Privacy Policy

[Bauer / AH-TEAM d.o.o.] (the “Salon”, “we”, “us” or “our”) respects the privacy of its clients, website users and other individuals whose personal data it processes.

This Privacy Policy explains which personal data we collect and process, why we use it, how we protect it, how long we retain it and your rights in relation to your personal data.

The Policy applies to the use of our website, bauerbalkan.com, communication through the contact form and other communication with us about our services.

Personal data is processed in accordance with the applicable regulations of Bosnia and Herzegovina, including the Law on Personal Data Protection (“Official Gazette of BiH”, No. 12/25).

1. Who is responsible for processing your data?

The personal data controller is:

Name: AH-TEAM d.o.o. Address: TC "DŽANANOVIĆ", SUTEREN 72000 Zenica | BA Email: bauerbalkan.com Telephone: +387 (032) 240-111

For questions about the processing of your personal data, please contact us using the details above.

2. What is personal data?

Personal data is any information relating to an identified or identifiable natural person.

Depending on how you communicate with us and use our website, we may process different categories of personal data.

3. What data do we collect?

3.1. Data you provide

When you contact us through the contact form, by email, telephone or another communication channel, we may process information you provide, such as:

• your first name and surname;
• your email address;
• your telephone number;
• the content of your message or enquiry;
• information about the service or treatment you would like;
• information needed to arrange or book an appointment;
• other information you voluntarily provide when communicating with us.

We do not ask you to submit information through the contact form that is unnecessary for handling your enquiry.

3.2. Data collected automatically

When you visit our website, certain technical data may be recorded automatically, depending on the technologies and settings we use.

This may include:

• your IP address;
• device type;
• operating system;
• browser type and version;
• browser language;
• the date and time of access;
• pages you visit;
• information about interactions with the website;
• information about the source of your visit;
• technical data needed for the website’s security and stability.

This data may be collected through servers, cookies, Google Tag Manager and other technologies.

Further information about the use of cookies is available in our Cookie Policy.

4. Why do we use your data?

We may use your personal data for the following purposes:

Responding to enquiries

We use data from the contact form and other communications to:

• answer your question;
• provide information about our services;
• respond to an appointment request;
• arrange an appointment or service;
• continue the communication initiated by your enquiry.

Providing services

If you become a client, we may use data to organise, provide and keep records of the services you request.

Communicating with clients

We may use data for communication needed in connection with a booked appointment, a change or cancellation of an appointment, or other service-related matters.

Website security

We use certain technical data to protect the website from spam, misuse, automated requests and other security threats.

Improving the website

With the appropriate consent, we may use analytics technologies to understand how users use our website and to improve its content and functionality.

Complying with legal obligations

Data may be processed where necessary to fulfil legal, accounting, tax or other obligations applicable to our business.

Protecting our rights

Data may be processed where necessary to establish, protect or defend our rights and legal interests, in accordance with applicable regulations.

5. Legal bases for processing

We process personal data only where an appropriate legal basis exists.

Depending on the particular processing activity, the legal basis may include:

• your consent;
• taking steps at your request before entering into a contract or in connection with its performance;
• compliance with a legal obligation;
• the protection of our legitimate interests, where the legal conditions are met;
• another legal basis provided by applicable regulations.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

The Law on Personal Data Protection of BiH defines consent as a freely given, specific, informed and unambiguous expression of an individual’s wishes by which they agree to the processing of their personal data.

6. Contact form

Our website provides a contact form through which you can send an enquiry.

Information entered in the contact form is used primarily to respond to your enquiry and continue the communication.

The data we may process includes:

• your first name and surname;
• your email address;
• your telephone number;
• the content of your message;
• information about the service you would like;
• other information you voluntarily enter.

Please do not use the contact form to submit unnecessary sensitive information or other data unrelated to your enquiry.

7. Google reCAPTCHA

We use Google reCAPTCHA on our website to protect the contact form and other features from spam, automated requests and misuse.

reCAPTCHA may process certain technical data and information about users’ interactions with the website to assess whether a request comes from a real user or an automated system.

Depending on the specific version and configuration of reCAPTCHA, cookies and other technologies may be used.

For more information about how Google processes data within its services, users can consult Google’s privacy policy.

The use of reCAPTCHA should comply with our cookie consent settings and applicable data protection rules.

8. Google Tag Manager

We use Google Tag Manager (GTM) on the website.

Google Tag Manager is a tool that allows us to manage the technical deployment of various tags and scripts used on the website.

GTM does not itself represent one specific purpose of data processing. Other technologies and services may be loaded through it, depending on the website’s configuration.

If analytics or marketing tools requiring consent are loaded through GTM, we endeavour to configure them so they do not activate before the user gives the appropriate consent.

9. Cookies

Our website uses cookies and similar technologies.

Cookies may be needed for the website’s essential operation, security, remembering settings or analysing website use.

For detailed information about individual cookies, their purpose, duration and how to manage your choices, please see our Cookie Policy.

