Last updated: 18 August 2026

Version: 2.0

1. Data Controller

• COR NET d.o.o.
• Kneza Višeslava 14, 88 000 Mostar, Bosnia and Herzegovina
• Phone: +387 36 833 468
• E-mail: info@cor-net.net
• Registration number: 58-01-0103-14
• ID number: 4227838740005

2. EU Representative (Article 27 GDPR)

• Softly d.o.o.
• Trondheimska 4D, 21000 Split, Republic of Croatia
• E-mail: compliance@softlyst.eu

The Representative acts as a contact point for questions concerning the processing of personal data of data subjects in the European Union and for communications with competent supervisory authorities on behalf of COR NET d.o.o.

3. Scope and legal framework

This Privacy Policy applies to the publicly accessible website freedom.cor-net.net and the related public Freedom product pages. It explains what personal data we process, for which purposes, on what legal basis, for how long, and what rights you have.

Merely using the website does not constitute consent to the processing of personal data. Where consent is required, we obtain it separately and through an explicit action, for example through cookie settings or a separate checkbox on a form.

Processing is carried out in accordance with the Personal Data Protection Act of Bosnia and Herzegovina (“Official Gazette of BiH”, No. 12/25), applicable from 4 October 2025, and, where applicable, Regulation (EU) 2016/679 (GDPR) and other applicable laws.

This Policy governs privacy for visitors to the public Freedom marketing website. It does not by itself govern personal data that may be processed within contracted B2B products or integrations such as C-Feed, C-Games, C-Casino, C-Win, C-Stats and C-Score. Such processing, where applicable, is governed by the relevant customer agreement, data processing agreement (DPA) and service-specific documentation.

4. Personal data we process and why

4.1. Technical data and server logs

When you access the website, technical data may be recorded automatically, including your IP address, date and time of access, requested URL, HTTP status, amount of data transferred, browser/operating-system information and referrer where available.

Purpose and legal basis: technical operation, security, protection against misuse, diagnostics and performance improvement, based on COR NET d.o.o.’s legitimate interests.

Retention: no longer than 12 months, unless the logs are needed for a security investigation or legal proceeding.

4.2. Cookies and analytics

Freedom uses essential cookies and similar technologies for core operation, security and remembering settings. Optional analytics or marketing technologies, if enabled, are used only where an appropriate legal basis exists and, where required, after your prior consent.

We do not identify a separate analytics tool as permanently active on the Freedom website. If analytics or marketing technologies are enabled, their actual provider, purpose and cookie duration are specified in the Cookie Policy and they are used only on an appropriate legal basis and, where required, with your consent.

Legal basis: essential technologies are used to provide requested functionality and security; optional analytics/marketing technologies are used on the basis of consent where consent is required.

4.3. Contact, sales, demo and support

If you contact us through an available contact channel, demo/sales/support form or by e-mail, we may process your name, company name, e-mail address, phone number, message content and any other information you voluntarily provide.

Purpose: responding to enquiries, arranging demonstrations, sales or technical communications, preparing business proposals and establishing or developing business relationships. Legal basis: legitimate interests and, where relevant, taking steps prior to entering into a contract.

Retention: if no business relationship is established, data is normally deleted within 30 days after communication ends, unless there is a justified legal need for longer retention. If a relationship is established, relevant communications become business records.

4.4. WhatsApp contact

The Freedom website contains a WhatsApp widget for direct contact with sales personnel. If you use it, your phone number, profile information you have made available, message content and technical data may be processed through WhatsApp/Meta Platforms Ireland Ltd. The provider’s own privacy terms also apply.

4.5. Newsletter and business communications

If you separately subscribe to a newsletter or expressly request promotional or business updates, we process your e-mail address and any information you voluntarily enter in the relevant form. If interaction tracking is enabled, we may also process data about opens and clicks.

Legal basis: consent. You may unsubscribe at any time through the link in the message or by contacting info@cor-net.net. Data for this purpose is retained until consent is withdrawn, subject to limited retention of evidence of consent where necessary.

4.6. Video surveillance at our premises

If you visit COR NET d.o.o. premises, the area may be covered by video surveillance for the protection of persons and property and visitor safety. Access to recordings is limited to authorised persons, and recordings are kept for no longer than 30 days unless needed for an investigation, proceeding or legal claim.

