Privacy Policy

Version: 1.0
Effective date: July 2026

Introduction

This Privacy Policy explains how Globalhost d.o.o., Kralja Tvrtka 42, 72290 Novi Travnik, Bosnia and Herzegovina, as the owner and operator of the reseller.ba platform, collects, processes, uses, stores, and protects the personal data of reseller.ba platform users.

The reseller.ba platform is intended for individuals and legal entities that use wholesale domain registration services, hosting services, licences, API integrations, WHMCS modules, and other related services for resale to their own customers.

Personal data is processed in accordance with the Personal Data Protection Act of Bosnia and Herzegovina and other applicable regulations.

By using the reseller.ba platform, the user confirms that they are familiar with this Privacy Policy.

1. Data Controller

The controller of personal data is:

Globalhost d.o.o.
Kralja Tvrtka 42
72290 Novi Travnik
Bosnia and Herzegovina

E-mail: support@global.ba
Telephone: +387 30 795 066
Website: www.reseller.ba

For questions and requests relating exclusively to personal data protection, the user may contact the Data Protection Officer:

E-mail: szlp@global.ba
Telephone: +387 30 719 287

2. Data We Collect

Depending on how the platform is used, we may collect the following categories of data:

2.1. Identification and Contact Data

For individuals:

• first and last name;
• residential address;
• city, postal code, and country;
• e-mail address;
• telephone number;
• information required for issuing invoices.

For legal entities:

• name of the legal entity;
• registered office and full address;
• identification number;
• VAT number, where applicable;
• first and last name of the authorised or contact person;
• e-mail address and telephone number;
• information required for invoicing and business communication.

2.2. User Account Data

We may process:

• user identifier;
• login information;
• login history;
• IP addresses;
• information about completed orders;
• information about active and previous services;
• the applicable pricing tier;
• the content of requests submitted to customer support;
• recorded administrative and security activities.

Passwords are not stored in readable form.

2.3. Order and Payment Data

We collect information required for:

• processing orders;
• activating, renewing, transferring, or cancelling services;
• issuing pro forma invoices and invoices;
• recording payments;
• processing refunds or granting credit to the user account;
• meeting tax and accounting obligations.

Card payments and other electronic payments may be processed by banks and authorised payment processors in accordance with their own privacy policies.

2.4. Domain-Related Data

When registering, transferring, or managing domains, we may process the details of the registrant and the administrative, technical, and billing contacts.

Certain data may be forwarded to the relevant domain registry, registrar, or another contractual partner where this is necessary to provide the service.

2.5. Technical and Security Data

We may record:

• IP address;
• date and time of access;
• browser and device type;
• operating system;
• technical identifiers;
• API usage logs;
• API keys used and related identifiers;
• authentication results;
• server, application, and security logs;
• information required to detect abuse and security incidents.

3. Purposes and Legal Basis of Processing

We process personal data for the following purposes:

• registering and administering the user account;
• verifying the user's identity and business information;
• entering into and performing a contractual relationship;
• providing, activating, and maintaining services;
• registering and transferring domains;
• providing API and WHMCS integrations;
• invoicing and maintaining business records;
• providing technical and customer support;
• notifying users about service status, expiry, renewal, or security events;
• preventing fraud, abuse, and unauthorised access;
• protecting the network, infrastructure, users, and third parties;
• complying with legal obligations;
• establishing or defending legal claims;
• sending marketing communications where the user has provided appropriate consent.

Processing may be based on the performance of a contract, compliance with a legal obligation, the legitimate interests of Globalhost or the user, or consent where consent is required.

4. The Reseller as an Independent Data Controller

The user of the reseller.ba platform independently determines the relationship with their end customers, retail prices, the manner in which services are presented, and the purposes for which customer data is collected.

When a reseller collects or processes the personal data of their customers, the reseller is responsible for:

• having an appropriate legal basis;
• providing the required notices to customers;
• the accuracy of the data supplied to the reseller.ba platform;
• the lawful use of personal data;
• handling requests from their customers;
• complying with privacy and consumer protection regulations.

5. Disclosure of Data to Third Parties

Data may be disclosed to:

• domain registries and registrars;
• licence providers;
• banks and payment processors;
• providers of security, communication, and infrastructure services;
• accounting, legal, and other professional advisers;
• competent authorities where a legal obligation exists;
• other parties with the user's explicit consent.

6. International Data Transfers

Certain domain extensions, licences, or technical services may require data to be transferred outside Bosnia and Herzegovina.

In such cases, Globalhost applies appropriate contractual, technical, and organisational safeguards.

7. Data Retention

We retain data for as long as necessary to provide services, perform the contract, and comply with legal obligations.

Business records, invoices, contractual documentation, and payment records are retained for the periods required by accounting, tax, and other regulations.

Server, application, and security logs are generally retained for six to twelve months and may be kept longer where necessary due to a security incident or legal proceedings.

8. Data Security

We apply reasonable technical and organisational measures, including:

• access control and access restrictions;
• authentication of users and administrators;
• logging of access and activities;
• encryption of communications where applicable;
• backups;
• firewalls, antivirus tools, and other security systems;
• infrastructure monitoring;
• internal procedures and staff training.

9. API Keys and Integrations

An API key is confidential access information associated with the user account.

The user is responsible for:

• securely storing the API key;
• restricting access to authorised persons;
• using secure connections;
• protecting their own applications and WHMCS installation;
• revoking or replacing a compromised key;
• activities carried out using their access credentials.

10. Cookies

The platform may use:

• essential cookies for login, security, and user session operation;
• functional cookies for remembering user preferences;
• analytical cookies;
• marketing cookies where the required consent has been obtained.

11. User Rights

In accordance with applicable regulations, the user may request:

• confirmation of whether their data is being processed;
• access to personal data;
• correction of inaccurate data;
• completion of incomplete data;
• deletion of data where the legal requirements are met;
• restriction of processing;
• data portability, where applicable;
• an objection to processing;
• withdrawal of consent;
• information about recipients of the data;
• the right to lodge a complaint with the competent supervisory authority.

12. Minors

Opening a user account and using the platform is permitted only to persons over the age of 18.

13. Personal Data Breach

In the event of a personal data breach, Globalhost will assess the risk and take appropriate measures to limit the consequences.

14. Supervisory Authority

Personal Data Protection Agency in Bosnia and Herzegovina
Dubrovačka 6
71000 Sarajevo
Bosnia and Herzegovina

E-mail: azlpinfo@azlp.ba
Telephone: +387 33 988 420

15. Amendments to the Privacy Policy

Globalhost reserves the right to amend this Privacy Policy. The current version will be published on the reseller.ba platform.

This document has been issued electronically and is valid without the stamp or signature of an authorised person.