Last updated: 23 October 2026

This policy explains what personal data we collect through the ghi.mk website, why we collect it, how long we keep it and what rights you have. We process personal data in accordance with the Law on Personal Data Protection of the Republic of North Macedonia (Official Gazette No. 42/2020).

1. Data controller

GEOHIDROINZENERING DOO Skopje (hereinafter “GHI”, “we”)
1606 Street No. 8, 1000 Skopje – Gjorče Petrov, Republic of North Macedonia
Email: ghi@ghi.com.mk
Telephone: +389 2 2448 832

For any questions about personal data protection, including contacting our Data Protection Officer, please email ghi@ghi.com.mk.

2. What data we collect and why

2.1 Contact form

Data: first and last name, email, telephone, subject and content of the message.
Purpose: to reply to your enquiry or request for a quotation.
Legal basis: taking steps at your request prior to entering into a contract, and our legitimate interest in replying to enquiries.

2.2 Job applications (“Careers” page)

Data: first and last name, email, telephone, the position you are applying for, your CV and the data it contains, and your message.
Purpose: reviewing applications and selecting candidates.
Legal basis: your consent, given by ticking the box in the form, and taking steps prior to a possible employment contract.

2.3 Direct communication

When you email or telephone us, we process the data you provide for the same purpose and on the same legal basis as in section 2.1.

2.4 Technical data when you visit the site

On every visit, the web server and the Cloudflare security service automatically process technical data: IP address, browser and device type, and time of access. We use it to keep the site secure, to protect it against spam and abuse (including the Cloudflare Turnstile check in our forms) and to make it work properly.
We keep aggregate visitor statistics with the WP Statistics plugin, without cookies and without identifying visitors.
Legal basis: our legitimate interest in the secure and stable operation of the website.

3. Cookies

The site uses essential cookies for security, for remembering your language and for remembering your cookie choice. Google Maps on the “Contact” page is loaded only if you give consent through the cookie banner. More information is available in our Cookie Policy. You can change your choice at any time using the “Cookies” button at the bottom of the page.

4. Who has access to your data

We do not sell your data or share it for marketing. Only GHI employees who need it for their work have access to it, together with the following processors that provide technical services to us:

  • Hosting provider (DDHost), where the website is hosted;
  • Cloudflare, Inc.: website security and delivery;
  • Google: Google Maps (only with your consent) and Google Fonts (fonts loaded from Google’s servers).

We may also disclose data to competent public authorities where required by law.

5. Transfers abroad

Cloudflare and Google may process data outside the Republic of North Macedonia, including in the United States. Such transfers are based on appropriate safeguards, such as standard contractual clauses or the EU–US Data Privacy Framework.

6. How long we keep data

  • Contact form messages and emails: up to 2 years after the last communication. If an enquiry leads to a contract, the data is kept for the periods required by law for business records.
  • Job applications: up to 1 year after receipt, or less if you withdraw your consent.
  • Technical data: a short period, according to the settings of the hosting provider and Cloudflare.

7. Your rights

You have the right:

  • to request access to your data and a copy of it;
  • to request correction of inaccurate data;
  • to request erasure of your data;
  • to request restriction of processing;
  • to data portability;
  • to object to processing based on legitimate interest;
  • to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

Please send requests to ghi@ghi.com.mk. We will reply within one month at the latest.

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Personal Data Protection Agency (azlp.mk).

8. Security

We apply technical and organisational measures to protect data: an encrypted connection (HTTPS), protection through Cloudflare, restricted access to data and regular system updates.

9. Changes to this policy

We may update this policy. The current version is always published on this page, with the date of the last update at the top.