Contents
01Controller
The controller is VAMAS ENT DOOEL Skopje (Друштво за трговија и услуги ВАМАС ЕНТ ДООЕЛ експорт импорт Скопје), ul. Miladin Popovikj 21, 1000 Skopje, tax no. 4057026582608, reg. no. 7970641 ("VAMAS", "we").
For any question about personal data or to exercise your rights, write to [email protected] or to our registered office.
We process personal data under the Personal Data Protection Act (Official Gazette of the Republic of North Macedonia No. 42/2020) and, where applicable, the EU General Data Protection Regulation (GDPR).
02What data we process
- Visitors to vamas.mk — the website does not use analytics, advertising cookies or tracking pixels, and has no forms. The server automatically records technical data (IP address, date and time, requested page, browser) in security logs. The domain checker sends only the domain you search for.
- Clients and client-area users — name, company name, address, tax and registration numbers, e-mail, phone, order, invoice and payment data, support communication, and technical data about service usage. We do not store payment-card data — card payments are processed by a licensed payment institution.
- Domain registration — the registrant and contact data required by the competent registry.
- Business contacts and enquiries — the data you give us when you e-mail or call us.
- Job applicants — the data in CVs you send us voluntarily.
Data that clients store on our servers (websites, databases, e-mail) is processed by us only as a processor on the client's behalf — see the "Processing of personal data on behalf of the Client" article of the Terms of Service.
03Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Entering into and performing contracts, providing services, support, invoicing | Performance of a contract |
| Accounting, tax, responding to requests from competent authorities | Legal obligation |
| System security, fraud and abuse prevention, handling abuse reports, debt collection, establishing and defending legal claims | Legitimate interest |
| Business communication with existing clients about similar services and important changes | Legitimate interest (you may object at any time) |
| Marketing messages and newsletters, keeping CVs for future openings | Consent (you may withdraw it at any time) |
We do not profile and do not make decisions based solely on automated processing that produce legal effects concerning you.
04Recipients
We do not sell or rent personal data. We disclose it only as necessary for the purposes in this policy, to the following categories of recipients:
- a data-centre provider in Germany (EU), where our servers are located;
- a content-delivery and attack-protection network through which the website is served (data may be processed outside the EU, with appropriate safeguards);
- banks and licensed payment institutions, to execute payments;
- domain registries (MARnet for .мк and .mk) and ICANN-accredited registrars, to register domains, and public WHOIS/RDAP databases where registry rules require it;
- accountants, auditors and legal advisers bound by confidentiality;
- competent public authorities, only on the basis of law or a final decision.
05International transfers
Our servers are located in the European Union. Where data is transferred outside the Republic of North Macedonia and the EU (for example to international domain registries or the content-delivery network), this happens only to countries with an adequate level of protection, on the basis of appropriate safeguards such as standard contractual clauses, or where necessary to perform our contract with you.
06Retention
| Data | Period |
|---|---|
| Invoices and accounting records | As required by accounting and tax regulations (at least 10 years) |
| Contracts and client data | For the duration of the contract and 5 years after it ends (limitation period) |
| Support correspondence | 3 years after the contract ends |
| Enquiries from people who did not become clients | 1 year |
| Web-server logs | up to 30 days |
| Security logs | up to 90 days, or until an incident is resolved |
| Backups | up to 30 days (rotating) |
| Marketing consent | until withdrawn |
| Applicant CVs | until the hiring decision, or 1 year with consent |
After these periods, data is deleted or permanently anonymised.
07Security
We apply appropriate technical and organisational measures: encrypted connections (TLS) on all our services, two-factor authentication and restricted access to administrative systems, servers in the EU, regular security updates, firewalling and attack protection, encrypted storage of sensitive credentials, backups, and confidentiality obligations for everyone with access to data.
If a personal-data breach occurs that is likely to put your rights at risk, we will notify the Personal Data Protection Agency within 72 hours and inform you without undue delay where the law requires it.
08Your rights
You have the right: to access your data; to have inaccurate data rectified; to erasure ("right to be forgotten"); to restriction of processing; to data portability; to object to processing based on legitimate interest, and to direct marketing at any time without giving reasons; and to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Send your request to [email protected]. We will respond without undue delay and within one month at the latest; for complex requests this may be extended as permitted by law, in which case we will inform you. We may ask you to verify your identity before acting. Exercising your rights is free of charge unless requests are manifestly unfounded or excessive.
09Right to complain
If you believe the processing of your personal data breaches the law, you may lodge a complaint with the Personal Data Protection Agency of the Republic of North Macedonia (www.dzlp.mk). Please contact us first — we can usually resolve questions quickly.
10Children
Our services are not intended for persons under 18, and we do not knowingly collect their data.
11Changes to this policy
We may update this policy. The current version is always published on this page with its effective date. We will inform clients of material changes by e-mail.
This English text is a translation; the Macedonian version prevails. Questions: [email protected].