Política de privacidad

1. Who processes your data

The KARIKA LINK platform is operated by Linker Services d.o.o. (hereinafter: "we"), based in Bosnia and Herzegovina. We are the controller of the data you enter through the forms on this website. For any questions about data protection you can contact us at office@linker-services.com or at +387 67 105 3620.

2. What data we collect and why

• Business request or transport request: activity/type of request, description, quantity, deadline, country of delivery, full name, company (leave this field empty if you apply as a private individual), e-mail and phone. We use them to find suitable contractors and establish contact.
• Company registration: company details (name, registration number, address, activities, capacities, certificates, references, logo) and the contact person. We use them to verify the company, publish the profile and connect it with buyers.
• Workers directory: full name, occupation, experience, qualification, licences, languages, availability, description, an optional CV in PDF format, e-mail and phone. We use them to review the profile and to mediate contact with companies. The CV is not published — it is available only to the administration.
• Listings: listing content, photos, company name and contact details. We use them to review and publish the listing.

3. Legal basis for processing

The processing of personal data in Bosnia and Herzegovina is governed by the Law on the Protection of Personal Data (Official Gazette of BiH, No. 12/25), in force since 8 March 2025, which replaced the earlier 2006 law and is aligned with the EU General Data Protection Regulation (GDPR, Regulation 2016/679). The supervisory authority is the Personal Data Protection Agency in Bosnia and Herzegovina (AZLP).

We process data on the basis of your consent, which you give by confirming the form (Art. 6 of the Law, i.e. Art. 6(1)(a) GDPR), and, to the extent necessary to respond to your request and find a suitable business partner, on the basis of our legitimate interest in enabling the platform to function (Art. 6(1)(f) GDPR). You may withdraw your consent at any time, without affecting processing carried out before the withdrawal.

4. What is shown publicly

• Company profile: only after approval, without the contact person's details (name, e-mail, phone).
• Worker profile: only after approval, without name, e-mail, phone and CV.
• Listing: only after approval, without e-mail, phone and the contact person's name.
• A business request is not published. Only the administration sees it.

Text fields that are publicly visible (e.g. a profile or listing description) should not be filled in with personal contact details.

5. Where and how data is technically stored

The website and the database run on Cloudflare infrastructure (Cloudflare Workers, the D1 database and R2 storage for photos and CV documents). All traffic between your device and the website is protected by an encrypted (HTTPS/TLS) connection.

• Administrator access is protected by a password and a session token; only authorized accounts (listed in section 1) can see private data (contact information, CVs, request content).
• Files you upload (photos, CV) are checked by their actual content before being stored, for the safety of the server and other users.
• We additionally slow down administration access after incorrect login attempts, to make automated attacks harder.
• We do not keep data longer than necessary for the purpose of processing (see section 8) and do not transfer it outside the infrastructure described here, except to the companies mentioned in section 6 when you agree to it.

In accordance with Article 35 of the Law, in the event of a personal data breach that poses a risk to your rights, we will notify the Personal Data Protection Agency of BiH within 72 hours of becoming aware of it, and you — if the risk is high — without undue delay.

6. Who we pass data to

We pass request data only to companies that we select as suitable for your request, and we share the buyer's contact details only after those companies confirm their interest. We do not sell data to third parties or use it for advertising. To operate the website we use hosting and infrastructure providers who process data on our behalf, under data processing agreements.

An AI tool (Claude, Anthropic PBC, USA) helps our team process requests and review companies. We send that service only the business content of the request (what is sought, quantity, deadline, place of delivery) and companies' business data (without the contact person's details) — not the buyer's name, e-mail, phone or company name. The AI only prepares suggestions; all decisions are made by our team.

The KARIKA assistant (the "Send request" button in the corner of the page) uses the same AI tool to turn your description into a structured request. We send the AI the conversation text and the text of attached Word/Excel/TXT documents, with phone numbers and e-mail addresses removed. The AI does not see PDFs, images and CAD drawings from the chat — our team reviews them. You enter your name, company and contact separately at the end; these go only to our team. Once our team takes the request into processing, it may analyze documents with the same AI tool. Documents are stored privately, nothing is forwarded to companies without our review, and unfinished (unsent) conversations are deleted after 7 days.

7. Users from the European Union and data transfers

If you send us data from the European Union, it is transferred to and processed in Bosnia and Herzegovina. BiH does not have a European Commission adequacy decision, so for the EU GDPR it is a "third country", even though the domestic law (section 3) is substantially aligned with the GDPR. We carry out such a transfer only to the extent necessary to provide the service you voluntarily contacted us for, with your explicit consent, which is one of the grounds for transfer under Article 49 GDPR. If the volume of business with EU users grows, we will consider additional compliance mechanisms (e.g. appointing an EU representative under Article 27 GDPR). For any questions about this, feel free to contact us at the address in section 1.

8. How long we keep data

We keep data for as long as necessary for the purpose for which it was collected, that is, while there is a business need or until you ask for it to be deleted. You may ask us at any time to remove profiles and listings.

9. Your rights

Under the Law on the Protection of Personal Data of BiH (Arts. 17–24) and, where applicable, the GDPR, you have the right to:

• access the data we process about you,
• have inaccurate or incomplete data corrected,
• have data erased ("right to be forgotten"),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting processing carried out earlier.

Send your request to the e-mail given in section 1; we will reply within a reasonable time. If you believe that the processing of your data is contrary to the law, you have the right to lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina, or with the competent supervisory authority in your country of residence if you are from the EU.

10. Cookies

The website currently does not use cookies for tracking or advertising. If this changes, we will update this policy and ask for consent where required.

11. Changes to the policy

We may change this policy from time to time. The current version is always published on this page, together with the date of the last change.