TABLE OF CONTENTS

You can use this table of contents to move through our privacy policy and find what you need. Click on a link for a specific section and you'll jump right to it.

• • Thank You for Using Our Website!
• • Who are We?
• • Legal Grounds for Personal Data Processing
• • Personal Data We Collect and How We Use
• • We Collect Personal Data in a Few Different Way
• • How Long We Keep Your Personal Data
• • Transferring Your Personal Data
• • How Do We Keep Your Personal Data Secure
• • Your Rights
• • Contact Us

Thank You for Using Our Website!

We wrote this policy to help you understand which personal data we collect, how we use it and what choices you have about it. Some of the concepts below are a little technical, but we’ve tried our best to explain things simply and clearly.

By using our website, you agree to the terms of this policy.

Who are We?

Gate21 d.o.o. (“we”, “us”) is a subsidiary of THQ Nordic GmbH company with a head office based in Vienna, Austria. We are part of the global Embracer Group with a head office based in Karlstad, Sweden having a global presence in more than 40 countries.

Legal Grounds for Personal Data Processing

We may process your personal data on legal grounds governed by

• (i) Personal Data Protection Act of Bosnia and Herzegovina
• (ii) General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR).

As part of its efforts to join the EU, Bosnia and Herzegovina (BiH) is obliged to harmonise its legislation with EU legislation. This includes the GDPR, which applies to BiH companies when offering goods or services to data subjects in the EU.0

Lawful grounds for personal data processing include consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below. In some cases, we process personal data based on the consent you expressly grant to us at the time we collect such personal data.

When we process personal data based on your consent, it will be expressly indicated to you at the point and time of collection.

From time to time, we may also need to process personal data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.

Personal Data We Collect and How We Use It

• Client data is actually very limited. We generally only need to have your contact details or the details of individual contacts at your organisation (such as their names, telephone numbers, email addresses, country, job title) to enable us to ensure that our relationship runs smoothly.
• Employment candidate data includes name, age/date of birth, sex/gender, photograph, contact details, education details, employment history, emergency contacts, referee details, social security number, extra information applicant chooses to tell us, IP address.
• Website users: we collect anonymous data from every visitor of the website (IP address, browser type, timestamp etc.)

We do not disclose collected personal data to third parties and we use it exclusively for communication with those visitors explicitly requesting contact, potential job applicants and for handling the services and products offered on the website.

We use collected personal data solely for internal use and these specific purposes.

We Collect Personal Data in a Few Different Ways

When you contact us directly through a website form, registering on our website requesting our services, during the job application process, commenting to our blog or signing up for our newsletter, you are voluntarily sharing certain personal data such as your name, email address, phone number or other personal data requested by a form.

We are using Google Maps, Google Analytics, Google Fonts, Google reCAPTCHA, Google+ and we embedded social media elements (Facebook, Facebook Pixel, YouTube, Twitter, Instagram, LinkedIn, Pinterest) to our website. This means that if you give your consent by ticking the box, certain personal data collected on our website during your visit may be communicated from your browser to respective social media service and will be stored there.

The USA does not have an adequate level of data protection and there is a risk that US authorities may gain access to your data without any effective legal protection.

What personal data respective social media collects and how do they use personal data can be found on the following links:

• Contact through the website: the website contains information that allows visitors to contact us quickly and to communicate with us directly, which also includes a general email address. If you contact us by e-mail or directly through a website embedded contact form, the personal data you provided will be automatically saved and stored for processing or contacting the respective person.
• Job application process: we collect and process the personal data of job applicants to handle the entire application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the data processor by electronic means, for example by e-mail or a contact form on the website. If we conclude a contract of employment with an applicant, the personal data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no contract of employment with the candidate is concluded with us, the application documents will be automatically deleted six months after receipt of the application, provided that deletion does not conflict with any other legitimate interests of the Company.
• Newsletter: If you subscribe to our newsletter, you submit your personal data and give us the right to contact you via email. We use the personal data stored in the registration for the newsletter exclusively for our newsletter and do not disclose them to third parties. If you unsubscribe from the newsletter - you will find the link in each newsletter at the bottom - then we delete all personal data that was saved with the registration for the newsletter.

We also Get Technical Information When You Use Our Website (Automatic Data Storage)

When you use a website, mobile application or other internet services, certain internet and electronic network activity information gets created and logged automatically. This is also true when you visit our website. Here are some of the types of information we collect:

• Log data: when you visit our website, our servers automatically record and store information (Log data), including information that your browser automatically sends whenever you visit a website or mobile app. This log includes your Internet Protocol address (which we use to infer your approximate location), subpages addressed, date and time.
  This information is kept safe, not used for internal purposes and will not be disclosed to third parties, but we cannot guarantee that it will not be used in the event of unlawful behaviour.
• Cookies data: we also use “cookies” which help web developers give you more personal, convenient website visits. Cookies let websites remember you, your website logins, shopping carts and more, making your website experience more user-friendly.
  
