Privacy Policy

1. Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to your data when you visit or interact with our website and services.

2. Scope

This policy applies to personal data processed by Konverzija Max d.o.o. in the context of our website, marketing activities (including newsletters) and client engagements. It does not cover third-party websites linked from our site.

3. Hosting & server logs

Our website is hosted by Strato AG. Strato processes server logs and technical information (e.g. IP address, request time, browser type) on our behalf. Strato acts as a processor and we have a contract (DPA) with them that limits usage to necessary hosting functions.

4. Data we collect

• Technical / Usage data: IP address, browser and device information, pages visited, timestamps, referral URLs (collected via server logs and analytics).
• Contact data: name, email, phone when you contact us or sign up for our newsletter.
• Marketing / tracking data: identifiers set by cookies and pixels for analytics, advertising and session replay.
• Billing / contractual data: company name, billing address and payment info required to perform contracts (if applicable).

5. Tools and third-party services we use

To operate, analyze and improve our services we use the following third-party providers:

• Google Analytics — website analytics.
• Meta Pixel (Facebook / Instagram) — ad measurement & audience building.
• Microsoft Clarity — session recordings & heatmaps for UX analysis.
• Brevo (Sendinblue) — newsletter delivery and email tracking.
• Strato AG — hosting and server logs.

These providers may process data outside Bosnia and Herzegovina. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

6. Purposes and legal basis for processing

• Performance of contract: processing necessary to deliver services and manage client relationships (legal basis: contract).
• Legitimate interests: website security, analytics and service improvement (legal basis: our legitimate interests). We balance these interests against your rights before processing.
• Consent: cookies, marketing communications and any tracking that requires consent under applicable law (legal basis: consent). You may withdraw consent at any time.
• Legal obligations: where retention or disclosure is required by law (legal basis: legal obligation).

7. Cookies & tracking

We use cookies and similar technologies. Categories include:

• Necessary cookies: required for basic site functionality and consent storage.
• Analytics cookies: e.g., Google Analytics, Microsoft Clarity.
• Marketing cookies: e.g., Meta Pixel for ad measurement and audience building.
• Email tracking: Brevo for opens/clicks in newsletters.

Use the cookie banner to manage your choices. You can also disable cookies in your browser, but some features may stop working.

8. Sharing and recipients

We share personal data only with:

• Our processors and service providers (listed above) under contractual terms limiting their use of data.
• Authorities when required by law or to defend our legal rights.

We do not sell personal data.

9. International transfers

Some processors may transfer data to locations outside Bosnia and Herzegovina (including the EU, UK or United States). Where transfers occur to third countries without an adequacy decision, we put in place safeguards such as EU Standard Contractual Clauses (SCCs) or rely on other lawful mechanisms. If you would like a copy of the safeguards, contact us (see section 13).

10. Retention

We retain personal data only as long as necessary for the purposes described (e.g., for the duration of a client contract plus statutory retention periods) or until you ask us to delete it, unless we have a lawful reason to retain it longer (e.g., tax or accounting obligations).

11. Your rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion (“right to be forgotten”) in certain circumstances.
• Request restriction of processing.
• Object to processing based on legitimate interests or for direct marketing.
• Request portability of data you provided to us in machine-readable form.
• Withdraw consent at any time for processing carried out on consent grounds.

To exercise these rights, contact us using the details in Section 13. We may ask for reasonable information to confirm your identity before responding.

12. Complaints

If you believe your rights have been violated, you may lodge a complaint with the competent supervisory authority in Bosnia and Herzegovina or with another relevant authority where you normally live or work.

13. Contact

Data controller: Konverzija Max d.o.o.
VAT ID: 4405452980007
Email: info@crohouse.co

14. Security

We implement technical and organizational measures to protect personal data against unauthorized access, loss or disclosure (e.g., access controls, TLS encryption on the website). However, no system is 100% secure—report suspected breaches to us immediately.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will publish the revised policy on this page and update the “Last updated” date. Material changes will be communicated where appropriate.