10. Google Analytics and analytics

If we use Google Analytics or another analytics service, that service may process certain data about how our website is used.

Analytics tools are used to understand website traffic and usage, improve content and functionality, and analyse performance.

Analytics cookies and similar technologies are used in accordance with your choices within the consent management mechanism, where consent is required.

11. Who may receive your data?

We do not sell your data or share it with third parties for purposes unrelated to the processing concerned.

Data may be made available or transferred to certain recipients where needed to fulfil the processing purpose, including:

• website hosting and technical maintenance providers;
• email service providers;
• IT and security service providers;
• analytics service providers;
• spam and misuse prevention service providers;
• accounting or other professional service providers;
• competent authorities where there is a legal obligation.

Service providers processing data on our behalf may act as data processors and must comply with the relevant contractual and legal obligations.

12. Google as a service provider

We use Google services for certain features, including Google reCAPTCHA and Google Tag Manager.

Depending on the configuration of those services and the technologies in use, Google may process certain technical data.

The exact scope of the data depends on the specific service, its configuration and your consent settings.

13. Transfers outside Bosnia and Herzegovina

Some service providers we use may process data outside Bosnia and Herzegovina.

If personal data is transferred to another country or an international organisation, we take the appropriate measures required by applicable regulations to ensure adequate protection of personal data.

Where necessary, we use appropriate mechanisms for international data transfers.

14. How long do we retain your data?

We retain data only for as long as needed to fulfil the purpose for which it was collected, unless the law requires or permits us to retain it for longer.

The retention period depends on the type of data and the purpose of processing.

For example:

• we retain contact enquiry data for the period needed to process and resolve the enquiry, and afterwards in accordance with business needs and legal obligations;
• we retain service-related data for the period needed to provide the service and fulfil legal obligations;
• we retain accounting and tax data for the periods specified by the relevant laws;
• we retain data relating to website security and protection for as long as needed to fulfil the security purpose.

When data is no longer needed, we delete it, anonymise it or otherwise appropriately remove it from active use, in accordance with our procedures and applicable regulations.

15. Personal data security

We apply appropriate technical and organisational measures to protect personal data against:

• unauthorised access;
• loss;
• destruction;
• alteration;
• unauthorised disclosure;
• other forms of unlawful processing.

We adapt protective measures to the nature, scope and risks of the processing concerned.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

16. Your rights

Under the applicable Law on Personal Data Protection of BiH, you have certain rights relating to the processing of your personal data. The Personal Data Protection Agency of BiH lists, among others, the right of access to data and information about its processing.

Depending on the processing concerned and the legal conditions, you may have the right to:

• request confirmation of whether we process your personal data;
• request access to your personal data;
• receive information about the purpose of processing;
• receive information about the categories of data processed;
• receive information about recipients or categories of recipients;
• receive information about the data retention period;
• request the correction of inaccurate data or completion of incomplete data;
• request the erasure of personal data where the legal conditions are met;
• request restriction of processing where the legal conditions are met;
• object to certain processing activities;
• withdraw consent where processing is based on consent;
• exercise other rights provided by the Law.

The specific rights may depend on the legal basis and circumstances of the processing concerned.

17. How can you exercise your rights?

To exercise your rights or ask questions about the processing of your data, please contact us:

Name: AH-TEAM d.o.o. Address: TC "DŽANANOVIĆ", SUTEREN 72000 Zenica | BA Email: bauerbalkan.com Telephone: +387 (032) 240-111

We may ask you to provide enough information in your request to verify your identity and handle the request correctly.

We process requests in accordance with the time limits and procedures prescribed by applicable law.

18. Right to complain to the Agency

If you believe your personal data has been processed in breach of applicable regulations, you have the right to contact the Personal Data Protection Agency in Bosnia and Herzegovina, the independent authority supervising the application of the Law on Personal Data Protection.

Personal Data Protection Agency in Bosnia and Herzegovina Dubrovačka 6 71000 Sarajevo Bosnia and Herzegovina Tel: +387 33 726 250 Email: azlpinfo@azlp.ba

19. Minors

Our services and website are not intended for independent use by individuals who cannot give valid consent or assume the relevant obligations under applicable regulations.

Where the consent of a parent or legal representative is required to provide a service or process a minor’s data, that consent must be obtained in accordance with applicable regulations.

20. Links to other websites

Our website may contain links to third-party websites and services.

We are not responsible for the content, security or processing of personal data on third-party websites.

We recommend reading the privacy policy of every website you visit through an external link.

21. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in our business, technology, data processing practices or applicable regulations.

The updated version will be published on this page with the date of the latest update.

We recommend checking this page periodically to stay informed of any changes.

22. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact us:

Name: AH-TEAM d.o.o. Address: TC "DŽANANOVIĆ", SUTEREN 72000 Zenica | BA Email: bauerbalkan.com Telephone: +387 (032) 240-111

Last updated: 26 August 2026.