Privacy Policy

Controller: Trade Company for Production, Trade, and Services Termalift DD Dragan DOO Kumanovo

Address: Ul. 100 (Nas. Karposh), bb-Ind Zone, 1300 Kumanovo, Tel. +389 31 44 32 00

1. General

In accordance with the Law on Personal Data Protection of the Republic of North Macedonia, published in the Official Gazette No. 42 on 16.02.2020, TERMALIFT DOO acts as a controller and processor of personal data, determining the purposes and methods of processing personal data in accordance with the law. The subjects of personal data include employees, clients, and other individuals and legal entities that cooperate with or use the services and/or products of the Controller.

This Policy identifies the method and procedure by which these personal data are processed by Termalift DOO and its employees, ensuring that processing complies with the principles of personal data protection. Specifically, processing is conducted in accordance with the law, and technical and organizational measures are implemented to ensure the confidentiality, integrity, availability, and resilience of systems and services for personal data processing. The processing is limited to only the personal data necessary to fulfill the purpose for which they are processed.

We collect personal data through various channels, including:

• Via our email
• By mail
• By phone
• Verbally

We process your data for specific, clear, and legitimate purposes, to the extent necessary to achieve the processing objectives, and we will not process your personal data in a manner contrary to these purposes.

2. Categories of Processed Data

• Personal identification data of employees (full name, residential address, unique identification number, bank account, email, phone number, date of birth, etc.)
• Personal data of clients (full name, residential address, email, phone number)

In accordance with the laws governing personal data protection, your personal data may be processed on the following legal bases:

• When processing is necessary for fulfilling the contract you accept, or
• When you have given consent for the processing of your data for specific purposes (you always have the right to withdraw consent),
• Processing is necessary for fulfilling our legal obligation (for which you will be notified during processing),
• When Termalift has a legitimate interest in processing your personal data (data processing based on legal interest).

Providing personal data necessary for contractual purposes is voluntary. However, if you do not provide your personal data and we need them to deliver the requested service (such as contract signing, web applications, etc.), we will not be able to provide that service.

3. How We Store Your Personal Data

Termalift takes all technical and organizational measures to ensure the highest level of confidentiality and protection of your personal data to prevent unauthorized access, disclosure, or misuse. Within our company, only those employees who require access to your data for fulfilling contractual and legal obligations will have access, and only to the extent necessary for processing.

Employees have signed a Confidentiality and Data Protection Statement, committing to handling your data as confidential information.

Your personal data is not shared with third parties and is used solely for business operations. However, if we engage service providers who process data on our behalf, they will be obligated to follow our instructions and ensure data protection in accordance with applicable laws.

Neither we nor our partners will transfer your personal data to third parties in any form unless we obtain your consent or are legally required to do so. The organization retains control over the use of this data.

4. Data Retention Periods

The retention and storage periods for personal data are based on the following criteria:

• Duration of the contract (if you have a contract with us)
• Time required to process a request or complaint (if a complaint is submitted)
• Our legal or contractual obligations

Your data will be stored only for as long as necessary to fulfill the above purposes. Personal data will not be kept in an identifiable form longer than needed to achieve the purpose for which they were collected or processed. Termalift retains certain personal data in accordance with legal deadlines or internal policies and only for the period necessary to achieve the purpose for which they were collected.

Some of your personal data must be archived to respond to legal proceedings, within the timeframes prescribed by applicable laws. If you have a contract with us, your personal data is stored for up to 10 years after your last activity.

Your personal data will be deleted or destroyed when:

• The purpose for which the data was collected is fulfilled, and further processing is unnecessary.
• You withdraw your consent for processing and submit a request for data deletion.
• There is no legal basis for further processing of your personal data.

5. Your Rights

Termalift guarantees the realization of all your legal rights regarding the processing of your personal data. At any time, you have the right to request from the organization:

• Right of access – You may submit a request to access your personal data to verify its accuracy and update status.
• Right to rectification – If you find that your personal data processed by the organization is inaccurate or incomplete, you have the right to request correction.
• Right to erasure – You may request the deletion of your personal data under legally defined conditions.
• Right to restrict processing – You may request that the organization restrict the processing of your personal data under legally defined conditions.
• Right to data portability – You may request to receive your personal data in a structured, commonly used, and machine-readable format and transfer it to another controller without interference from the organization.
• Right to object – You may object to the processing of your personal data if it is based on legitimate interest or for direct marketing purposes, under legally defined conditions.
• Right to withdraw consent – You may withdraw your consent for processing your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise the above rights under the Personal Data Protection Law or have additional questions regarding the processing of your personal data, please contact the Data Protection Officer via email or send a request to the postal address below:

Trade Company for Production, Trade, and Services Termalift DD Dragan DOO Kumanovo

Address: Ul. 100 (Karposh), bb-Ind. Zone, 1300 Kumanovo

For the Data Protection Officer:

• Email: frosina.d@termalift.com.mk and termalift.hr@gmail.com

To receive a response, please include the following information:

• Your relationship and interaction with us.
• Full name of the data subject.
• Contact information – address, phone, email.
• Description of the request or information you wish to obtain from us.

6. Updates to the Privacy Policy

Termalift reserves the right to modify or supplement this Privacy Policy at any time in response to changes in our activities. Any modifications will be publicly announced.

Termalift DD DOO guarantees the protection of personal data of employees and individuals whose data it accesses and commits to adhering to implemented technical and organizational measures!