booking information may also be synchronized with the calendar service connected to Struktura Consulting's Calendly account.

6. Website Analytics and Similar Technologies

Struktura Consulting currently uses Lovable Visitor Analytics to understand general website usage and performance.

This may include measurement data such as visits, page views, visit duration, traffic source, device type, pages or features used and approximate location. The analytics are used for aggregate website-performance analysis rather than advertising profiling.

We do not currently use Google Analytics, Meta Pixel, LinkedIn Insight Tag, Hotjar or similar third-party advertising or marketing trackers.

Where applicable law requires prior consent for non-essential cookies, browser storage or similar analytics technologies, those technologies may be used only after that consent has been obtained. Any consent can be withdrawn using the controls made available when it is requested. This policy will be updated if the technologies or processing activities change.

7. Service Providers and Recipients

Personal data may be processed by service providers that support our website and business operations, including:

  • Lovable, for website infrastructure, transactional email functionality and website analytics;
  • Microsoft, for Microsoft 365 business email, OneDrive and related business services;
  • Calendly, together with the calendar service connected to the booking workflow, when you choose to book a consultation.

We may also disclose personal data where required by law, requested by a competent authority, or reasonably necessary to establish, exercise or defend legal claims.

We do not sell personal data.

8. International Data Transfers

Our technology providers operate internationally. Personal data may therefore be processed outside Bosnia and Herzegovina, including in the European Union or European Economic Area and in the United States, depending on the provider and service used.

International transfers must have a lawful transfer basis under the applicable data protection rules. Depending on the destination and recipient, this may be an applicable adequacy decision or legally recognised safeguards, such as standard contractual clauses. Technical and organizational security measures supplement these arrangements. You may contact us for information about the mechanism applicable to your data and a copy of the relevant safeguards, subject to necessary redactions.

9. How Long We Keep Personal Data

For inquiries that do not result in an ongoing business relationship, relevant correspondence and related lead-tracking information are generally retained for up to 12 months from the last communication, unless there is a legitimate or legal reason to retain them for longer.

If an inquiry develops into a client or contractual relationship, relevant correspondence and business records may be retained for longer where necessary for contract administration, accounting, legal obligations, or the establishment, exercise or defence of legal claims.

For technical, security and analytics data, retention is determined by the purpose of processing, the provider's documented retention arrangements and applicable service settings. Relevant criteria include maintaining the website, resolving faults, investigating security incidents and evaluating website performance. We retain personal data only as long as needed for these purposes, unless a legal obligation requires longer retention.

Information that is no longer required is periodically reviewed and deleted or removed where appropriate.

10. Your Data Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing based on legitimate interests;
  • request data portability where applicable;
  • withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
  • exercise rights relating to certain decisions based solely on automated processing.

To exercise your privacy rights in relation to the English-language website, contact alem@strukturaconsulting.com. We may request reasonable information necessary to verify your identity before acting on a request.

You have the right to lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina (https://azlp.ba) if you believe your personal data has been processed unlawfully. Where the GDPR applies, you may also have the right to lodge a complaint with a competent data-protection supervisory authority in the EU or EEA.

11. Data Security

We take reasonable technical and organizational measures appropriate to the nature of the information processed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

However, no internet-based transmission or storage system can be guaranteed to be completely secure.

12. Automated Decision-Making

Struktura Consulting does not use personal data collected through the website or inquiry form to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

13. Third-Party Links

This website may contain links to third-party services, including Calendly. When you follow such a link, the privacy practices of the relevant third-party provider apply.

Struktura Consulting is not responsible for the independent privacy practices of third-party websites or services.

14. Changes to This Privacy Policy

This Privacy Policy may be updated when our website, service providers, processing activities or applicable legal requirements change.

The current version will be published on this website together with the date on which it was last updated.