Skip to content
Book a consultation
МКEN

Privacy and cookie policy

Last updated:

Who we are

The controller of your personal data is ДИВЕРТО ИНФОРМАЦИСКА СИГУРНОСТ ДООЕЛ Скопје (Diverto MK), Arhiepiskop Dositej 8, 1000 Skopje, North Macedonia. For any privacy question or request, write to info@diverto.mk.

This policy explains what personal data we process when you visit diverto.mk or contact us through it, why we process it and what rights you have. We process personal data in line with the Law on Personal Data Protection (Закон за заштита на личните податоци, Official Gazette of the Republic of North Macedonia no. 42/2020, as amended).

What we collect and why

We collect only what we need for the purposes below. We do not sell your data, and we do not use it for automated decision-making or profiling.

  • Contact form: your name, email address, optionally your phone number and company, and the topic and message you choose. We use them to answer your inquiry and, if you ask, to prepare an offer.
  • Server logs: on every visit, the hosting provider’s web server records technical data such as your IP address, the date and time, the page requested, the referring page and your browser type. These logs keep the site secure and working.
  • Form protection: to prevent spam and abuse, the server temporarily records the IP address of each form submission to limit the number of messages per hour.
  • Analytics, only with your consent: if you accept analytics cookies, Google Analytics 4 collects information about how you use the site, such as pages viewed, device and browser type, and how you arrived. We use it in aggregate to improve the site.

Cookies and similar technologies

We use cookies only for analytics. Google Analytics 4 cookies are set only after you agree in the cookie banner.

We use Google’s Consent Mode with analytics storage denied by default. Until you accept, Google Analytics is not loaded and no analytics cookies are set.

Your choice is saved in your browser’s local storage so the banner does not appear on every page. This record holds only your choice and is not shared with anyone.

You can change your decision at any time through the “Cookie settings” link in the footer. If you withdraw consent, analytics stops; you can also delete cookies already set in your browser settings. The cookies set after consent are:

  • _ga (Google Analytics): distinguishes visitors; default lifetime of 2 years.
  • _ga_<ID> (Google Analytics): keeps the session state; default lifetime of 2 years.

Legal bases

We rely on the following legal bases under the Law on Personal Data Protection:

  • Consent, for analytics cookies. You can withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal.
  • Steps taken at your request before entering into a contract, for inquiries about our services. For other inquiries, our legitimate interest in answering the messages we receive.
  • Legitimate interest, for server logs and form protection: keeping the website and our systems secure.

How long we keep data

We keep data only as long as we need it for the purpose it was collected for:

  • Inquiries: up to 24 months from our last contact, unless a contract follows. If it does, we keep the correspondence for as long as the contract requires and for the periods set by law.
  • Server logs: for a limited period set by the hosting provider, unless they are needed to investigate a specific security incident.
  • Form protection records: only as long as needed to count recent submissions.
  • Analytics data: for the retention period configured in our Google Analytics account.
  • Your cookie choice: in your browser for 3 days, after which the banner asks you again. You can change it sooner through “Cookie settings” or by clearing your browser storage.

Who receives your data

We do not sell personal data or share it for marketing. Data is received only by:

  • our hosting provider, which runs the website and the contact form, stores server logs and delivers form messages to our mailbox, acting on our instructions;
  • Google, for Google Analytics, only if you have given consent;
  • public authorities, when the law requires us to disclose data.

Transfers outside North Macedonia

Google may process analytics data in the United States and other countries. These transfers take place under the transfer rules of the Law on Personal Data Protection and the safeguards in Google’s data processing terms. If you do not consent to analytics, no data is sent to Google.

Your rights

Under the Law on Personal Data Protection you have the right to:

  • be informed about how we process your data;
  • access your data and receive a copy;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict processing;
  • data portability, where processing is based on consent or a contract and is carried out by automated means;
  • object to processing based on our legitimate interest;
  • withdraw consent at any time, for example through “Cookie settings”;
  • not be subject to a decision based solely on automated processing, including profiling.

How to exercise your rights

To exercise a right, write to info@diverto.mk. We may ask you to confirm your identity. We will reply without undue delay and at the latest within one month. For complex or numerous requests, this can be extended by two further months; if so, we will tell you and explain why.

Complaints to the Personal Data Protection Agency

If you believe we process your data in breach of the law, you can lodge a complaint with the Personal Data Protection Agency (Агенција за заштита на личните податоци), the supervisory authority in North Macedonia (azlp.mk). We would welcome the chance to resolve your concern first, but you do not have to contact us before going to the Agency.

How we protect data

We apply technical and organizational measures appropriate to the risk, including:

  • encrypted connections (HTTPS) across the whole site;
  • strict security headers and a content security policy (CSP) that limits which scripts can run;
  • anti-spam checks and rate limiting on the contact form;
  • access to inquiries limited to the people who need it to answer you;
  • no third-party scripts before you give consent.

Links to other websites

The site links to external services such as Google Maps, LinkedIn and X. When you follow such a link, the other site’s privacy policy applies.

Changes to this policy

We may update this policy when the website or the law changes. The date of the latest update is shown at the top, and significant changes will be highlighted on this page.