Privacy policy

Version date: 14 November 2026 (version privacy-2026-11-14)

1. Controller

The controller for the purposes of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR) is:

Iqramal Solutions UG (haftungsbeschränkt)
Heukoppel 44, 22179 Hamburg, Germany
Managing Director: Faris Biogradlic
Email: info@paradox.ba

Paradox Media is the trading name of this company. Further company details are in the legal notice.

2. Overview

Personal data is any information that can identify you personally. On this website we process only the data we need to display the page, to handle your enquiry and booking and, with your consent, to measure the results of our advertising. We do not sell your data and we do not use it for profiling.

3. Hosting and server logs

This website is hosted by Cloudflare and delivered over the Cloudflare network (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you open the page, technically necessary data is processed, such as your IP address, the date and time of the request, the page requested, the referring URL and your browser and operating system. Cloudflare uses this data to deliver the page securely and to defend against attacks. The legal basis is our legitimate interest in a secure and reliable website (Art. 6 (1) (f) UK GDPR and GDPR). Cloudflare is on the EU-US Data Privacy Framework list, including its UK Extension, and we have a data processing agreement with Cloudflare.

4. SSL / TLS encryption

For security, and to protect confidential content such as the enquiries you send us, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" at the start of the address and the padlock symbol in your browser bar. When encryption is active, the data you send us cannot be read by third parties.

5. Cookies, local storage and consent

On your first visit we ask whether we may use the Meta pixel (section 8). Without your consent it is not loaded. We store your decision in your browser's local storage (localStorage) so that we do not ask again on every page. No cookies or similar technologies that are not strictly necessary are set before you consent, in line with the Privacy and Electronic Communications Regulations 2003 (PECR) and the EU ePrivacy rules.

For the duration of your visit we also store in session storage (sessionStorage) which advert or link brought you here (section 7). This storage is deleted when you close the tab.

You can change or withdraw your consent at any time via the Cookie settings link in the footer.

6. Enquiry and booking

When you fill in the form we process your name, email address and phone number and, if you give them, your company and website. You can then book a time for an introductory call. We use this data to handle your enquiry, to arrange and hold the call, to send you the confirmation and reminders, and to follow up on your enquiry afterwards. The legal basis is the performance of a contract or steps you ask us to take before entering one (Art. 6 (1) (b) UK GDPR and GDPR). The time at which you accepted the privacy policy is stored with your enquiry as proof of consent (Art. 7 (1)).

We use the following service providers for this:

We have data processing agreements with these providers. They process the data only on our instructions.

7. Campaign and page data

With your enquiry we store which advert or link brought you to the page (for example UTM parameters and click IDs from Meta or Google), which version of the page you saw and the time of your visit. Page views, time on the page and the opening of the form are counted without personal reference. We use this data to see which adverts and page versions work and to attribute your enquiry to the right campaign. The legal basis is our legitimate interest in measuring and improving our advertising (Art. 6 (1) (f) UK GDPR and GDPR).

8. Meta pixel

Only if you click "Accept" in the cookie notice does this website use the Meta pixel to measure conversions (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). The pixel reports page views and bookings to Meta so that we can see which adverts lead to enquiries and show our adverts to people who are similar to our customers.

The data processed includes in particular your IP address, browser and device information, the pages you visit, the time, and Meta cookie identifiers. Meta may link this data to your Facebook or Instagram account and use it for its own purposes, including advertising. Details are in Meta's privacy policy. You can manage your advertising preferences at facebook.com/adpreferences.

The legal basis is your consent (regulation 6 PECR and Art. 6 (1) (a) UK GDPR and GDPR). For the collection and transfer of the data to Meta, we and Meta are joint controllers (Art. 26). The agreement is published at facebook.com/legal/controller_addendum. Meta Platforms, Inc. in the USA is on the EU-US Data Privacy Framework list, including its UK Extension.

9. Fonts

This website uses fonts stored locally on our server. No fonts are loaded from Google Fonts or any other external service.

10. International transfers

Some of the providers named above are based in the USA or process data there, and the controller itself is based in Germany. Transfers from the UK rely on the UK adequacy regulations for the EU, on the UK Extension to the EU-US Data Privacy Framework for US companies on that list, and otherwise on the International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum. Transfers from the EU rely on the EU-US Data Privacy Framework (Art. 45 GDPR) or on the Standard Contractual Clauses (Art. 46 (2) (c) GDPR). Our team also works from Bosnia and Herzegovina; access from there is covered by Standard Contractual Clauses and internal access controls.

11. How long we keep your data

12. Legal bases at a glance

We process data on the basis of Art. 6 (1) (a) UK GDPR and GDPR (consent), (b) (contract and pre-contractual steps), (c) (legal obligations, for example retention periods) and (f) (legitimate interests). Storing or reading information on your device that is not strictly necessary is based on your consent under regulation 6 PECR (UK) and the EU ePrivacy rules.

13. Your rights

You have the right at any time to:

Right to object (Art. 21): where we process data on the basis of legitimate interests (Art. 6 (1) (f)), you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing at any time, without giving a reason.

For any of these, an email to info@paradox.ba is enough.

14. Right to complain

You have the right to complain to a data protection supervisory authority. In the UK this is the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk. The authority responsible for us in Germany is the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit). You may also complain in the EU member state where you live or work.

15. Unsolicited marketing

We object to the use of the contact details published in the legal notice for sending unsolicited advertising or information material.

16. Changes

We update this privacy policy when our website or the services we use change. The version published here applies.