Privacy policy

The controller of personal data on this site is LÖYLY, Tešanj 74260, Bosnia & Herzegovina. For any privacy question, write to us at info@loyly.ba.

When you send us a product inquiry, a message or a made-to-measure request, we store the details you enter in the form:

• your name
• your e-mail address and/or phone number
• your town or country
• how you would like us to contact you
• your message
• the product configuration you chose: product, size, wood species, tone, fabric, quantity and custom dimensions

With each inquiry we also record the language and address of the page it was sent from, and the inquiry number we show you. We use this data only to reply to your inquiry and, if you wish, to prepare a quote. The legal basis is your request, i.e. steps taken before entering into a contract.

If you sign up for news from the workshop, we keep your e-mail address to send you occasional news about LÖYLY. The sign-up is based on your consent, which you can withdraw at any time by writing to info@loyly.ba.

Inquiries and sign-ups are stored in this site's content management system. The site and its database are hosted by the cloud provider Railway (railway.com), which processes the data on our behalf.

We keep inquiries for as long as we need them to communicate with you and for any resulting order. We delete them on request.

We are notified of each new inquiry by a message in the Telegram app, which contains the details of the inquiry. The site sends no e-mails – neither to us nor to you. We reply to you directly, on the channel you chose: e-mail, phone or WhatsApp.

If you choose to send your inquiry via WhatsApp, it is first saved with us; WhatsApp then opens with a prepared message that you send from your own app. That conversation is subject to the terms of service and privacy policy of WhatsApp (Meta).

To recognise automated and abusive inquiries, we store the IP address and the browser identification string (user agent) with each inquiry. We keep them only temporarily and periodically remove them from inquiries older than 30 days. The legal basis is our legitimate interest in protecting the site from abuse.

To understand which pages and pieces interest visitors, we keep our own anonymous visitor statistics. We use no cookies and store no identifiers in your browser. We record:

• the page visited and the page you came from
• the type of device, browser and operating system
• the country, where known
• actions such as sending an inquiry or tapping the phone, e-mail or WhatsApp links

Visitors are counted with an anonymous identifier derived from the IP address and the browser identification string (user agent), together with a random key that changes every day and is then deleted. We store neither your IP address nor the full browser identification string, and the identifier cannot be linked to you or to your visits on other days. Statistics records are kept for up to 400 days.

If your browser sends a Global Privacy Control signal, we do not record your visits.

The public part of the site sets no cookies.

The map does not load automatically. Only when you click “Show map” does your browser fetch map tiles from OpenFreeMap (map data © OpenStreetMap), which sees your IP address in the process. The “Open in Google Maps” link takes you to Google, where Google’s privacy policy applies.

We never sell your data or share it for marketing. Apart from the services named in this policy, we do not pass data to third parties unless the law requires us to.

You can ask us at any time for:

• access to the data we hold about you
• correction of inaccurate data
• deletion of your data
• restriction of, or objection to, processing
• withdrawal of your consent to the newsletter

Write to us at info@loyly.ba. You also have the right to lodge a complaint with a supervisory authority – in Bosnia and Herzegovina, this is the Personal Data Protection Agency.

We process personal data in accordance with the Law on Personal Data Protection of Bosnia and Herzegovina and, where it applies, the EU General Data Protection Regulation (GDPR).

We update this policy whenever the way the site processes data changes. The date of the last change is shown at the top of the page.