Privacy Policy

Controller: O.D. Macido IT Solutions Laticka 1A, 71210 Sarajevo, Bosna i Hercegovina ID number: 4304407220009 E-mail for data protection enquiries: info@macido.com (hereinafter: Macido) We process data in accordance with the Personal Data Protection Act of Bosnia and Herzegovina (Official Gazette of BiH 12/25) and, for users from the European Union, also in accordance with the General Data Protection Regulation (GDPR).

• Account and billing data: first and last name or company name, address, phone, e-mail, company ID number and VAT number, invoices and payment records. • Domain registration data: registrant data required by the registry – for .ba domains also the date of birth (natural persons) or ID number (legal entities) and the purpose of use of the domain. • Service data: ordered packages, domains, technical settings, resource usage statistics. • Support communication: tickets, e-mails, enquiries from the contact form. • Technical data: IP address, time of access and server logs (for security and troubleshooting). We do not ask for a copy of your identity card or your unique master citizen number (JMBG).

• Performance of the contract: activation and maintenance of services, domain registration, support. • Legal obligations: accounting and tax records, obligations of an accredited registrar towards UTIC. • Legitimate interest: system security, prevention of abuse and fraud. • Consent: visit statistics via Google Analytics (only if you accept it) and any marketing messages. You may withdraw your consent at any time.

• UTIC (the .ba registry): registrant and contact data for .ba domains. Publicly (nic.ba, RDAP) the owner's name or company name is displayed; date of birth, ID number, phone and e-mail are not published. • The partner registrar and the registries of other domains (e.g. .com, .net, .eu): data required for registration, according to the rules of ICANN and of the registry. • Infrastructure providers: the data centers OVH (France) and Hetzner (Germany/Finland) for servers, and Microsoft 365 for e-mail – as processors, exclusively on our instructions. • Google (Analytics) and Plausible (cookie-less statistics) for website visit statistics. • State authorities, where prescribed by law or ordered by a court decision. We do not sell data and do not pass it on to advertisers. We do not give natural persons' data to third parties; for .ba domains we refer such requests to UTIC.

The data is stored on servers in the European Union. Data of .ba domains is also stored with UTIC in Bosnia and Herzegovina. All transfers are encrypted (TLS).

• Customer account and service data: for the duration of the contractual relationship. • Invoices and payment records: as long as accounting and tax regulations prescribe. • Domain registrant data: while the domain is registered and as long as the registry rules require. • Server logs: up to 30 days; backups: up to 30 days. After that we delete or anonymize the data.

We use cookies necessary for the operation of the website and the customer portal (session, language, cart, remembered cookie choice). Plausible statistics are kept without cookies. Google Analytics is loaded only if you accept it in the cookie notice; you can change your choice at any time. We do not use advertising cookies.

We apply appropriate technical and organizational measures: encrypted connections, access to data restricted to authorized persons only, regular security updates and backups. We will notify you and the competent authority within the statutory period of a security breach that may endanger your rights.

You have the right of access to your data, rectification, erasure, restriction of processing, portability and objection to processing, as well as the right to withdraw consent. Send your request to info@macido.com; we respond within 30 days. Some data cannot be deleted for as long as the law or the domain registry rules require it. You may also lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (www.azlp.ba).

We may update this policy. We publish material changes on this page and notify users by e-mail at least 14 days in advance.

This English text is a courtesy translation. In case of any discrepancy, the Bosnian version published at macido.ba is the authoritative and legally binding version.