Privacy policy
Last updated: 22.10.2026
1. Controller
The controller responsible for data processing on this website is: SM Mondo d.o.o. Sarajevo, Antuna Branka Šimića 2A, Sarajevo, Bosna i Hercegovina, info@sekuvia.ba.
2. This website and Sekuvia Health
This privacy policy applies to the website sekuvia.ba. The Sekuvia Health software runs on the servers of each healthcare institution; the institution is responsible for patient data in those systems. Sekuvia has no access to that data.
3. Server log files
When you visit the website, our hosting provider processes technically necessary data: IP address, date and time, page visited, browser and operating system. The purpose is the secure and stable operation of the website. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR and the BiH Personal Data Protection Act). Log files are deleted after the hosting provider's usual period.
4. Cookies
We use two necessary cookies, each for 12 months: sekuvia_consent stores your cookie choice and sekuvia_lang the website language you last used. They contain no other personal data.
Only with your consent (Art. 6(1)(a) GDPR) do we load Google Analytics 4 (see section 5). You can withdraw your consent at any time via "Cookie settings" in the footer; the Analytics cookies are then deleted.
5. Google Analytics
With your consent we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It records, among other things, pages viewed, time on site, device and browser, approximate origin (country/city), and that a form was submitted — never its content. Google Analytics 4 does not store IP addresses. Google signals and advertising features are disabled.
Analytics sets the cookies _ga and _ga_* (stored for up to 2 years). Data may also be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. More information: policies.google.com/privacy.
6. Contact and demo form
When you write to us through the contact or demo form, we process the data you provide (name, e-mail, phone if given, institution, message) to answer your enquiry or arrange a demo. The legal basis is your consent and pre-contractual measures (Art. 6(1)(a) and (b) GDPR).
The enquiry is sent to us by e-mail and is not passed on to third parties. We delete the data once the enquiry has been handled, at the latest after 12 months, unless a business relationship arises or statutory retention obligations apply.
Please do not send us health or patient data through the forms.
7. Fonts
Fonts are loaded locally from our server. No connection is made to Google or other third parties.
8. Social networks
We link to our profiles on Facebook, Instagram and LinkedIn. These are plain links without embedded plugins — no data is sent to these networks when you visit our website. Only when you click a link does the respective network's privacy policy apply.
9. Recipients and transfers
Apart from us, recipients of your data are our hosting provider as a processor and — only with your consent — Google (Analytics, see section 5). Form data is not passed on to third parties.
10. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time with effect for the future. Please contact us at the address above.
You also have the right to lodge a complaint with a supervisory authority — in Bosnia and Herzegovina, the Personal Data Protection Agency (Agencija za zaštitu ličnih podataka u BiH); in the EU, the supervisory authority of your country of residence.
11. Security
The website is delivered exclusively over encrypted HTTPS.
12. Changes
We update this privacy policy when the website or the legal situation changes. The version published here applies.