Privacy Policy

MaLu Consulting d.o.o. · Last updated: March 2026

1. Who we are

MaLu Consulting (hereinafter "MaLu", "we", "us") is a monitoring and evaluation consultancy registered in Bosnia and Herzegovina, with its registered office at Zagrebačka 67, 71000 Sarajevo, Bosnia and Herzegovina.

We are the data controller for the personal data collected through this website (malu.ba).

Contact: office@malu.ba · +387 61 311 428

2. What personal data we collect and why

We collect personal data only when you voluntarily provide it through the contact form on our website. Specifically, we collect:

DataPurposeLegal basis (GDPR Art. 6)
Email addressTo respond to your enquiryArt. 6(1)(b) – steps prior to entering a contract; or Art. 6(1)(f) – legitimate interest
Message contentTo understand and respond to your enquiryArt. 6(1)(b) or Art. 6(1)(f)

We do not collect any special category data (e.g. health, ethnicity, political opinions). We do not collect data from minors.

3. How we use your data

Your data is used solely to respond to your enquiry. We do not use it for automated decision-making, profiling, or direct marketing without your explicit consent.

4. How long we keep your data

We retain contact enquiries for a maximum of 2 years from the date of receipt, unless a longer retention period is required by law or the enquiry results in an ongoing business relationship.

5. Who we share your data with

We do not sell or share your personal data with third parties for commercial purposes. We may share data with:

  • Email service providers used to receive and manage incoming messages (e.g. our hosting provider, Globalhost d.o.o.), solely for technical processing.
  • Competent authorities, if required by applicable law.

All third-party processors are bound by data processing agreements and may only process your data in accordance with our instructions.

6. International transfers

Your data is processed and stored on servers located in Bosnia and Herzegovina and/or within the European Economic Area (EEA). We do not transfer personal data to countries outside the EEA without appropriate safeguards.

7. Cookies

Our website uses only technically necessary cookies required for the website to function. We do not use tracking, analytics, or advertising cookies without your consent. If this changes, this policy will be updated and a cookie consent mechanism will be implemented.

8. Your rights under GDPR

If you are located in the EU/EEA or Bosnia and Herzegovina, you have the following rights regarding your personal data:

  • Right of access – you may request a copy of the data we hold about you.
  • Right to rectification – you may request correction of inaccurate data.
  • Right to erasure – you may request deletion of your data, subject to legal retention obligations.
  • Right to restriction – you may request that we limit processing of your data.
  • Right to data portability – you may request your data in a structured, machine-readable format.
  • Right to object – you may object to processing based on legitimate interests.
  • Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at office@malu.ba. We will respond within 30 days.

9. Right to lodge a complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority:

  • Bosnia and Herzegovina: Personal Data Protection Agency of Bosnia and Herzegovina (Agencija za zaštitu ličnih/osobnih podataka u BiH) – www.azlp.ba

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated "Last updated" date. We encourage you to review this page periodically.

12. Contact

For any questions or requests related to this Privacy Policy or your personal data, please contact:

MaLu Consulting
Zagrebačka 67, 71000 Sarajevo, Bosnia and Herzegovina
Email: office@malu.ba
Phone: +387 61 311 428