Privacy Policy

Who is responsible

Atilla Group d.o.o., identification number 4201581400004, Osik 429, Ilidža 71210, Sarajevo, Bosnia and Herzegovina, is responsible for the personal information it handles in connection with this corporate website. Contact: contact@atilla.co. A company that receives a direct enquiry may be responsible for its own subsequent processing.

Information we handle

When you contact us by email or telephone, we receive the information you choose to provide, such as your name, contact details, company, subject of interest and correspondence. The enquiry form includes your full name, country, email address, phone number, sector, business area, subject and message. Entries remain in the current browser page until an enabled delivery service accepts a submission; the form clearly indicates if delivery is unavailable. A failed or unavailable submission is not represented as a delivered enquiry.

Hosting and security services may process technical information including IP address, request time, browser information and access or security logs. Site search, portfolio filters, language previews and map controls operate in your browser without submitting those selections to the Group. The form does not accept file uploads, identity documents or medical records.

Purposes and legal bases

We use enquiry and correspondence information to respond, understand a business request and take steps towards a potential contractual relationship. Processing may be necessary for pre-contractual steps, the performance of an agreement, compliance with a legal obligation, or legitimate interests in managing business communications and protecting our services, where those interests do not override your rights. If consent is required for a separate activity, it will be requested for that purpose and may be withdrawn without affecting earlier lawful processing.

Providing information and enquiry routing

Contact details and the context of your request help us respond and identify the relevant company. We cannot provide a meaningful reply without a usable contact address and a description of the enquiry. You can use direct email or telephone instead of the form. Please provide only information relevant to the request, and ensure that you are authorised to share the details of other people. A business-area selection routes an enquiry; it does not enrol you in marketing or create an agreement.

Who receives information

Relevant staff and the operating company suited to your enquiry may receive the information necessary to respond. Service providers supporting hosting, communication and security may process information for those services. We may disclose information when legally required. We do not sell personal information collected through corporate enquiries.

International processing

Our companies and business contacts operate across countries, and an enquiry may need to reach the regional or specialist team relevant to your request. Email, hosting and security providers may also process data in countries outside your own. Where a transfer is restricted by applicable data protection law, an appropriate lawful transfer basis and the required safeguards must be established; an international business relationship is not by itself a substitute for those requirements. Contact us for information about the destination and safeguards relevant to your own enquiry.

Retention

We retain correspondence for as long as needed for the enquiry, the relevant business relationship, applicable recordkeeping requirements and the establishment or defence of legal claims. The appropriate retention period depends on the purpose, the nature of the information and legal requirements. Information that is no longer needed should be deleted or anonymised.

No automated decisions or enquiry marketing

This website does not use your enquiry to make automated decisions producing legal or similarly significant effects. Sector and business-area choices help human teams understand the request. A corporate enquiry does not subscribe you to a newsletter. If a separate marketing activity is offered later, its purpose, lawful basis and any applicable consent or opt-out arrangements must be explained independently.

Your rights

Subject to the applicable law and its conditions, you may request access, correction, erasure, restriction or portability of your personal information and object to certain processing. Where consent is the basis, you may withdraw it. Contact contact@atilla.co with your request; proportionate identity checks may be needed. You may also complain to the Personal Data Protection Agency in Bosnia and Herzegovina (azlp.ba) or another competent supervisory authority where applicable.

Security and sensitive information

Access to corporate enquiries should be limited to the people and service providers who need it for the relevant purpose. We seek to use proportionate technical and organisational measures, but internet communications cannot be guaranteed free from every risk. Do not send medical records, identity documents, payment card details or other sensitive information through this corporate enquiry form or a general email address. A relevant operating company may arrange a different channel where its service genuinely requires that information.

This corporate website is not a patient portal, a financial account service or an emergency channel. If you believe information has reached us in error, please contact contact@atilla.co so the matter can be reviewed.

External websites and cookies

Links to messaging services, social networks, Google Maps, scheduling services, the digital catalogue and company websites open independently. Their operators apply their own privacy terms. We do not embed these services as trackers or automatically send your form entries to them. If you choose to book a meeting or contact us through a messaging service, that service processes the information you provide through its own interface. Please review its notice before sharing personal information. This edition contains no advertising pixels or embedded analytics trackers. Necessary hosting and access services are described in the Cookie Policy.

How to make a privacy request

Write to contact@atilla.co with the relevant contact details, the right you wish to exercise and enough context to identify your correspondence. We may request proportionate information to verify identity, rather than automatically requiring a full identification document. Requests are assessed under the applicable law, including its response periods and any lawful exceptions. If a request cannot be fulfilled in whole or in part, the reasons and available next steps should be explained. Restrictions, legal recordkeeping requirements or third-party rights may affect the outcome; they do not remove the obligation to review your request.

Changes and contact

This notice was last updated on 4 October 2026. It may be revised when the website or the processing it describes changes. For privacy enquiries, email contact@atilla.co or write to the operator at the address above.

Career applications and CVs

If you submit a general career application, the information includes your contact details, professional background, qualifications, preferred sector and location, languages, availability, introduction and the CV you choose to provide. This information is used to assess your application, identify the relevant Group company and contact you about your professional profile. Please provide information relevant to recruitment and avoid identity documents, banking details, medical records or unnecessary sensitive information.

When online submission is enabled, the application and attached CV are addressed to contact@atilla.co. Information may be shared with the relevant Group company and its recruitment contacts for these purposes. You can also apply by email. To ask about your application, correct your details or request removal from further consideration, contact contact@atilla.co. Any continuing retention must be connected with the recruitment purpose or an applicable legal requirement.

Form security

Online forms use temporary security counters to limit excessive submissions. These counters use a derived network identifier and a time window; they do not contain your message or CV. Hosting and email-delivery providers process the information needed to operate the service and deliver your submission.