Legal
We value transparency, respect your privacy, and are committed to protecting any personal information entrusted to BAAX Group.
Last updated: August 22, 2026
01
BAAX Group builds systems intended to last. The same discipline applies to the way we handle information. This policy explains what we collect when you visit baaxgroup.com or www.suravent.com, or correspond with us, why we collect it, and the choices you retain at every stage.
We collect only what is necessary for a conversation to be useful. Nothing on this website is designed to gather more than that.
02
This policy applies to visits to and interactions with the following websites operated within the BAAX Group ecosystem: baaxgroup.com and www.suravent.com.
Suravent is part of the BAAX Group ecosystem and continues to rely on these central BAAX Group legal documents rather than on separate ones. Where a section describes technologies used on only one of the two websites, this is stated explicitly. The two platforms do not necessarily use the same cookies or the same measurement technologies.
The contact point for all data protection matters covered by this policy is stated in the Contact section below.
03
BAAX Group d.o.o., registered in Bosnia and Herzegovina, is the data controller for personal data processed through baaxgroup.com and through www.suravent.com. The registered details and contact address of the controller are those stated in the Imprint and in the Contact section of this policy.
Suravent is a platform within the BAAX Group ecosystem. It is not a separate company or a separate legal entity, and it has no separate data controller. These central BAAX Group documents therefore govern both platforms, although the two platforms do not necessarily use the same cookies, features or measurement tools.
04
baaxgroup.com uses Google Analytics 4 only with your explicit consent. Until consent is granted, no analytics script is loaded, no request is sent to Google and no analytics cookie is written; no tag manager container is used. Analytics storage, advertising storage, advertising user data and advertising personalisation are denied by default, and advertising signals remain denied permanently.
Your decision is stored in your browser as a record named baax_consent_v1, which holds only the version of the record, whether analytics is permitted, and the time and expiry of the decision. It lasts no longer than 12 months, after which you are asked again. You may change or withdraw your consent at any time through the “Cookie settings” option in the footer; on withdrawal, measurement stops immediately and the analytics cookies are deleted. Withdrawal has no retroactive effect on data already processed lawfully.
Measurement on baaxgroup.com is limited to a fixed, internally maintained list of events and parameters: page views, and a small number of interaction events such as navigation and call-to-action clicks, language changes and the technical success or failure category of a form submission. Values that could identify a person are rejected before transmission, and the content of form fields is never measured.
05
With your explicit consent, www.suravent.com uses Google Analytics 4. Analytics is not activated before consent is given. Until consent is granted, analytics storage, advertising storage, advertising user data and advertising personalisation remain denied by default. Suravent currently uses no advertising tags and no personalised advertising.
Before consent is given, the Google Analytics script is not loaded and no analytics cookies are set. Suravent uses no Google advertising tags, no remarketing and no personalised advertising. You may change or withdraw your consent at any time through the “Cookie settings” option on that website; withdrawal prevents further measurement but has no retroactive effect on data already processed lawfully.
Google Analytics is a service provided by Google under the contractual terms applicable to the relevant Google account. Further information is available in the Google Privacy Policy and in the terms for Google Analytics. Any international transfers are governed by those terms and by the applicable account configuration.
Where analytics is enabled following consent, it serves to understand which pages are visited, to measure the use of modules and navigation, to improve the platform technically, to understand areas of interest in aggregate, and to measure successful interactions without recording the content of user input fields. The following categories may be processed:
06
Measurements collected through Google Analytics 4 are pseudonymised or aggregated. We do not describe them as fully anonymous.
Analytics events on baaxgroup.com and on www.suravent.com do not carry data that directly identifies a person. On baaxgroup.com this is enforced technically: values that resemble the categories below are rejected before any measurement is sent. In particular, the following are not transmitted to Google Analytics 4:
07
Depending on how you interact with us, we may collect the following categories of information:
08
Information is used for a limited set of clearly defined purposes:
09
Where the General Data Protection Regulation applies, we process personal data on one of the following lawful bases: your consent, where you have voluntarily submitted information or accepted non-essential cookies; the performance of a contract or steps taken at your request prior to entering into one; our legitimate interests in operating, securing and improving the website and in responding to business enquiries; and compliance with a legal obligation to which we are subject.
Google Analytics 4 on baaxgroup.com and on www.suravent.com is operated exclusively on the basis of consent. You may accept, decline, or change your decision later, and you may withdraw consent at any time through the cookie settings on the website concerned.
Where processing relies on consent, that consent may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.
10
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. Enquiry correspondence is retained for the duration of the conversation and a reasonable period thereafter, after which it is deleted or anonymised.
Analytics data is retained only within the retention period configured in Google Analytics 4, which is set to 14 months for user and event data. Aggregated reports may behave differently in accordance with Google’s own rules. Form submissions and business correspondence are not part of Google Analytics measurement. We cannot state that data is removed instantaneously from every backup system; deletion follows the ordinary retention and backup cycles of the systems concerned.
11
The following periods apply to analytics on baaxgroup.com and to the corresponding implementation on www.suravent.com:
12
BAAX Group does not sell personal data.
Information is shared only where legally required, or where necessary to provide a service you have requested — for example with infrastructure, hosting or analytics providers acting on our instructions and bound by appropriate confidentiality and data protection obligations.
13
Subject to applicable law, you hold the following rights in relation to your personal data:
14
We maintain appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or destruction. These include encrypted transmission, restricted internal access, and periodic review of the systems that hold personal data.
No method of transmission or storage is entirely without risk. Where an incident affecting personal data occurs, we act promptly and notify affected individuals and authorities where legally required.
15
Questions regarding this policy, or requests to exercise any of the rights described above, may be directed to:
If you have any questions regarding this document or our policies, please contact our team.
Start the Conversation