Privacy Policy

Who is responsible

Infeus d.o.o., Bulevar Meše Selimovića 81A, Sarajevo, Bosnia and Herzegovina, is responsible for the processing of personal data on www.infeus.com. For anything related to your data, write to info@infeus.com.

This policy covers this website and the messages you send us. The software we build for clients is covered by separate agreements with those clients.

When you visit the site

The site is hosted on Cloudflare Pages, a service of Cloudflare, Inc. When you open a page, your browser sends technical data such as your IP address, browser type, the requested page and the time of the request. Cloudflare uses this data to deliver the site and to protect it against attacks and abuse. We do not use it to identify visitors.

Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).

Fonts are served from our own domain. Your browser does not contact Google Fonts or any other font service.

Analytics, only with your consent

On your first visit we ask whether we may use analytics. If you click "Decline", no analytics code is loaded. If you click "Accept", we use:

• Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us which pages are visited, how visitors found the site, their approximate location (country and city) and their type of device and browser. Google Analytics 4 does not log or store IP addresses. We do not use Google Analytics for advertising.
• Microsoft Clarity, provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Clarity records how visitors use a page, such as clicks, scrolling and mouse movement, and turns this into heatmaps and session replays.

Legal basis: your consent (Art. 6(1)(a) GDPR and, for storing and reading information on your device, Art. 5(3) of the ePrivacy Directive as implemented in your country, for example § 25 TDDDG in Germany).

You can change your decision at any time with "Cookie settings" at the bottom of every page. Withdrawing consent does not affect processing that took place before.

Cookies and similar storage

Microsoft may also set cookies on its own domains (clarity.ms and bing.com), such as MUID, CLID, ANONCHK, MR and SM. Microsoft describes them in its Clarity cookie list. We tell Clarity not to share data with Microsoft Advertising.

How long analytics data is kept

Google Analytics keeps event data for 14 months. Microsoft Clarity keeps session recordings for 30 days. Heatmaps, recordings we mark as favorites and a random sample of recordings are kept for 9 months. After that Microsoft deletes the data.

Transfers to the USA

Google and Microsoft may process data in the United States. Both companies are certified under the EU-U.S. Data Privacy Framework, and their data processing terms include the European Commission's Standard Contractual Clauses.

When you contact us

If you email or call us, we process your name, contact details and the content of your message to reply and, if we work together, to prepare an offer or a contract.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR).

We keep correspondence as long as it is needed for the inquiry and any project that follows, and longer where accounting or tax law requires it.

Who receives your data

Our hosting provider (Cloudflare), our email provider and, if you have given consent, Google and Microsoft as described above. We do not sell personal data and do not share it for advertising.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format and to object to processing based on our legitimate interests. Where processing is based on consent, you can withdraw it at any time. To use any of these rights, write to info@infeus.com.

You can also lodge a complaint with a data protection authority, in particular in the EU country where you live or work. In Bosnia and Herzegovina, the competent authority is the Personal Data Protection Agency (Agencija za zaštitu ličnih/osobnih podataka u Bosni i Hercegovini).

Automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

Changes to this policy

We update this policy when our use of data changes. The version published on this page applies.