Privacy policy

This policy explains how Simbia Marketing processes personal data through the site, AI chat, forms, orders and VIP portal. We apply the Law on Protection of Personal Data of Bosnia and Herzegovina ("Official Gazette of Bosnia and Herzegovina", number 12/25) and other mandatory rules that apply to a specific service.

Data Controller: Simbia Marketing, Laktaši, Bosnia and Herzegovina. The full registered data of the business owner is stated in the offer, estimate or contract before payment. Privacy Contact: info@simbiamarketing.com, +387 65 586 271.

1. What data we collect

Depending on what you use, we can handle:

• Contact details: name, surname, email address, phone number
• Business data: company name, web address, advertising budget
• Technical data: temporary IP processing in server security logs, pseudonymized anti-abuse tag and, with consent only, Google Analytics data
• Communication History: content of messages sent through our forms and conversations with Simbia AI chat, along with date, page and basic keywords
• Transaction Data: digital product order data
• VIP Portal Data: reports, negotiated channels and metrics entered by the client or an authorized Simbia administrator
• Publicly available business data: website status, public title and description, robots.txt, sitemap and availability of business profiles provided by the client

2. How we use data

We use data for clearly defined purposes:

• Responding to your inquiries and audit requests
• Provision of contracted marketing services
• Display of agreed reports in the VIP portal
• Measurement of site usage when you accept optional analytics
• Fulfillment of legal obligations
• Maintaining conversation continuity, preventing abuse of free AI limit and reviewing response quality

AI can prepare a response or a draft, but does not make decisions that produce a legal effect against the visitor. Public announcements and payment approval remain under human control.

3. Legal basis of processing

• Actions before the contract and execution of the contract: inquiries, offers, orders, support and VIP services you requested
• Legal Obligation: data we need to preserve due to accounting, tax or consumer regulations
• Legitimate interest: basic site security, prevention of abuse and defense of legal claims, after assessing that your rights do not prevail
• Consent: optional analytics and newsletter; you can withdraw consent without affecting earlier lawful processing

We do not automatically use the contact data sent for the inquiry or order for the newsletter. Marketing messages require specific user selection.

4. Storage periods

• AI Conversations: up to 90 days
• Pseudonymized free AI limit records: up to 12 months
• Inquiries and contact records: up to 24 months from the last relevant communication, unless the contract or law requires longer
• Orders, invoices and contractual documentation: during the contract and within the deadlines required by applicable accounting, tax and consumer regulations
• VIP Data: during the contractual cooperation and the reasonable period necessary to close the obligations, unless otherwise agreed or prescribed

Data is deleted or anonymized earlier when it is no longer needed, unless there is a legal obligation or the need to exercise or defend a legal claim.

5. Service providers and recipients

We do not sell personal data. To the extent necessary for the stated purpose, they can be processed by:

• Hostinger: hosting, sending server emails and saving application data
• AI and analytics: a contracted AI service processes chat messages, while analytics starts only after consent
• Meta, Google Ads and other contracted tools: only for client orders and purposes for which there is authorization and proper notice
• Authorities and professional advisers: when required by law or required by legal requirement

If the processing involves a transfer outside of Bosnia and Herzegovina, contractual and other safeguards required by applicable law must be provided before using the corresponding service.

6. Cookies and local memory

We use the following categories of cookies:

• Required Memory: stores the temporary VIP login, the basic state of the interface, your privacy choices, and the anonymous tag needed to keep the free AI limit from being reset by refreshing the page
• Analytical: Google Analytics or Tag Manager are only loaded if connected and if you select "I accept analytics"
• Marketing: marketing tags are not active by default and may not be included without appropriate consent

Optional cookies and similar tags are not loaded before user selection. You can change your choice via the "Privacy Settings" link at the bottom of the page.

7. Your rights

In accordance with the valid Personal Data Protection Act, you can, depending on the conditions, request:

• Access right: you can request a copy of any data we hold about you
• Right of correction: you can request correction of incorrect data
• Deletion or restriction of processing: when the legal requirements are met
• Right to portability: you can get your data in machine readable format
• Right to object: you can object to certain processing methods
• Right to withdraw consent: at any time, without giving a reason

To exercise your rights, write to info@simbiamarketing.com. We respond without undue delay, as a rule no later than 30 days; a complex claim may require an extension permitted by law. You have the right to file a complaint Agency for the protection of personal data in Bosnia and Herzegovina.

8. VIP portal and public web checks

We can open a private VIP portal for contracted clients. AI automation checks only the addresses that the Simbia administrator enters for that company and only the data available without logging in:

• website availability, response time, title, description, canonical, robots.txt and sitemap
• availability of public business profiles provided by the client
• publicly available business changes can only be tracked according to the terms of the source, without bypassing login, technical restrictions or identifying individuals
• private ad, sales, and social metrics are not fabricated or downloaded without authorized access
• the access code is stored as an irreversible hash, and the login uses a timed session

9. Data security

We apply reasonable technical and organizational measures, including:

• HTTPS encryption during data transfer
• access to proprietary functions is protected by an administrator login
• VIP codes are not saved as readable text
• data directory and configuration are blocked from direct web access
• limitation of login attempts and automatic expiration of VIP session
• restricted administrator access, availability monitoring and backups according to internal procedure

No system is completely risk-free. If a breach of personal data occurs, we assess the risk and notify the competent authority and persons when required by law.

10. Contact for data protection

For all questions related to privacy and data protection:

Simbia Marketing
Laktaši, Bosnia and Herzegovina
Email: info@simbiamarketing.com
Tel: +387 65 586 271