Privacy Policy

The controller of the personal data described here is NX Partners DOOEL Skopje, a company registered in the Republic of North Macedonia with its office in Skopje.

You can reach us about anything in this policy at office@nxp.mk or on +389 71 395 109. We have not appointed a Data Protection Officer, as we are not required to; enquiries are handled by the office of the Managing Director.

This policy is written to satisfy the Law on Personal Data Protection of the Republic of North Macedonia and, where our processing falls within its scope, the EU General Data Protection Regulation, which the Macedonian law mirrors.

This policy covers www.nxp.mk and the ordinary ways of reaching us: email, telephone, and messages sent through our LinkedIn profiles.

It does not cover the confidential handling of client engagement material, which is governed by the engagement letter and the confidentiality undertakings agreed with each client. Nor does it cover other organisations' websites that we link to, including LinkedIn, which publish their own policies.

The site has no user accounts, no registration, no online payments and no contact form. There is nothing here to sign up for, and no data is collected from you beyond what is described below.

Technical data from your visit. Like any web server, ours records the request: your IP address, the page requested, the time, the referring page, and your browser and operating system. These logs exist to serve the page, to keep the site available and to detect abuse.

Your site preferences. The language you select and your answer to the cookie notice, stored in cookies on your own device. The Cookie Policy sets out the detail.

Aggregated usage statistics. Only if you consent: which pages are opened, in which language, from which country and on what kind of device. Google Analytics reports this to us in aggregate; we do not attempt to identify individuals from it and are not in a position to do so.

What you send us. If you write or call, we hold what you chose to tell us — your name, your email address or telephone number, the organisation you represent, and the content of your message — together with our reply.

We do not collect special categories of data, such as health, political opinions or religious beliefs, through this website, and we ask that you do not send them to us by email.

• To deliver and secure the website: server logs and strictly necessary cookies. Legal basis: our legitimate interest in operating a functioning, secure site (Art. 6(1)(f) GDPR).
• To remember your language and your cookie decision. Legal basis: our legitimate interest in respecting a choice you have already expressed; the consent record itself is also necessary to demonstrate compliance with our obligations on consent.
• To measure how the site is read. Legal basis: your consent (Art. 6(1)(a) GDPR), given through the cookie notice and withdrawable at any time.
• To answer enquiries and discuss a possible engagement. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b)), or our legitimate interest in responding to professional correspondence.
• To meet accounting, tax and other statutory obligations once an engagement exists. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).

We do not use your data for direct marketing, we operate no mailing list, and we will not add you to one because you wrote to us.

Analytics is off until you switch it on. Google Consent Mode v2 is configured with every storage type denied by default and advertising storage denied permanently, and the Google Analytics tag is not loaded at all before you accept it.

The full inventory of cookies, their durations, and how to change or withdraw consent, is set out in our Cookie Policy.

We do not sell personal data, and we do not disclose it for anyone else's marketing.

A small number of service providers process data on our instructions, under contract, and only for the purpose we engaged them for:

• our hosting and infrastructure provider, which operates the servers this site runs on;
• our email provider, which carries correspondence with us;
• Google, as the provider of Google Analytics, and only where you have consented to analytics.

Beyond that, we disclose personal data only where we are legally obliged to — to a court, a regulator or another competent authority acting within its powers — or where it is necessary to establish, exercise or defend a legal claim.

Our servers and our email are located in Europe. Google Analytics, where you have consented to it, is provided by Google Ireland Limited within the EEA, though Google may transfer data to the United States for processing by its affiliates.

Where data leaves the EEA or North Macedonia, the transfer is covered by the European Commission's Standard Contractual Clauses together with the supplementary measures the provider publishes, and by the EU–US Data Privacy Framework where the recipient is certified under it. You may ask us which safeguards apply in a given case.

• Server logs: up to 12 months, then deleted or aggregated beyond recovery.
• Language and consent cookies: one year and six months respectively, as set out in the Cookie Policy.
• Analytics data: retained by Google for 14 months at event level, the shortest retention this property offers that still permits meaningful reporting.
• Correspondence: for as long as the conversation is live and for up to three years afterwards, so that a professional relationship can be picked up where it left off. Longer where an engagement exists and accounting or limitation-period rules require it.

When a retention period ends, the data is deleted or irreversibly anonymised.

The site is served exclusively over encrypted connections (HTTPS/TLS). Access to the server, to the analytics property and to our mailboxes is limited to the people who need it, protected by strong authentication and reviewed periodically.

No system is beyond risk, and we would rather say so plainly than imply otherwise. If a breach occurs that is likely to result in a risk to your rights, we will notify the supervisory authority and, where the risk is high, you, within the periods the law requires.

You may ask us at any time to:

• confirm whether we process data about you, and give you a copy of it;
• correct anything inaccurate or incomplete;
• erase data we no longer have grounds to keep;
• restrict processing while a dispute about it is resolved;
• provide the data you gave us in a portable, machine-readable form;
• stop processing based on our legitimate interests, where your situation gives you grounds to object;
• withdraw your consent to analytics, at any time and without giving a reason.

Withdrawing consent does not make the processing carried out beforehand unlawful. Write to office@nxp.mk and we will respond within 30 days; if a request is unusually complex we will tell you why more time is needed. There is no charge, unless a request is manifestly unfounded or excessive.

If you believe we have handled your data wrongly, tell us first — most issues are resolved faster that way.

You also have the right to complain to a supervisory authority. In North Macedonia this is the Agency for Personal Data Protection (Агенција за заштита на личните податоци), Skopje, at www.azlp.mk. If you are in the EEA, you may instead complain to the supervisory authority of the country where you live or work, or where you believe the problem arose.

We take no decisions about you by automated means, and we do not profile visitors. Nothing on this site scores, ranks or segments you.

This website addresses companies, institutions and professionals. It is not directed at children and we do not knowingly collect data about them. If you believe a child has sent us personal data, write to us and we will delete it.

We update this policy when what we do changes. Material changes are reflected in the date at the top, and where a change affects processing based on consent, we ask for consent again rather than relying on your earlier answer.

For anything in this policy — a request, a correction, a complaint or a question — write to us:

• NX Partners DOOEL Skopje, Skopje, North Macedonia
• office@nxp.mk
• +389 71 395 109