This Privacy Policy provides general information on how we collect, maintain, and manage personal data whenever you visit our website and/or use any of our administrative services. We collect only the personal data necessary to provide our administrative services and/or to carry out activities to protect your rights in accordance with the law in the field of public electronic communication services, including supervision.

Data Controller

The controller of personal data is the Agency for Electronic Communications (hereinafter referred to as AEC or the Agency), located at Kej Dimitar Vlahov 21, Skopje, Republic of North Macedonia.

Processing activities related to online services available through the Agency’s website http://lms.mkd-cirt.mk are performed by the technical staff of the Agency responsible for these services or by individuals tasked with performing the respective activities. Processing activities related to our administrative services are carried out by our employees based on their official duties and the “need to know” principle.

As the national regulatory authority of the Republic of North Macedonia in the field of electronic communications market regulation, the Agency for Electronic Communications is committed to protecting the privacy of individuals. All personal data collected and processed by the Agency are handled in accordance with the provisions of the Law on Personal Data Protection and the Law on Electronic Communications.

Whose data can we collect?

We may collect data related to the following categories of individuals:

1. Visitors to our website – Typically, we collect navigational data (see below). If it is necessary to collect data that reveals a person’s identity through our online services (e.g., during requests), this will be clearly explained, along with our intentions regarding such data.
2. Participants in training sessions, conferences, and events – Personal data for the purposes of conducting training sessions, participation in public meetings, and other events organized by AEC.

Categories of processed data

Navigational data

When you visit our website, the server creates logs for each visitor containing the following data:

• Your Internet Protocol (IP) address;
• The device you are accessing from, including its type and model;
• Your operating system;
• The type of browser, plugins, and version;
• The pages you visit on our website and the time spent on each page;
• The URL of the page that referred you to our website and, in some cases, the search terms used to find our site;
• The language of the browser you are using;
• Your country (determined through the IP address).

Server logs are automatically deleted within 30 days unless circumstances require longer retention, such as for investigating a virus or malicious attack.

We maintain servers independently, and all website activities, including log creation and data analysis, are conducted internally.

Data voluntarily provided by users

The only personal data we collect from your visit to our website are those you voluntarily provide for specific purposes to enable us to deliver training services.

We may collect the following types of personal data: name and surname, postal address, contact phone number, fax, email, and signature. Our annual reports generally do not include these data. If they do, the information is presented in statistical form without revealing individual identities.

We do not share data about you or your visit to our website with third parties unless it involves reporting a malicious attack or in other cases prescribed by law.

We collect your personal data directly from you. At the time of collection, you will be informed about the specific purposes for which your personal data are being collected. Personal data are collected through various channels, including:

• Through your use of our website, including registration and knowledge verification forms;
• Via our email addresses: contact@aec.mk or contact@mkd-cirt.mk;
• By mail at: Dimitar Vlahov 21, 1000 Skopje;
• Verbally.

Retention period of collected data

The data we collect are retained in accordance with the applicable internal procedures of the Agency for Electronic Communications for the period necessary to achieve the purpose of processing, i.e., to provide the appropriate administrative services requested by users.

What happens if we cannot collect your personal data?

If we do not receive all the data we require about you, we may not be able to provide the requested administrative services and/or information.

What are your rights?

You have the right to access personal data records, as well as the right to amend, modify, or delete personal data, and to prevent the use of personal data. These rights can be exercised by submitting a request to the Agency for Electronic Communications (address: Kej Dimitar Vlahov 21, 1000 Skopje, phone: +389 2/3289200, email: contact@aec.mk).

For additional information and/or to exercise your rights regarding personal data protection, you can contact our Data Protection Officer, Elizabeta Dvojakova, at the following email: elizabeta.dvojakova@aec.mk.

If you believe the way AEC processes your personal data is in violation of the provisions of the Law on Personal Data Protection, you can submit a request to the Agency for Personal Data Protection as the supervisory body.

Consent for collecting personal data

By familiarizing yourself with this policy and subsequently using our online services, users give their consent to the manner in which the Agency provides services, through the communication forms available on our website.