Information on how personal data is handled on this website
The controller responsible for data processing on this website is: SSC d.o.o., Vukovo 414A, 74264 Jelah, Bosnia and Herzegovina Managing director: Adil Salkičević Email: info@balkanrecruiters.com · Phone: +49 (0)3222 999 0063 Balkan Recruiters is a brand of SSC d.o.o. Because we offer our services to companies in the European Union, the General Data Protection Regulation (GDPR, Art. 3(2)) applies to this processing.
We process personal data only where this is necessary to run this website, to handle your enquiry or – with your consent – for statistics and marketing. We do not sell data and do not make automated decisions within the meaning of Art. 22 GDPR.
The website, database and images are hosted by Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, L-1855 Luxembourg) in its Stockholm data centre (EU). Each time a page is requested, the server processes technically necessary data: • IP address • date and time of access • requested page and referrer URL • browser and operating system Purpose: secure and stable operation of the website and defence against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Log data is kept only as long as needed for these purposes and is deleted regularly. A data processing agreement (Art. 28 GDPR) is in place with AWS.
When you send us an enquiry through the contact form, we process the company name, country, city, contact person, email address, phone number and your message. The details are stored directly in our CRM system (AWS, Stockholm) as an enquiry and handled by our sales team. Purpose: handling your enquiry and preparing a possible cooperation. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (business communication with companies). Retention: until your enquiry has been fully handled. If we start working together, we keep the data for the duration of the cooperation and beyond that where statutory retention obligations apply. You can object to further storage at any time.
When you apply for a position through the application form, we process your first name, last name, email address, phone number, the chosen position, and the time, IP address and browser identifier of the submission (as proof of your consent). The details are stored directly in our CRM system (AWS, Stockholm) as an application and handled by our recruiting team. We contact you by phone or email to discuss the position and the next steps. Purpose: placement for the chosen position and – if you agree during the call – for further suitable positions. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at your request) and Art. 6(1)(a) GDPR (your consent). We pass your details on to the employer only once you have agreed to it. Retention: for the duration of the placement process and afterwards for as long as you wish to remain a candidate in our database. You can withdraw your consent at any time with effect for the future and request the deletion of your profile (see section 1 for contact details).
If you contact us by email or phone, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). The same retention periods as for the contact form apply.
The only technically necessary storage is your cookie choice in the browser (localStorage), so that the banner does not appear on every visit (Section 25(2) TDDDG, Art. 6(1)(f) GDPR). Analytics and marketing services (Sections 7 and 8) are loaded only after you have consented in the banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Without consent, no such cookies are set. You can change or withdraw your consent at any time via “Cookie settings” in the footer; withdrawal takes effect for the future.
With your consent we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies and records how visitors use the website (e.g. pages viewed, time on site, approximate location, device, enquiries sent). Google truncates IP addresses within the EU and does not store them. We use Google Consent Mode: without consent, no analytics cookies are set. Legal basis: Art. 6(1)(a) GDPR. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. Data is deleted according to the retention period configured in Google Analytics (no more than 14 months).
With your consent we use the Meta Pixel by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It lets us measure whether visitors send an enquiry after clicking an ad on Facebook or Instagram and show ads more precisely. Meta processes, among other things, the IP address, browser data, pages viewed and – if you are logged in to Meta – the link to your account. We are joint controllers with Meta for collecting and transmitting this data (Art. 26 GDPR, agreement at facebook.com/legal/controller_addendum). Legal basis: Art. 6(1)(a) GDPR. Data may be transferred to the USA; Meta is certified under the EU-US Data Privacy Framework.
Videos are embedded in privacy-enhanced mode (youtube-nocookie.com) and load only when you click on them. Only then is data (including your IP address) sent to Google Ireland Limited. Legal basis: Art. 6(1)(a) GDPR (your click as consent).
The fonts on this website are loaded locally from our own server. No connection is made to Google Fonts or any other third party.
Within our company, only staff who need the data to handle it have access. External recipients are the service providers named above (AWS as processor; Google and Meta only with consent). The data is stored in the EU (Stockholm). As our company is based in Bosnia and Herzegovina, our staff access the data from there. There is no EU Commission adequacy decision for Bosnia and Herzegovina; we protect the data through access restrictions, encrypted transmission (TLS) and confidentiality obligations for our staff.
You have the right to: • access the data stored about you (Art. 15 GDPR) • rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18) • data portability (Art. 20) • withdraw consent with effect for the future (Art. 7(3)) Right to object (Art. 21 GDPR): where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. To exercise your rights, a message to info@balkanrecruiters.com is enough.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement (Art. 77 GDPR).
Providing your data is neither a legal nor a contractual requirement. Without the details in the contact form, however, we cannot handle your enquiry.
We update this privacy policy when the website or the legal situation changes. The version published here applies. Last updated: October 2026.