About Us | Privacy Policy
1. General
FORTONMKA LLC Skopje (hereinafter: FORTONMKA LLC, the Controller, the organization) is committed to the protection of personal data in every segment of its business processes, applying standards established by the legal and regulatory provisions for personal data protection in the Republic of North Macedonia, as well as through the company’s internal policies.
The protection of privacy and confidentiality of client data is of utmost importance to FORTONMKA LLC, a company engaged in brokerage and consulting (hereinafter: the Company).
The Privacy Policy of FORTONMKA LLC aims to explain the process of collecting, using, disclosing, protecting, and destroying (the “lifecycle”) of the personal data it processes. All activities related to personal data are conducted by FORTONMKA LLC in accordance with the provisions of the Law on Personal Data Protection and related regulations based on this Law.
For the purposes of personal data protection, FORTONMKA LLC has appointed a Data Protection Officer (contact information below), whom data subjects can contact for questions related to the processing of their personal data and the exercise of their legal rights. Additionally, the protection of clients’ data privacy and confidentiality at FORTONMKA LLC is part of the Privacy Policy, the provisions of which are mandatory for all employees of FORTONMKA LLC.
Types of Data we Collect
Depending on the purpose for which the data is provided/collected, we gather various types of data from subjects that are necessary to fulfill the purpose for which they are collected, as well as to maintain professional relationships between FORTONMKA LLC and its users. We may collect this information in multiple ways, including directly from you, from our authorized subcontractors, or from third parties with whom we collaborate.
Specifically, FORTONMKA LLC may process the following personal data:
Personal data provided by individuals when purchasing products, such as: name and surname of the contact person, along with any other data necessary for signing a contract.
Employment data: This includes name, surname, date of birth, personal identification number, place of birth, residential address, citizenship, gender, level and type of education, nationality, bank account number, email address, and contact phone number. The legal basis for processing these data is the fulfillment of a legal obligation arising from the Law on Labor Relations and the Law on Employment Records. This pertains to data on FORTONMKA LLC employees.
Employment applications: This includes name, surname, date of birth, place of birth, residential address, citizenship, gender, personal identification number, level and type of education, work experience, email address, and contact phone number. The legal basis for processing these data is the fulfillment of a legal obligation arising from the Law on Labor Relations, the Law on Internships, the Law on Volunteering, and the Law on Employment Records.
Contact via the contact form on our website: This includes name, email, phone number, and company. The legal basis for processing these data is Your consent.
2. How We Use Personal Data
We may use personal information in multiple ways, including personal contacts obtained through our websites, email correspondence, and third parties such as business partners. We use personal information for the purposes disclosed to you or as permitted by law. In general, we use personal information to:
- Provide the services you request,
- Send products, information, or offer services to our clients,
- Understand your needs or those of your clients,
- Research our market and improve our products and services,
- Comply with regulatory and legal obligations,
- Assist in planning events and meetings,
- Protect our rights and property.
3. How We Keep Your Personal Data
FORTONMKA LLC takes all technical and organizational measures to ensure the highest level of confidentiality and protection in processing Your personal data, aiming to prevent unauthorized access, unauthorized disclosure, or potential misuse. Access to your personal data is limited to employees who we believe have a legitimate need to handle such data to fulfill the purpose for which it was provided. Employees of the organization have signed a Confidentiality and Data Protection Statement, committing to keep and handle your data as confidential information.
4. Retention Periods for Your Personal Data
The duration for which we retain Your information depends on the type of information involved.
All employee data is retained in accordance with the requirements of the Law on Labor Relations and the Law on Archival Operations, for a period of 45 years.
All employee reports, such as disciplinary actions and investigations, are retained for 3 years after the end of employment.
Customer complaints are retained for 3 years.
Data obtained from consumers or other clients through contract signing is processed for the duration needed to fulfill the obligations of that contract and is deleted no later than 1 year after all rights and obligations arising from the contract have been fulfilled.
Consents obtained from data subjects….
We retain our records for at least the minimum required retention period.
5. Security of Personal Information
We treat the personal information you provide as confidential and take reasonable steps, including standard protective measures, to safeguard your personal information against accidental deletion or loss, as well as unauthorized access, disclosure, or alteration.
6. Retention Period for Collected Data
The data we collect is retained in accordance with the law and for the period necessary to achieve the purpose of processing. User and customer data collected in defined data sets is stored for up to 30 days from the date a request for data deletion is submitted by the user.
- The calculation of retention periods for personal data is based on the following criteria:
Duration of the contract (if you have entered into a contract with us), - Time required to process the request or complaint (if a complaint is submitted),
- Our legal or contractual obligations.
Your data will be retained only as long as necessary to fulfill the purposes mentioned above. Your personal data will not be kept in an identifiable form for longer than required to achieve the purpose for which it was collected or processed. The organization retains certain personal data in accordance with the time frames prescribed by law or the company’s internal policies, and only for as long as necessary to achieve the purpose for which it was collected.
6.1 Your Rights and Contact Regarding the Privacy Policy
The organization guarantees the exercise of all Your legal rights in relation to the processing of Your personal data. At any time, You have the right to request the following from the organization:
⮚ right of access – the right to submit a request for access to your personal data, i.e. to receive information about the data being processed about You and to verify whether it is accurate and up-to-date;
⮚ right to rectification – if you discover that your personal data processed by the organization is inaccurate or incomplete, you have the right to request it to be rectified;
⮚ right to erasure – the right to request the organization to delete your personal data under certain conditions established by law;
⮚ right to restriction of processing – the right to request the organization to limit the processing of your personal data under certain conditions established by law;
⮚ right to data portability – the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another data controller without hindrance from the organization;
⮚ right to object – the right to object based on a specific situation if the processing of your personal data is based on legitimate interests or is done for direct marketing purposes, including profiling related to direct marketing, under certain conditions established by law;
⮚ right to withdraw consent – you have the right to withdraw your consent to the use of your personal data at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Please note that you can submit a request to exercise your rights to the address “st. Lazar Lichenoski no. 13, Skopje” marked “for the Data Protection Officer” or electronically to the email address info@forton.mk, where you should either electronically sign the request or send the scanned completed request.
The appointed Data Protection Officer is Danica Petrovska, and you can contact her at the email address d.petrovska@fortoninvest.mk
The regulatory body for personal data protection is the Agency for Personal Data Protection, located at Blvd. Goce Delchev no. 18 (MRTV building, 14th floor), and their contact email is info@privacy.mk.
NOTE: Before submitting a request to exercise your rights, all data subjects are encouraged and advised to read the relevant legal provisions cited above, which contain the conditions and limitations regarding when and how rights can be exercised, in order to avoid unnecessary and unfounded requests to FORTONMKA LLC.
Additionally, we would like to note that FORTONMKA LLC will provide the requested information free of charge, except in cases where the requests are obviously unfounded or excessive, especially if the same requests are repeated. In such cases, FORTONMKA LLC may either refuse to act on the request or charge a fee, taking into account the volume, complexity, and time required to provide the information or process the request, of which you will be appropriately notified.
Furthermore, please note that if more than one copy of the personal data being processed is requested, FORTONMKA LLC will decide whether to charge a fee, considering the volume, complexity, and time required to provide the copies.
7. Changes to the Privacy Policy
The Privacy Policy will be regularly updated and supplemented in accordance with any changes and our activities. Please visit the privacy policy page for updates in case of any changes.
The management of FORTONMKA LLC guarantees the protection of personal data of employees and data subjects it has access to and declares that it will adhere to the implemented technical and organizational measures!
