Privacy policy

Information technology services and software development company AJTI DIGITAL DOOEL Skopje (referred to below as the “Trader” or the “Company”).

Registered office: ul. Nikola Parapunov br. 5-22, Karpos, 1000 Skopje, Republic of North Macedonia
Company registration number (ЕМБС): 7946988
Tax number (ЕДБ): 4057026580990

Last updated: August 2026

1. Data controller

The controller of personal data processed through the Website is Information technology services and software development company AJTI DIGITAL DOOEL Skopje, registered office at ul. Nikola Parapunov br. 5-22, Karpos, Skopje, company registration number (ЕМБС) 7946988, tax number (ЕДБ) 4057026580990, contact email: [email protected].

This Privacy Policy is prepared in accordance with the Law on Personal Data Protection (“Official Gazette of the RNM” No. 42/2020 and 294/2021), aligned with Regulation (EU) 2016/679 (GDPR), and explains what personal data we collect, for what purposes, to whom we transfer it, and what rights data subjects have.

Data Protection Officer (DPO)

The Company has appointed a Data Protection Officer, who is the first point of contact for all questions related to the processing of personal data and the exercise of data subjects' rights described in this Policy.

Name: Davor Mirceski

Email: [email protected]

2. What personal data we collect

Identification data: first and last name, delivery and/or billing address;
Contact data: email, phone number;
Order data: order contents, purchase history, preferences;
Financial data: payment-related data (for card payments, card data is processed exclusively by the CaSys/Stopanska Banka AD Skopje payment service; the Trader does not store your card number or CVV code);
Technical data: IP address, device and browser type, cookie data, as described in the Cookie Policy;
Communication data: the content of questions or complaints submitted by email or contact form.

3. Purposes and legal basis for processing

Purpose of processing: Processing and fulfilment of an order (conclusion and performance of a contract). Legal basis: Performance of a contract (Art. 6(1)(b) GDPR)
Purpose of processing: Issuing invoices/receipts and bookkeeping. Legal basis: Legal obligation (tax and accounting regulations)
Purpose of processing: Responding to enquiries and handling complaints. Legal basis: Performance of a contract / legitimate interest
Purpose of processing: Sending newsletters and promotional messages (email marketing). Legal basis: Consent of the data subject (may be withdrawn at any time)
Purpose of processing: Website usage analytics (Google Analytics). Legal basis: Consent of the data subject
Purpose of processing: Displaying personalised ads (Facebook Pixel, Google Ads). Legal basis: Consent of the data subject
Purpose of processing: Fraud prevention and Website security. Legal basis: Legitimate interest of the Trader

4. Recipients of personal data

Personal data may be disclosed to the following categories of processors and recipients, strictly to the extent necessary for the stated purposes:

Courier services (varying by destination and availability) – to deliver ordered products within the Republic of North Macedonia;
CaSys/Stopanska Banka AD Skopje payment service – to process online card payments;
Accounting firm/certified accountant – to keep business records;
Hosting and Website maintenance providers;
Google LLC (Google Analytics, Google Ads) and Meta Platforms Ireland Ltd. (Facebook Pixel) – only after consent has been given for the relevant cookies;
Competent state authorities – where required by law (e.g. the Public Revenue Office, courts, inspection bodies).

The Trader does not sell or rent personal data to third parties for their own independent marketing purposes.

5. Transfers of data outside the Republic of North Macedonia

Through the external service providers listed in section 4 (Google, Meta), certain data may be transferred to and processed on servers outside the Republic of North Macedonia and the European Union. Such transfers are made only to processors that provide an adequate level of protection for personal data (e.g. through standard contractual clauses approved under the GDPR).

6. Retention period

Personal data is retained only for as long as necessary to fulfil the purposes described in this Policy:

Order- and invoice-related data – for the statutory retention periods for accounting records (generally at least 10 years);
Consent-based customer/marketing data – until consent is withdrawn, or at most 3 years from the last activity;
Analytics data from cookies – for the periods stated in the Cookie Policy.

7. Rights of the data subject

In accordance with the Law on Personal Data Protection and the GDPR, every individual whose personal data is processed has the right to:

Access their own personal data;
Rectification of inaccurate or incomplete data;
Erasure of data (“right to be forgotten”), where applicable;
Restriction of processing;
Data portability;
Object to processing based on legitimate interest or direct marketing;
Withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
Lodge a complaint with the Personal Data Protection Agency (АЗЛП), ul. “Pelagoniska” bb, 1000 Skopje, www.azlp.mk, if they believe their rights have been violated.

Requests to exercise these rights should be sent to the Data Protection Officer at [email protected], and the Trader will respond within the statutory deadline (generally no later than 30 days).

8. Data security

The Trader implements appropriate technical and organisational measures (access control, encryption of payment data in transit through a certified payment processor, regular system updates) to protect personal data against unauthorised access, loss, misuse or destruction.

9. Minors

The Website is not intended for individuals under 15 years of age. The Trader does not knowingly collect personal data from minors without parental/guardian consent, in accordance with the Law on Personal Data Protection.

10. Changes to this Policy

The Trader reserves the right to periodically update this Privacy Policy. Any change will be published on the Website with an indicated last-updated date.

11. Contact

For any questions related to the protection of personal data, data subjects may contact the Data Protection Officer at [email protected].