Privacy policy (EU)

This privacy statement was last updated on 21 April 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement we explain what we do with the data we obtain about you through https://xfaktor.org. We recommend that you read this statement carefully. In our processing we comply with the requirements of privacy legislation. Among other things, this means that:

• we clearly state the purposes for which we process personal data. We do this through this privacy statement;
• we aim to limit our collection of personal data to the personal data needed for legitimate purposes;
• we first ask for your explicit consent to process your personal data in cases that require your consent;
• we take appropriate security measures to protect your personal data, and we also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or to have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep about you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal data for a number of purposes connected with our business, which may include the following:

1.1 Contact – by telephone, post, e-mail and/or web forms

For this purpose we use the following data:

• First and last name
• E-mail address
• Telephone number

The basis on which we may process this data is:

Upon consent.

Retention period

We will keep this data until the service is terminated.

2. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.

3. Disclosure practices

We disclose personal data if we are required to do so by law or by a court order, in response to a law enforcement agency, to the extent permitted by other provisions of law, to provide information or to carry out an investigation into a matter related to public safety.

If our website or organisation is taken over, sold or involved in a merger or acquisition, your data may be disclosed to our advisers and any prospective buyers and will be passed on to the new owners.

We have concluded a data processing agreement with Google.

Google may not use the data for any other Google services.

The inclusion of full IP addresses has been blocked by us.

4. Security

We are committed to the security of personal data. We take appropriate security measures to limit misuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are reviewed regularly.

5. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend that you read the privacy statements of these websites before using them.

6. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. We recommend that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

7. Accessing and modifying your data

If you have questions or want to know what personal data we hold about you, please contact us. You can contact us using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it and how long it will be kept.
• Right of access: you have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, delete or block your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to withdraw that consent and to have your personal data deleted.
• Right to data portability: you have the right to request all your personal data from the controller and to transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We respect this, unless there are justified grounds for the processing.

Please make sure you always state clearly who you are, so that we can be certain we are not changing or deleting the data of the wrong person.

8. Submitting a complaint

If you are not satisfied with the way we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Agency.

9. Contact details

Društvo za faktoring „X faktor“ d.o.o. Banja Luka

Braće Potkonjaka br. 4, 78000 Banja Luka

Bosnia and Herzegovina

Website: https://xfaktor.org

E-mail: info@xfaktor.org

Telephone: 065 868 007