Privacy notice

Who is responsible

AFDAL is the consultancy of Harun Rešidbegović. The controller of the personal data described here is:

“AFDAL” vl. Harun Rešidbegović, Gračanica
ul. Ahmeta Šiljića br. 18
75320 Gračanica, Tuzlanski Kanton
Bosna i Hercegovina
Identification number (JIB): 4311617970007
Email: [email protected]

For any question about this notice or your data, write to [email protected]. This notice follows the Law on Personal Data Protection of Bosnia and Herzegovina (Official Gazette of BiH, no. 12/25).

Hosting, security, and statistics: Cloudflare

This website is delivered through Cloudflare, Inc. Cloudflare provides the content delivery network (CDN), protects the site against attacks and abusive traffic, and gives AFDAL aggregated traffic statistics.

When you open a page, Cloudflare processes technical request data: your IP address, browser and device type, the page you requested, the page you came from, and the date and time. AFDAL does not use this data to identify visitors and does not combine it with other data.

The statistics are counts, such as the number of visits and the countries they come from. They are built from the requests that reach Cloudflare.

To see which pages are read and how fast they load, this website also uses Cloudflare Web Analytics. It is a small script from Cloudflare that reports the page address, the referring website, the browser and device type, and loading times. It sets no cookies, stores nothing in your browser, and does not build a profile of you. AFDAL has set Web Analytics to exclude visitor data in the European Union. With this setting, Cloudflare drops the analytics data that its data centers in the European Union collect.

The legal basis is the legitimate interest in running a secure and working website. Cloudflare acts as a processor for AFDAL under its data processing addendum. Details are in the Cloudflare privacy policy.

Cookies and embedded content

AFDAL sets no cookies and stores nothing in your browser. That is why this website has no cookie banner.

Cloudflare can set a strictly necessary security cookie (cf_clearance or __cf_bm) if it has to check that a request comes from a person and not from an automated attack. These cookies are not used for tracking or advertising.

The website has no embedded content from other providers: no videos, maps, booking tools, social media widgets, or fonts loaded from other servers. The only file that comes from another server is the Cloudflare Web Analytics script described above.

When you contact AFDAL

The website has no contact form. If you write to [email protected], your name, email address, and the content of your message are used to answer you and to handle your request. The legal basis is the legitimate interest in answering inquiries, or steps taken at your request before a contract.

Messages are stored in Microsoft 365 (Exchange Online). Microsoft processes them on AFDAL’s behalf under its data protection addendum. The mailbox data is currently stored in Microsoft’s European datacenter region. Microsoft has made no binding commitment on this location, so it can change.

AFDAL does not sell personal data, does not use it for advertising, and does not send newsletters.

Transfers to the United States

Cloudflare, Inc. and Microsoft Corporation are companies in the United States. Cloudflare operates servers worldwide, and both companies can process the data described above in the United States.

The basis for these transfers is Article 47(2) of the Law on Personal Data Protection of Bosnia and Herzegovina. Under this article, a decision of the European Commission that a country or an organization protects personal data adequately also counts in Bosnia and Herzegovina. The European Commission has adopted such a decision for companies in the United States that are certified under the EU-US Data Privacy Framework. Cloudflare, Inc. and Microsoft Corporation are both certified under this framework. The public list of certified companies is at www.dataprivacyframework.gov.

How long data is kept

• Request data: AFDAL keeps no server logs of its own. Cloudflare keeps request data for a limited time, as set out in its privacy policy.
• Inquiries that do not lead to an engagement: deleted within 12 months of the last message.
• Messages that are part of an engagement: kept for the length of the engagement, and after that for as long as the law requires, for example for accounting and tax records.

Your rights

You can ask AFDAL to:

• tell you what personal data it holds about you, and give you a copy
• correct data that is wrong or incomplete
• delete your data, or restrict how it is used
• stop using your data where the use is based on legitimate interest
• hand your data over to you or to another provider in a common format

To use any of these rights, write to [email protected]. It costs nothing. AFDAL answers without undue delay, and at the latest within 30 days of receiving your request. This period can be extended by 60 days. If that happens, AFDAL tells you within the first 30 days and gives the reasons.

You have the right to file a complaint with the supervisory authority, the Personal Data Protection Agency in Bosnia and Herzegovina:

Agencija za zaštitu ličnih podataka u Bosni i Hercegovini
Dubrovačka br. 6
71000 Sarajevo
Bosna i Hercegovina
www.azlp.ba

You also have the right to bring an action before the competent court. If you live in the European Union, you can also complain to the data protection authority in your country.

Links to other websites

This website links to LinkedIn. The link is a plain link, not a widget, so LinkedIn receives no data until you open it. LinkedIn has its own privacy policy, and AFDAL is not responsible for its content.

Changes to this notice

If the website or the way AFDAL handles data changes, this notice is updated first, and the date below changes with it.

Last updated: 12 November 2026