Meridian Group d.o.o. Sarajevo · www.meridian.ba
Last updated: 4 November 2026.
1. Data controller
Meridian Group d.o.o. Sarajevo, Dajanli Ibrahim-bega 10-12, Ciglane, 71000 Sarajevo, Bosnia and Herzegovina. ID: 4202591830003; VAT: 202591830003. Phone: +387 33 548 526. E-mail for business enquiries and personal data protection requests: info@meridian.ba.
2. Purposes, categories of data and legal basis
When you send us an enquiry via the contact form, the catalogue, e-mail, phone, WhatsApp or Viber, we may process your first and last name, company name, contact details, the content of your message, product codes and requested quantities. We use this data to communicate with you, prepare and follow up quotes and respond to requests. The legal basis depends on the circumstances: taking steps at your request prior to entering into a contract, or our legitimate interest in business communication.
For contracted business deliveries, we may process contact person, invoicing and delivery data to perform the contract and meet our legal obligations. This website does not accept orders or online payments through a WooCommerce web shop.
When you use the website, technical data (e.g. IP address, browser, time of access and security logs) may be processed for the security and technical operation of the website. If analytics cookies are used, their processing and the applicable legal basis depend on the actual settings and the applicable consent rules.
3. Recipients of data
Access to data is limited to authorised employees who need it for their work. Data may be shared with hosting, e-mail and IT service providers, and with delivery, installation or service partners where necessary to fulfil a request. If you communicate via WhatsApp or Viber, the rules of those service providers also apply. We do not sell data to third parties.
4. International data transfers
Certain digital service providers may process data outside Bosnia and Herzegovina. Where such a transfer takes place, the applicable legal conditions and safeguards apply. The specific service providers, processing locations and legal transfer mechanisms must be confirmed in the company's technical and contractual records.
5. Retention periods
We keep business enquiries and quotes only as long as necessary to process requests, follow up business communication and protect legitimate legal interests, and we periodically review the need to keep them. Data related to accounting and tax documents is kept for the periods prescribed by the applicable laws. Technical logs and analytics data are kept according to documented settings and a justified processing purpose. Specific internal retention periods are to be aligned with the company's practice.
6. Your rights
In accordance with the Law on Personal Data Protection of BiH ("Official Gazette of BiH", No. 12/25), where the legal conditions are met, you may request access, rectification, erasure, restriction of processing and data portability, object to processing, and withdraw consent where processing is based on consent. Please send requests to info@meridian.ba. We will respond without undue delay, as a rule within 30 days of receiving the request; the law allows an extension of a further 60 days with timely notice. You have the right to lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina.
7. Cookies and analytics
The website may use technically necessary cookies for basic functions and, if enabled, analytics tools to measure visits. Details on cookie categories, duration, service providers and user choices must match the actual configuration of the website. Where prior consent is required for certain cookies, such cookies must not be activated before the user has made the corresponding choice. Users can also manage cookies through their browser settings.
8. Security
We apply appropriate technical and organisational data protection measures, including access control and secure HTTPS communication. The scope of the measures is adapted to the risks of processing.
9. Changes to this policy
We may update this policy when our data processing, technical systems or legal requirements change. The updated version will be published on this page with the date of the change.