Privacy Policy

Who we are

The controller of the personal data described here is NX Partners DOOEL Skopje, a company registered in the Republic of North Macedonia with its office in Skopje.

You can reach us about anything in this policy at office@nxp.mk or on +389 71 395 109. We have not appointed a Data Protection Officer, as we are not required to; enquiries are handled by the office of the Managing Director.

This policy is written to satisfy the Law on Personal Data Protection of the Republic of North Macedonia and, where our processing falls within its scope, the EU General Data Protection Regulation, which the Macedonian law mirrors.

What this policy covers

This policy covers nxp.mk and the ordinary ways of reaching us: the contact form, the two assistants on this site (“Brief us” and “Ask NXP”), e-mail, telephone, and messages sent through our LinkedIn profiles.

It does not cover the confidential handling of client engagement material, which is governed by the engagement letter and the confidentiality undertakings agreed with each client. Nor does it cover other organisations’ websites that we link to, including LinkedIn, which publish their own policies.

The site has no user accounts, no registration and no online payments.

The information we process

Technical data from your visit. Like any web server, the one that serves this site records the request: your IP address, the page requested, the time, the referring page, and your browser and operating system. This data exists to serve the page, to keep the site available and to detect abuse.

What you send through the contact form: your name, company, role, e-mail address, telephone number if you give it, the area of interest and markets you select, your message and your consent. The form is delivered to us by e-mail through a form-delivery service (Web3Forms) on the network of our hosting provider (Cloudflare, Inc.).

What you type into an assistant. When you press the button in “Brief us” or “Ask NXP”, the text you wrote (and, in “Ask NXP”, the last few turns of the same conversation) is sent to an external AI service provider (data processed in the USA) to generate the answer. Nothing you type is stored on this site, and the answer is not used to identify you. Please do not enter confidential information or personal data about other people.

What you send us directly. If you write or call, we hold what you chose to tell us — your name, your e-mail address or telephone number, the organisation you represent, and the content of your message — together with our reply.

This site sets no cookies, uses no analytics and stores nothing in your browser. The Cookie Policy sets out the detail.

We do not collect special categories of data, such as health, political opinions or religious beliefs, through this website, and we ask that you do not send them to us through the form or by e-mail.

Why we process it, and on what legal basis

• To deliver and secure the website. Legal basis: our legitimate interest in operating a functioning, secure site (Art. 6(1)(f) GDPR).
• To answer enquiries sent through the form, by e-mail or by telephone, and to discuss a possible engagement. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b)), or our legitimate interest in responding to professional correspondence (Art. 6(1)(f)).
• To generate the answer you ask an assistant for. Legal basis: your request, and our legitimate interest in answering it (Art. 6(1)(f)).
• To meet accounting, tax and other statutory obligations once an engagement exists. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).

We do not use your data for direct marketing, we operate no mailing list, and we will not add you to one because you wrote to us.

Cookies and analytics

This site sets no cookies and loads no analytics or advertising tags. Typefaces and videos are served from our own site, not from third-party platforms.

The Cookie Policy explains this in detail, including what changed from the previous version of this site.

Who we share information with

We do not sell personal data, and we do not disclose it for anyone else’s marketing.

A small number of service providers process data on our instructions, under contract, and only for the purpose we engaged them for:

• our hosting provider, Cloudflare, Inc., which serves this site and protects it against abuse;
• Web3Forms, the form-delivery service that passes what you send through the contact form to us by e-mail;
• an external AI service provider, which generates the assistants’ answers from the text you submit;
• our e-mail provider, which carries correspondence with us.

Beyond that, we disclose personal data only where we are legally obliged to — to a court, a regulator or another competent authority acting within its powers — or where it is necessary to establish, exercise or defend a legal claim.

Transfers outside North Macedonia and the EEA

Our hosting provider operates a global network, and the AI service provider processes data in the United States. Other providers may also process data outside North Macedonia and the European Economic Area.

Where data leaves the EEA or North Macedonia, the transfer is covered by the European Commission’s Standard Contractual Clauses together with the supplementary measures the provider publishes, and by the EU–US Data Privacy Framework where the recipient is certified under it. You may ask us which safeguards apply in a given case.

How long we keep information

• Technical data: kept by our hosting provider for the short periods its service requires, then deleted or aggregated.
• Text typed into an assistant: not stored on this site. The AI service provider processes it to produce the answer and may retain it for a limited period under its own terms, for security and abuse monitoring.
• Form messages and correspondence: for as long as the conversation is live and for up to three years afterwards, so that a professional relationship can be picked up where it left off. Longer where an engagement exists and accounting or limitation-period rules require it.

When a retention period ends, the data is deleted or irreversibly anonymised.

How we protect information

The site is served exclusively over encrypted connections (HTTPS/TLS). Access to our hosting account, to the form-delivery service and to our mailboxes is limited to the people who need it, protected by strong authentication and reviewed periodically.

No system is beyond risk, and we would rather say so plainly than imply otherwise. If a breach occurs that is likely to result in a risk to your rights, we will notify the supervisory authority and, where the risk is high, you, within the periods the law requires.

Your rights

You may ask us at any time to:

• confirm whether we process data about you, and give you a copy of it;
• correct anything inaccurate or incomplete;
• erase data we no longer have grounds to keep;
• restrict processing while a dispute about it is resolved;
• provide the data you gave us in a portable, machine-readable form;
• stop processing based on our legitimate interests, where your situation gives you grounds to object;
• withdraw any consent you have given, at any time and without giving a reason.

Withdrawing consent does not make the processing carried out beforehand unlawful. Write to office@nxp.mk and we will respond within 30 days; if a request is unusually complex we will tell you why more time is needed. There is no charge, unless a request is manifestly unfounded or excessive.

How to complain

If you believe we have handled your data wrongly, tell us first — most issues are resolved faster that way.

You also have the right to complain to a supervisory authority. In North Macedonia this is the Agency for Personal Data Protection (Агенција за заштита на личните податоци), Skopje, at www.azlp.mk. If you are in the EEA, you may instead complain to the supervisory authority of the country where you live or work, or where you believe the problem arose.

Automated decisions, profiling and children

We take no decisions about you by automated means, and we do not profile visitors. The assistants give informative answers only; nothing on this site scores, ranks or segments you.

This website addresses companies, institutions and professionals. It is not directed at children and we do not knowingly collect data about them. If you believe a child has sent us personal data, write to us and we will delete it.

Changes to this policy, and how to contact us

We update this policy when what we do changes. Material changes are reflected in the date at the top.

For anything in this policy — a request, a correction, a complaint or a question — write to us:

• NX Partners DOOEL Skopje, Skopje, North Macedonia
• office@nxp.mk
• +389 71 395 109