Privacy Policy

1. Controller

The controller responsible for data processing on this website is Composites X (X CarbonTech), Sarajevo, Bosnia and Herzegovina. You can reach us at info@xcarbontech.ba or +387 60 311 32 44.

2. Data we process

We only process the data needed to operate this website and to respond to you:

• Quote and contact requests: name, company, email address, phone number, country, industry, requested service, quantity, project description and any files you attach.
• Email correspondence: the content of messages you send us and your contact details.
• Technical data: when you visit the website, our hosting provider automatically processes technical information such as IP address, date and time of the request, browser type and requested page. This is necessary to deliver the website securely.

3. Purposes and legal bases

We use request data solely to answer your inquiry, prepare quotations and carry out any resulting business relationship (performance of a contract or pre-contractual measures, Art. 6(1)(b) GDPR). Technical data is processed to operate and secure the website (legitimate interests, Art. 6(1)(f) GDPR). Where we are legally required to retain data, we do so to comply with legal obligations (Art. 6(1)(c) GDPR).

We apply the Law on Personal Data Protection of Bosnia and Herzegovina and, for visitors and customers in the European Union, the General Data Protection Regulation (GDPR).

4. Cookies

This website uses a single functional cookie, NEXT_LOCALE, which stores the language you select so that the site opens in that language on your next visit. It is kept for up to one year and contains no other information.

We do not use analytics, advertising or tracking cookies, and we do not build user profiles.

5. Recipients and service providers

We do not sell your data. To operate this website we use carefully selected service providers who process data on our behalf:

• Vercel Inc. (hosting and content delivery). Data may be processed on servers outside Bosnia and Herzegovina and the EU, including in the United States, on the basis of appropriate safeguards such as the EU Standard Contractual Clauses.
• Mailjet (email delivery), used to deliver the messages you send through our quote form to our inbox.

6. Drawings and project files

Drawings, CAD files and other technical documents you send us are treated confidentially. We use them only to evaluate your request and carry out your project, and we do not share them with third parties unless this is necessary for your project and agreed with you.

7. Retention

We keep request data for as long as needed to handle your inquiry and any resulting business relationship. If no business relationship results, we delete inquiry data no later than 24 months after our last contact, unless statutory retention obligations require longer storage.

8. Your rights

Subject to the applicable law, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive your data in a portable format;
• lodge a complaint with a supervisory authority — in Bosnia and Herzegovina the Personal Data Protection Agency, or the data protection authority in your EU country of residence.

9. Security

This website is served exclusively over encrypted HTTPS connections. We take appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access.

10. Changes and contact

We may update this policy when our services or legal requirements change; the current version is always published on this page. For any privacy question or to exercise your rights, write to info@xcarbontech.ba.