Privacy Policy – Eksperta Digital

Last updated: 18 August 2026.

1. Who controls the data

Eksperta Digital is an application of Računovodstvena agencija Eksperta (“RA Eksperta”, “Eksperta”, “we”), based in Šamac, Bosnia and Herzegovina. Privacy contact: info@eksperta.ba, +387 65 664 272.

2. Purpose of the app

Eksperta Digital is designed for secure digital delivery of business and accounting documents between users, their organisations and RA Eksperta, or another authorised accounting organisation using the system. It supports device activation, company/business-unit selection, document-type selection, document scanning and secure submission to the server system.

3. Data we process

organisation, company and business-unit information;
the name or label of an authorised user/employee, if configured by the administrator;
a randomly generated installation/device identifier and activation data;
authorisation tokens required for secure server access;
document type, business unit and technical transmission data;
PDF documents intentionally scanned and submitted by the user, including any data contained in those documents;
technical data needed for security, troubleshooting and duplicate-submission prevention.

Depending on the document, uploaded content may contain personal data, financial data, employee data or other confidential business information. Users and their organisations are responsible for submitting documents only where there is an appropriate purpose and legal basis.

4. No advertising or sale of data

Eksperta Digital does not use app data for targeted advertising, does not sell personal data and does not build marketing profiles. The app does not require access to contacts, precise location or the microphone for its core functionality.

5. Camera and scanning

Document and QR-code scanning uses system/Google scanning services. The camera is used only when the user starts a scan. Temporary local document copies may be retained until transmission succeeds; after confirmed transmission, the app removes them from its local upload queue.

6. Why we process data

device activation and authentication;
display of authorised companies, business units and document types;
receipt, organisation, storage and processing of submitted documents;
delivery of contracted accounting and administrative services;
prevention of abuse, unauthorised access and duplicate submissions;
technical maintenance, security and system reliability;
compliance with applicable legal obligations.

7. Legal basis

Depending on the relationship and data involved, processing is based on performance of a contract or pre-contractual steps, compliance with legal obligations, legitimate interests in secure and orderly service delivery, or consent where consent is the appropriate legal basis. Where RA Eksperta processes data on behalf of a client or another accounting organisation, processing is performed within the agreed controller/processor relationship.

8. Who may receive data

Data may be accessible only to persons and service providers who need it to operate the system and deliver the contracted service, including authorised RA Eksperta staff, authorised users of the relevant organisation, server/cloud infrastructure providers and, where document processing is enabled, technical OCR/AI service providers. Such providers may process data only for the contracted technical purpose and subject to appropriate safeguards.

The app uses Google components for document and QR-code scanning. Processing performed independently by Google is also subject to Google’s applicable privacy terms.

9. International transfers

If hosting, technical support, OCR or AI providers use infrastructure outside Bosnia and Herzegovina, transfers are made only where an appropriate legal basis and safeguards are in place under applicable law.

10. Retention

We retain data only for as long as needed to provide the service, meet contractual and legal obligations, protect legal interests and maintain system security. Retention of specific accounting or business documents may depend on document type and statutory retention periods. Local files waiting for upload are temporary and are removed after successful transmission or another appropriate user/administrator action.

11. Security

We use technical and organisational measures including HTTPS/TLS communication, access controls, activation tokens, organisation/business-unit restrictions and Android security mechanisms to protect authorisation tokens. No system can be guaranteed absolutely secure, but safeguards are adjusted to the risks involved.

12. Your rights

Subject to applicable conditions under the Bosnia and Herzegovina Law on Personal Data Protection and other applicable rules, individuals may request access, correction, erasure, restriction, portability or object to processing. Where processing relies on consent, consent may be withdrawn without affecting prior lawful processing. Requests may be sent to info@eksperta.ba. Individuals may also contact the Personal Data Protection Agency of Bosnia and Herzegovina.

13. Deactivation and deletion

Access is linked to an activated device and may be deactivated in the app or administration system. Deactivation prevents future access but does not automatically delete business documents that must be retained for contractual, accounting or legal reasons. To request deletion of data that can lawfully be deleted, contact info@eksperta.ba.

14. Children

Eksperta Digital is a business application and is not directed to children.

15. Changes

We may update this policy when app features, service providers or legal requirements change. The current version and update date will be published on this page.

16. Contact

RA Eksperta
Kralja Aleksandra I Karađorđevića bb, Šamac, Bosnia and Herzegovina
Email: info@eksperta.ba
Phone: +387 65 664 272
Web: https://eksperta.ba/