Galeyo Privacy Policy

Last updated: September 17, 2025
This Privacy Policy explains how Galeyo d.o.o. Sarajevo ("Galeyo", "we", "our", or "us") collects, uses, and protects your personal data when you visit our website galeyo.com or interact with us in any way.
‍
We are committed to protecting your personal data and handling it responsibly and transparently - in line with the Law on Personal Data Protection of Bosnia and Herzegovina (ZZLP 2025) and, where applicable, the EU General Data Protection Regulation (GDPR).
Who We Are
Galeyo d.o.o. Sarajevo
Address: Muhameda Kantardžića 3, 71000 Sarajevo, Bosnia and Herzegovina
Email: privacy@galeyo.com
We are the data controller for the personal data collected through our website and communications.
What Data We Collect
2.1 Data You Provide Voluntarily
  • Name, surname, and contact details (email, phone)
  • Messages sent via contact forms, newsletters, job applications
  • Your preferences and marketing consents
2.2 Data Collected Automatically
  • IP address and browser/device type
  • Pages visited and time spent
  • Interactions with forms, buttons, or media
  • Cookies and similar technologies (see Cookie Policy)
How and Why We Use Your Data
Purpose
Legal basis

To provide and maintain our website and services

Legitimate interest / Contractual necessity

To respond to inquiries or messages

Legitimate interest / Pre-contractual steps

To send newsletters and marketing

Consent

To improve website functionality and content

Legitimate interest

To fulfill legal or regulatory obligations

Legal obligation

We never sell or misuse your personal data.
Data Sharing
We may share your data with:
  • Service providers (hosting, analytics, email tools, etc.) under strict contractual agreements
  • Affiliated companies within our corporate group, where applicable
  • Regulatory authorities if required by law
  • Event or marketing partners, only if you give consent
All third parties must follow strict data protection rules in line with our own standards.
International Transfers
If your data is transferred outside Bosnia and Herzegovina (e.g., for cloud hosting in the EU), we ensure adequate safeguards - including:
  • Standard contractual clauses (SCCs)
  • EU/EEA adequacy decisions
  • Technical and organizational security measures
Data Retention
We retain personal data only for as long as necessary:
  • Inquiries and contact data: up to 24 months from last interaction
  • Marketing consents: until withdrawal
  • Analytics and technical logs: 6–24 months depending on purpose
  • Legal or contractual data: as required by law
After expiry, data is deleted or fully anonymized.
Your Rights
Under the BiH law (ZZLP) and GDPR (where applicable), you have the right to:
  • Access your personal data
  • Request correction or deletion
  • Restrict or object to processing
  • Withdraw your consent at any time
  • File a complaint with the Data Protection Agency of BiH (AZLP)
To exercise any of these rights, email us at privacy@galeyo.com
Cookies and Tracking
We use cookies to:
  • Ensure basic site functionality
  • Understand how users interact with our site (analytics)
  • Support future improvements and design
  • Enable optional marketing (only with consent)
Data Security
We implement modern security standards including:
  • Encrypted data transmission
  • Access controls and authentication
  • Regular backups and audits
  • Employee awareness and training
We work continuously to minimize risks and protect your information.
Children’s Privacy
Our website is not intended for children under 16 years. We do not knowingly collect personal data from minors. If you believe your child has shared personal data with us, please contact us so we can remove it.
Job Applicants
If you apply for a job at Galeyo, we process your data solely for recruitment purposes - under pre-contractual and legal obligations. More details are provided during the application process or in a separate Candidate Privacy Notice.
Changes to This Policy
We may update this Privacy Policy occasionally to reflect legal or technical changes. When we do, we will update the “Last updated” date at the top of the page. You are encouraged to review this page regularly.
Contact
Questions or requests? Email us at privacy@galeyo.com