Privacy policy

Evola is a branding, web design and marketing studio based in Mostar, Bosnia and Herzegovina.

For any questions about the processing of personal data, and to exercise the rights described in this document, write to hello@evola.agency or call +387 63 707 800.

We collect only what you send us yourself and what is necessary for the website to work.

Contact form data. Your name, email address and the content of your message. You fill in these fields yourself and decide how much to write in your message.

Data you send us directly. If you email or call us, we have what you told us or sent us at that time.

Technical server data. Like every website, our server logs the requests it receives, including IP address, browser type and time of access. These logs are used to run the website and keep it secure.

Visit statistics. We use Vercel Analytics, a tool that counts visits and shows which pages are read. It does not set cookies, does not follow you from one page to another and does not build a profile of you. The figures we see are aggregated.

Contact form protection. On the Contact page we use Cloudflare Turnstile, a tool that checks whether a message is sent by a person or an automated program. For this, Cloudflare processes technical data such as IP address and browser type, only for that check. Turnstile loads only on the Contact page.

We do not collect special categories of data, we do not buy data from third parties and we do not use advertising pixels.

We use your data for exactly what you gave it to us for.

We reply to the enquiry you sent and continue the conversation about a possible collaboration. If we do work together, we use it to carry out the agreed work and to meet the legal obligations that follow from it.

We use technical logs, visit statistics and the contact form check to run the website, to keep it maintained and secure, and to see what people read on it.

We do not use your data for automated decision-making or profiling.

Processing is based on the Law on the Protection of Personal Data of Bosnia and Herzegovina.

When you write to us through the form or by email, the basis is your consent, which you gave by contacting us and which you can withdraw at any time.

When an enquiry turns into a collaboration, the basis is the performance of a contract or taking steps at your request before entering into a contract.

For technical server logs, aggregated statistics and protecting the contact form from automated messages, the basis is our legitimate interest in keeping the website running and secure and in knowing which content is useful.

When the law requires us to keep something, for example for accounting purposes, the basis is a legal obligation.

This website does not set cookies.

We have no cookies for analytics, advertising or tracking. That is why there is no cookie consent pop-up on the website: there is nothing to consent to.

We measure visit statistics with a tool that works without cookies and without identifiers that would follow you between pages.

Cloudflare Turnstile, which protects the form from automated messages, loads on the Contact page. It serves only the security of the form, not tracking or advertising.

If we ever change this, we will first change this document and introduce consent, and only then the technology.

We do not sell your data or give it to third parties for their own purposes.

It is accessed only by service providers who make our work technically possible and who may process the data only on our instructions:

• Vercel Inc., United States, website hosting and visit statistics
• Google, United States, processing and delivery of messages sent through the contact form
• Cloudflare, Inc., United States, protecting the contact form from automated messages
• Zoho, data centre in the European Union, email server for the hello@evola.agency address

Some of these services mean that data is processed outside Bosnia and Herzegovina. The Council of Ministers of Bosnia and Herzegovina has not adopted an adequacy decision for the United States, so transfers rely on data processing agreements concluded with these providers and on their protective measures.

We may also disclose data to a competent authority when the law requires us to.

We do not keep data longer than we need it.

We keep contact form messages and correspondence about an enquiry that did not turn into a collaboration for no more than two years from the last communication, and then delete them.

We keep records of collaborations that went ahead for as long as accounting and limitation rules require.

We keep technical server logs for a short time, as long as the hosting provider retains them for operation and security. Visit statistics are aggregated and not linked to any person.

Under the Law on the Protection of Personal Data you have the following rights.

• Access. You can ask for confirmation of whether we process your data and for a copy of that data.
• Rectification. If something is inaccurate or incomplete, you can ask for it to be corrected.
• Erasure. You can ask us to delete your data when there is no longer a basis for keeping it.
• Restriction of processing. You can ask us to pause processing temporarily.
• Objection. You can object to processing based on our legitimate interest.
• Portability. You can ask to receive the data you gave us in a common machine-readable format.
• Withdrawal of consent. You can withdraw consent at any time, without affecting the lawfulness of processing carried out before that.

Send your request to hello@evola.agency. We will reply within the time limits set by law.

If you believe we have processed something contrary to the regulations, you have the right to lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina.

The website is served only over an encrypted connection, and only the person it is intended for has access to a message you send us.

We protect the accounts we use to access this data with two-factor authentication, and we choose service providers based on the protective measures they apply themselves.

No measure guarantees absolute security. If a breach does occur that poses a risk to your rights, we will act as the law requires and notify the competent authority and, where necessary, you.

We change this document when what we actually do changes.

Every new version is published at this address, with the date of the last update at the top. If a change concerns the purpose of processing or introduces a technology that requires your consent, we will not apply it before asking for that consent.

For anything about this document and the processing of your data:

Email: hello@evola.agency

Phone: +387 63 707 800

Mostar, Bosnia and Herzegovina

This is an English translation. If the Croatian and English versions differ, the Croatian version applies.