Privacy Policy
Last Updated: July 22, 2026
1. Introduction
Kodiak Systems d.o.o. ("Kodiak Systems", "Company", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, contact us, or interact with our business.
This Privacy Policy applies solely to the Kodiak Systems corporate website and related business communications. Separate privacy policies may apply to specific products and services offered by Kodiak Systems.
2. Company Information
Kodiak Systems d.o.o.
Karađorđeva 378
78000 Banja Luka, Bosnia and Herzegovina
Email: office@kodiak-systems.com
Website: https://kodiak-systems.com
If you have questions regarding this Privacy Policy or our data protection practices, you may contact us using the information above.
3. Information We Collect
Kodiak Systems does not require user registration to access its website.
The only personal information we may collect is information voluntarily submitted through our contact form or direct communication.
This information may include:
● Name
● Email address
● Company name
● Phone number (if provided)
● Message content
● Any information voluntarily included in your inquiry
4. Purpose of Processing
We process personal information solely for legitimate business purposes, including:
● Responding to inquiries and requests;
● Providing information about our company, products, or services;
● Communicating with prospective customers, partners, suppliers, or job applicants;
● Maintaining business records;
● Complying with legal obligations.
We do not use your information for automated decision-making or profiling.
5. Legal Basis for Processing
Where GDPR applies, Kodiak Systems processes personal data on one or more of the following legal bases:
● Your consent when you voluntarily submit information through our contact form;
● Our legitimate interest in responding to business inquiries and maintaining business communications;
● Compliance with legal obligations where applicable.
6. Data Sharing
Kodiak Systems does not sell, rent, or trade personal information.
Personal data may only be disclosed:
● To service providers supporting website hosting, email delivery, or IT operations;
● When required by law or governmental authorities;
● To protect our legal rights, property, or security;
● During a merger, acquisition, restructuring, or transfer of business assets.
All third-party service providers are required to maintain appropriate confidentiality and security safeguards.
7. Data Retention
We retain personal information only for as long as reasonably necessary to:
● Respond to inquiries;
● Maintain business relationships;
● Fulfill contractual obligations;
● Comply with legal and regulatory requirements.
When personal information is no longer required, it will be securely deleted or anonymized.
8. International Data Transfers
Kodiak Systems primarily processes personal information within the European Economic Area (EEA) or jurisdictions providing an adequate level of data protection.
If personal data are transferred internationally, appropriate safeguards will be implemented in accordance with applicable data protection laws.
9. Security Measures
Kodiak Systems implements appropriate technical and organizational measures designed to protect personal information against:
● Unauthorized access;
● Accidental loss;
● Misuse;
● Disclosure;
● Alteration;
● Destruction.
While no system can guarantee absolute security, we continuously strive to maintain appropriate protection standards.
10. Cookies and Tracking Technologies
The Kodiak Systems website does not currently use advertising trackers, behavioral profiling technologies, or analytics platforms for visitor monitoring.
If cookies are used in the future for functional, analytical, or marketing purposes, this Privacy Policy and our Cookie Policy will be updated accordingly.
11. Your Rights
Subject to applicable law, you may have the right to:
● Access your personal data;
● Request correction of inaccurate information;
● Request deletion of personal data;
● Restrict processing;
● Object to processing;
● Request data portability;
● Withdraw consent where consent is the legal basis for processing;
● Lodge a complaint with a competent supervisory authority.
Requests may be submitted via email to office@kodiak-systems.com.
12. Third-Party Links
Our website may contain links to third-party websites.
Kodiak Systems is not responsible for the privacy practices or content of external websites. Users are encouraged to review the privacy policies of any third-party websites they visit.
13. Changes to This Privacy Policy
Kodiak Systems may update this Privacy Policy from time to time to reflect changes in legal requirements, business operations, or website functionality.
Any updates will be published on this page together with the revised effective date.
Contact Us
Kodiak Systems d.o.o.
Karađorđeva 378
78000 Banja Luka, Bosnia and Herzegovina
Email: office@kodiak-systems.com
Website: https://kodiak-systems.com
Applies alongside the general Privacy Policy (Section A). In case of inconsistency, this Addendum prevails for matters specific to Kodiak Kids Safe.
Last updated: July 22, 2026
1. Scope of this Addendum
The general Kodiak Systems Privacy Policy applies to the corporate website. This Addendum supplements that Policy and specifically addresses data processing through the Kodiak Kids Safe application ("KKS", "Application"), including the parent account and child device monitoring functionality.
2. Data Controller
Same legal entity as in the general Privacy Policy: Kodiak Systems d.o.o., Karađorđeva 378, 78000 Banja Luka, Bosnia and Herzegovina. Contact for KKS-specific inquiries: office@kodiak-systems.com
3. Information We Collect Through KKS
a) Parent account information (the parent/legal guardian is the sole account holder - the child does not have their own account or login credentials):
● Full name
● Email address
● Password (stored in hashed form only)
b) Information related to the child's device and activity (processed on behalf of, and under the supervision of, the parent):
● Child device identifier, paired with the parent account
● Age category set by the parent (e.g. "Bear 3-8", "Explorer 9-11", etc.) - we do not collect the child's full name, date of birth, or other direct identifiers unless voluntarily entered by the parent
● DNS queries/domains accessed by the device, matched against a local category database - this check is primarily performed locally, on the device itself
● Records of blocked/approved access attempts (category, time, status: allow / soft-block / hard-block)
● Activity reports (daily/weekly summaries) delivered to the parent
● Alerts regarding attempts to bypass protection
Note: KKS is designed on a data-minimization principle - DNS checks are performed locally on the device, meaning most access decisions do not require sending data about every visited site to our servers. Only aggregated activity reports needed to display information to the parent are synced to the cloud.
4. Legal Basis
Same as the general Privacy Policy (contract performance, legitimate interest, consent, legal obligation), noting that contract performance with the parent is the primary basis for processing data about the child's activity.
5. Special Protections for Children's Data
● We do not use the child's data for targeted advertising
● We do not sell or rent data to third parties
● We do not build profiles of the child for marketing purposes
● Access to this data is limited to the parent/legal guardian who created the account, and authorized Kodiak Systems personnel to the extent necessary for technical support
● The parent confirms they hold the legal authority (parental responsibility/guardianship) over the child whose device they monitor
6. Data Retention
● Account data: for as long as the account is active, plus 30 days after account deletion
● Activity reports: 30 days, after which they are automatically deleted or anonymized
7. Your Rights
Same rights as under the general Privacy Policy (access, correction, deletion, restriction, portability, objection, withdrawal of consent), exercised by the parent on their own behalf and on behalf of the child they supervise. Requests: office@kodiak-systems.com