Privacy policy
Privacy and Cookie Policy
Hrvatska pošta d.o.o. Mostar
Last updated: October 6, 2025
1. Introduction
Protecting personal data is of special importance to Hrvatska pošta d.o.o. Mostar (hereinafter: the Company).
This Policy explains which personal data we collect through the website https://brzaposta.ba, how and why we process it, for how long we retain it, who has access to it, and what your rights are regarding such processing.
By using this website, you confirm that you have read and understood this Policy.
For any questions, please contact us at: korisnicka.sluzba@post.ba
2. Data Controller and Contact
Data Controller:
Hrvatska pošta d.o.o. Mostar
Kralja Zvonimira b.b., 88000 Mostar, Bosnia and Herzegovina
E-mail: korisnicka.sluzba@post.ba
If you have any questions regarding the processing of your personal data or wish to exercise your rights, please contact us through the provided channels.
3. Principles of Data Processing
We collect only data necessary for providing our services.
Data is processed lawfully, fairly, and transparently.
Processing is limited to the purposes for which the data was collected.
Data is retained only as long as necessary for its purpose.
We apply appropriate technical and organizational security measures.
4. How We Collect Data
We collect data in three ways:
Automatically – via technical logs and cookies.
Through forms – contact form, shipment complaint form, and pick-up order form.
Based on your consent – for analytical purposes (Google Analytics 4).
5. Purposes and Legal Bases of Processing
| Purpose | Example of Data | Legal Basis |
|---|---|---|
| Display and security of the website | IP address, logs, browser and device data | Legitimate interest (Art. 6(1)(f) GDPR) |
| Contact and communication with users (contact form, complaint form, pick-up order) | name, email, phone, address, message content | Pre-contractual steps / performance of contract (Art. 6(1)(b) GDPR) |
| Managing cookie consents | anonymous consent ID, time, categories | Legal obligation (Art. 6(1)(c) GDPR) |
| Website statistics and analytics (Google Analytics 4) | anonymized IP address, user ID, interaction data | Consent (Art. 6(1)(a) GDPR) |
| Language and functional settings (Polylang, Elementor) | user language, display state | Legitimate interest / necessary for website functionality |
6. Forms and Data Collected via the Website
6.1. Contact Form
When you send us an inquiry via the contact form, we process:
Full name
E-mail address
Phone number (optional)
Message content
Your data is used solely to respond to your inquiry.
Retention period: up to 6 months after the last communication.
6.2. Shipment Complaint Form
When submitting a shipment complaint, we process:
Sender’s or recipient’s name
E-mail and phone number
Shipment number and description of the issue
Data is processed to handle your complaint and stored for up to 12 months after the case is resolved.
6.3. Pick-Up Order Form
When you place a pick-up order online, we process:
Full name
Pickup and delivery address
E-mail address and phone number
Additional notes
Data is used solely for the provision of the pick-up and delivery service.
Retention period: up to 2 years (for accounting and service record purposes).
7. Cookies and Similar Technologies
7.1. Consent Management
We use CookieScript to display and manage cookie consent on our website.
When you first visit the site, you can choose “Accept all”, “Reject all”, or open “Cookie settings” to customize your preferences.
You can withdraw or change your consent at any time through the link in the website footer.
7.2. Types of Cookies
Essential cookies: required for the basic functioning of the website (WordPress, Elementor, language settings).
Statistical cookies: used for website analytics (Google Analytics 4). These cookies are activated only after your consent.
7.3. List of Cookies Used
| Category | Cookie Key | Domain | Type | Duration | Description |
|---|---|---|---|---|---|
| Essential | pll_language | www.brzaposta.ba | First-party | 1 year | Stores the user’s selected language. |
| Essential | elementor | brzaposta.ba | Local/Session Storage | – | Used to maintain and display the layout built with Elementor. |
| Essential | wpEmojiSettingsSupports | brzaposta.ba | Session Storage | Session | Checks whether the browser supports emoji display. |
| Statistics | _ga | .brzaposta.ba | First-party | 1 year 1 month | Google Analytics cookie used to distinguish unique users. |
| Statistics | _ga_7CS94L2CQ3 | .brzaposta.ba | First-party | 1 year 1 month | Maintains session state and links events with the user. |
8. Google Analytics 4
We use Google Analytics 4 (GA4) to understand website usage and improve user experience.
GA4 uses cookies and similar technologies to collect anonymous information about visits, page views, and user interactions.
Data processed by Google may include an anonymized IP address, device type, visit duration, and traffic source.
Data is retained for up to 14 months and processed under Standard Contractual Clauses (SCC) when transferred outside the EU/EEA.
Scripts load only after consent, managed through Google Consent Mode v2.
9. Data Recipients and International Transfers
Your data may be shared with:
Google Ireland Ltd. and Google LLC (analytics and consent tools)
The hosting provider and technical service providers maintaining the website
If data is transferred outside the EEA (e.g., to the USA), it is protected under Standard Contractual Clauses (SCC) and additional safeguards such as encryption and pseudonymization.
10. Data Retention Periods
| Type of Data | Retention Period |
|---|---|
| Contact form submissions | up to 6 months after last communication |
| Complaints | up to 12 months after case resolution |
| Pick-up order data | up to 2 years (legal requirement) |
| Server logs | up to 30 days |
| CookieScript consent records | up to 10 years |
| GA4 analytics data | up to 14 months |
11. Data Security
We apply technical and organizational measures to protect personal data against loss, unauthorized access, or misuse:
HTTPS/TLS encryption
Secure server environment and access control
Regular security updates and audits
Data pseudonymization where applicable
12. Your Rights
You have the right to:
Access your personal data
Request correction or completion of inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Data portability
Withdraw consent at any time
Requests can be submitted via e-mail: korisnicka.sluzba@post.ba
Supervisory authority:
Personal Data Protection Agency of Bosnia and Herzegovina
Dubrovačka 6, 71000 Sarajevo
E-mail: azlpinfo@azlp.ba
Website: www.azlp.ba
13. Links to Other Websites
Our website may contain links to third-party websites.
We are not responsible for the content or privacy practices of such websites and recommend that you review their respective privacy policies before using them.
14. Updates to This Policy
This Policy may be updated from time to time to comply with legal or technological changes.
All updates will be published on this page with a new revision date.
Last updated: October 6, 2025