5. Recipients and international transfers

Recipients may include hosting and IT infrastructure providers, e-mail and communications services, external IT/marketing consultants, accounting and legal advisers and competent public authorities. When you use WhatsApp or linked social networks, data may be processed through Meta Platforms Ireland Ltd.. Softly d.o.o., Croatia acts as COR NET d.o.o.’s EU Representative.

Where data is transferred outside Bosnia and Herzegovina, we apply lawful transfer mechanisms and appropriate safeguards. If a new analytics or marketing provider is introduced on Freedom in the future, we will update this Policy and the Cookie Policy before or when that processing begins.

6. Other rights and information

Data subject rights

• right of access – to obtain confirmation whether we process your personal data and, where applicable, a copy of the data and information about the processing;
• right to rectification of inaccurate data and completion of incomplete data;
• right to erasure where the statutory conditions are met;
• right to restriction of processing in the cases provided by law;
• right to object to processing based on legitimate interests;
• right to data portability where processing is based on consent or a contract and is carried out by automated means;
• right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• right to lodge a complaint with a supervisory authority. If you are located in the European Union, you may also lodge a complaint with the supervisory authority of the Member State of your habitual residence, place of work or place of the alleged infringement.

You may submit a request to info@cor-net.net or by post to our registered office. To protect your data, we may request additional information reasonably necessary to verify your identity. Exercising your rights is generally free of charge. Where a request is manifestly unfounded or excessive, in particular because of its repetitive character, we may charge a reasonable fee or refuse to act, as permitted by law.

We will respond without undue delay and no later than 30 days after receiving your request. This period may be extended by up to two additional months where necessary because of the complexity or number of requests; if so, we will inform you of the extension and the reasons within the initial period.

Automated decision-making and profiling

We do not use the public website for solely automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. If such processing is introduced, this Policy will be updated before it is used.

Withdrawal of consent

Where processing is based on consent, you may withdraw that consent at any time, for example through cookie settings, an unsubscribe link in a newsletter, or by emailing info@cor-net.net. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Further cookie information is available in our Cookie Policy.

Children

Our websites and services are primarily intended for business users and persons aged 18 or over. We do not knowingly collect children’s personal data through the public website. If you believe that a child has provided personal data without an appropriate legal basis, please contact us so that we can take appropriate action.

Data security

We apply appropriate technical and organisational measures proportionate to the risk, including:

• restricted physical and logical access to systems and data;
• access control through user accounts, passwords and roles;
• firewalls, antivirus and other security tools;
• SSL/TLS encryption (HTTPS) for data in transit;
• encryption and pseudonymisation where appropriate;
• regular backups;
• contractual confidentiality obligations for employees and contractors;
• regular testing, assessment and improvement of the effectiveness of security measures.

Personal data breaches

If a personal data breach occurs, we follow our internal information-security incident procedure and applicable law. Where the breach is likely to result in a risk to individuals’ rights and freedoms, we notify the competent supervisory authority without undue delay and, where feasible, no later than 72 hours after becoming aware of it. We notify affected individuals where required by law.

Links to other websites

Our website may contain links to third-party websites, including social networks, partners and clients. Once you leave our website, the privacy policy of the third-party operator applies. COR NET d.o.o. does not control those third parties’ privacy practices.

Complaints, questions and requests

For privacy questions or requests, contact us at info@cor-net.net, phone +387 36 833 468, or by post at COR NET d.o.o., Kneza Višeslava 14, 88 000 Mostar, Bosnia and Herzegovina.

If you believe your rights have been infringed, you have the right to lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina (AZLP), Dubrovačka 6, 71000 Sarajevo; phone +387 33 726-250; e-mail azlpinfo@azlp.ba; web www.azlp.ba.

The contact details +387 33 726-258 and szzp@azlp.ba refer to the Data Protection Officer of the Agency (AZLP), not a Data Protection Officer of COR NET d.o.o.

Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes to our services, technology, legal requirements or security measures. The updated version will be published on this page with a revised “Last updated” date. Where changes are material, we will provide an additional notice where appropriate.