  In more technical terms, cookies are text files with small pieces of data — like a username and password — that are used to identify your computer as you use a computer network. Specific cookies known as HTTP cookies are used to identify specific users and improve your web browsing experience.
  
  Data stored in a cookie is created by the server upon your connection. This data is labelled with an ID unique to you and your computer. When the cookie is exchanged between your computer and the network server, the server reads the ID and knows what information to specifically serve to you.
  
  You can delete or disable cookies on your computer and procedures varies from browser to browser. A simple google search will provide you with clear instructions on how to do this.
  
  However, in case you delete or disable cookies, some features or pages may not work as expected.

How Long We Keep Your Personal Data

We keep your personal data only so long as we need it to provide our products or services and fulfil the purposes described in this policy. This is also the case for anyone that we share your personal data with and who carries out services on our behalf.

When we no longer need to use your personal data and there is no need for us to keep it to comply with our legal or regulatory obligations, we'll either remove it from our systems or depersonalize it so that we can't identify you.

We use your personal data exclusively for communication with those visitors who expressly request contact and for the handling of the services and products offered on this website. We will not disclose your personal data without consent, but we cannot rule out that personal data will be seen in the event of unlawful behaviour.

If you send us personal data via e-mail - i.e., outside of this website - we can’t guarantee secure transmission and protection of your data. We recommend that you never send data by e-mail unencrypted.

Transferring Your Personal Data

We are part of the global group with global practice in more than 40 countries providing a worldwide service. By using our products or services, you authorize us to transfer and store your personal data outside your home country, including in Austria and Sweden, for the purposes described in this policy.

When we transfer personal data from the BiH to a country that doesn't provide an adequate level of protection, we'll only do so under appropriate safeguards to protect your personal data, such as standard contractual clauses in line with Article 18 of the Personal Data Protection Act BiH.

If you have any questions about our data processing activities, the data controller you should contact is Gate21 d.o.o. with its registered office at City Centre Complex, ul. Vrbanja no. 1, 16th floor, Sarajevo, BiH.

If you think we haven't complied with data protection laws, you have the right to lodge a complaint with the Personal Data Protection Agency in BiH.

How Do We Keep Your Personal Data Secure

We use https to transfer personal data securely on the Internet. By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the Internet, we can ensure the protection of personal data. You acknowledge the use of this security of personal data transfer at the small lock symbol in the upper left corner of the browser and the use of the https scheme as part of our Internet address.

Your Rights

You have options in relation to the personal data that we have about you:

1. Right to be Informed: this means that we have to make clear what are we processing, why and who else the data may be passed to.
2. Right of Access:this is your right to see what data we collect and hold about you. We'll usually share this with you within 30 days of you requesting the access.
3. Right to Rectification: have your personal data corrected or deleted. You can update your personal data or delete data we have on you.
4. Right to Erasure:under certain circumstances, you can ask for your personal data to be deleted. This is also called “the Right to be Forgotten”. This would apply if the personal data is no longer required for the purposes it was collected for, or your consent for the processing of that data has been withdrawn or the personal data has been unlawfully processed.
5. Right to Restrict Processing: allows you to ask for a temporary half to processing of personal data, such as in the case where a dispute or legal case has to be concluded or the data is being corrected
6. Rights to Data Portability: have the personal data you provided to us sent to another organization, where we hold this personal data with your consent or for the performance of a contract with you, and, where it's technically feasible for us to do so.
7. Right to Object: You can ask us to stop using your personal data, including when we use your personal data to send you marketing emails or push notifications.
8. Rights in relation to automated decision making and profiling: you have the right not to be subject to a decision based solely on automated processing.

If you believe that the processing of your data violates data protection law or if your data protection claims have otherwise been violated in a way, you can complain to the supervisory authority. In BiH, this is the Data Protection Authority whose websites you can find on this link.

We will not discriminate against you if you choose to exercise your options related to your personal data. We work to be clear with you about your options and the consequences of exercising certain options.

Contact Us

The best way to get in touch with us or to exercise your options described above is through the contacts below:

You can contact Gate21 d.o.o. with its registered office ul. Džemala Bijedića no. 2, 2nd floor, Sarajevo, BiH.

Tel: +387 33 21 12 21

Email: info@gate21.com

Effective date: 1.9.2023