Last updated: 2026-07-22
1. Who we are
This Privacy Policy explains how Pioneering Pulse d.o.o. collects and uses personal data through the website https://pioneeringpulse.io/, contact forms, email, phone communication, and related business communication. It is intended to provide transparency under applicable data protection law, including the Law on Protection of Personal Data of Bosnia and Herzegovina (Official Gazette of BiH No. 12/25) and the GDPR where it applies.
The data controller for website and business inquiry processing is "Pioneering Pulse" d.o.o. Tuzla, Fočanska 11, 75000 Tuzla, Bosnia and Herzegovina. Company registration number (MBS): 32-01-0179-23. Unique identification number (JIB): 4210561030005. Email: info@pioneeringpulse.io. Phone: +387 61 659 604.
Privacy requests should be sent to info@pioneeringpulse.io.
2. Personal data we collect
We collect only the data reasonably needed to operate the website, respond to inquiries, protect the contact form, and communicate about software development and consulting services.
- Contact form data: first name or full name, email address, and message content.
- Technical data: IP address, browser and device data, timestamps, request metadata, and server or security logs.
- Analytics data through Google Analytics only after you opt in through the cookie settings.
- Anti-spam and security data through Firebase App Check and Google reCAPTCHA Enterprise, which may include IP address, browser and device characteristics, interaction signals, timestamps, request metadata, and integrity or risk-assessment signals used to protect the contact form from abuse.
- Communication data if you contact us by email, phone, social media, or another business communication channel.
3. Why we use personal data
- To respond to inquiries and communicate with potential clients, partners, suppliers, and website visitors.
- To take steps before entering into a contract, including discussing project scope, architecture, pricing, delivery, and service needs.
- To provide, maintain, secure, debug, and improve the website.
- To measure website performance and understand aggregate usage through Google Analytics when analytics consent applies.
- To protect the contact form from spam, abuse, automated submissions, and misuse.
- To maintain legal, accounting, contractual, and business records where required.
4. Legal bases
- Consent for Google Analytics cookies and related analytics processing. You may refuse or withdraw this consent at any time without affecting processing that occurred before withdrawal.
- Legitimate interests in operating and securing the website, preventing spam and abuse, maintaining proportionate technical logs, administering the business, and responding to ordinary B2B communications, provided those interests are not overridden by your rights and freedoms.
- Taking steps at your request before entering into a contract for project and service inquiries.
- Legal obligation where processing is necessary to comply with applicable recordkeeping, tax, accounting, or legal requirements.
5. Google Analytics
We use Google Analytics to understand how visitors use the website and to improve content, performance, and user experience. The Google Analytics tag does not load until you actively accept analytics.
Google processes analytics data under its applicable service and data-processing terms. You can reject analytics or withdraw a previous choice at any time through . Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. reCAPTCHA and form security
The contact form is protected by Firebase App Check using invisible, score-based Google reCAPTCHA Enterprise. This security processing is necessary for our legitimate interest in preventing spam, automated abuse, and misuse of the form.
Firebase App Check tokens have a 1-hour TTL and the web SDK automatically refreshes them. Contact-form requests without a valid App Check token are rejected by the backend. This screening does not make decisions that produce legal or similarly significant effects for visitors.
7. Firebase hosting and infrastructure
The website is hosted using Firebase Hosting and supporting Firebase infrastructure. Hosting and infrastructure providers may process technical request data such as IP address, request metadata, logs, and security information to deliver and protect the website.
8. Cookies
We use necessary storage for website operation, consent management, and the EN/BHS language preference. Analytics storage is optional and controlled by your consent choice. See our Cookie Policy for details.
9. Service providers and data sharing
We do not sell personal data. We may share limited data with service providers and advisers when necessary for website operation, communication, security, analytics, legal compliance, or business administration.
- Hosting and infrastructure providers, including Firebase/Google services.
- Analytics providers, including Google Analytics when analytics consent applies.
- Anti-spam and security providers, including Firebase App Check and Google reCAPTCHA Enterprise.
- Communication and email providers used to receive, send, or manage inquiries.
- Professional advisers, authorities, or counterparties where legally necessary.
10. International transfers
The Google/Firebase services listed in this Policy may process data in the European Economic Area, the United States, and other countries outside Bosnia and Herzegovina. Where a transfer requires safeguards, we use the provider's applicable data-processing terms and legally available transfer mechanisms, together with technical and organizational safeguards. You may contact us for information about the relevant safeguards and how to obtain an available copy.
11. Retention
- Contact form and business inquiries are generally retained for up to 24 months unless a business relationship is established, a longer period is needed for follow-up, or legal retention requires longer.
- Google Analytics event data is retained for 2 months. User data is retained for 14 months, and the user-data retention period resets when the user has new activity.
- Security and technical log data is retained according to provider-configured operational periods and only for as long as reasonably necessary for security, debugging, abuse prevention, and infrastructure operation.
- Client, accounting, contractual, and business records are retained according to legal and contractual requirements.
12. Your rights
Subject to applicable law and any lawful exceptions, you may request access to and a copy of your personal data, correction, deletion, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw analytics consent at any time without affecting the lawfulness of earlier processing.
To exercise a right, email info@pioneeringpulse.io. We may request information reasonably necessary to verify your identity. We respond without undue delay and generally within 30 days, subject to any period or extension permitted by applicable law.
You may submit an objection to the Personal Data Protection Agency in Bosnia and Herzegovina or seek judicial protection. Where the GDPR applies, you may also complain to the competent supervisory authority in the relevant EEA country.
13. Required information and automated decisions
Providing contact-form data is not a statutory obligation. The name, email address, and message fields are required so that we can understand and respond to your inquiry; if you do not provide them, the form cannot be submitted. We do not use website data for solely automated decisions that produce legal or similarly significant effects.
14. Children’s privacy
This website is intended for business and professional audiences and is not directed to children. We do not knowingly collect personal data from children through the website.
15. Security and compliance
For information about our B2B security and delivery approach, see Security & Compliance.
16. Contact
For privacy requests, contact Pioneering Pulse d.o.o., Fočanska 11, 75000 Tuzla, Bosnia and Herzegovina, email info@pioneeringpulse.io, phone +387 61 659 604.