Ss. Cyril and Methodius University in Skopje (hereinafter: the “University”), as the controller of personal data, processes personal data in accordance with the Law on Personal Data Protection, the Law on Higher Education and other applicable regulations.
- Controller and Categories of Personal Data
Within the scope of its activities, and for the purpose of performing its core activities in the fields of education and science, the University may process personal data necessary for the exercise of its statutory powers and activities, including identification and contact data, data related to education and studies, employment, scientific and teaching activities, as well as other data whose processing is prescribed by law or is necessary for a specific processing purpose.
- Purposes and Legal Basis for Processing
Personal data are processed for specific, explicit and lawful purposes and to the extent necessary to achieve those purposes.
In accordance with the provisions of the Law on Higher Education, the University processes personal data and maintains records containing personal data of students, including records of applicants for enrolment and enrolled students; a personal student record maintained for each student from the commencement of studies until completion of studies or withdrawal from studies; examination records documenting the examination application, the course of the examination and the grade obtained; and records of documents issued upon completion of studies.
The records contain personal data prescribed by the Law on Higher Education, while the keeping, use and storage of personal data contained in these records, as well as the documentation on the basis of which the personal data were collected, are carried out in accordance with the law.
- Recipients or Categories of Recipients
Personal data may be made available to authorised persons within UKIM and its units, as well as to other natural or legal persons and competent authorities, where disclosure is prescribed by law or is necessary for the fulfilment of a specific legal or contractual obligation.
- Retention Period
Personal data are retained for the period prescribed by law, a by-law, rules governing archival and office operations, or other applicable regulations, or for the period necessary to fulfil the purpose for which they are processed.
- Transfer of Personal Data
Where applicable, personal data may be transferred to a third country or an international organisation only where the conditions prescribed by the Law on Personal Data Protection are met.
- Rights of Data Subjects
Data subjects have the rights provided for by the Law on Personal Data Protection, including the right to be informed, the right of access to personal data, the right to rectification, erasure, restriction of processing, data portability and the right to object, where the statutory conditions are met.
Data subjects also have the right not to be subject to a decision based solely on automated processing, including profiling, in the cases provided for by law.
Form for Requesting Access to / Rectification or Erasure of Personal Data
- Security of Personal Data
UKIM applies appropriate technical and organisational measures to ensure an appropriate level of security of personal data, taking into account the nature and risks associated with the processing.
- Right to Lodge a Request with the Agency for Personal Data Protection
If a data subject considers that the processing of their personal data is not in compliance with the Law on Personal Data Protection, they have the right to lodge a request with the Agency for Personal Data Protection, as the competent supervisory authority.
For questions related to the processing and protection of personal data and for the exercise of data subjects’ rights, data subjects may contact the following e-mail–address n.p.kostovska@ukim.edu.mk
Blvd. "Goce Delchev" no. 9, 1000 Skopje, Republic of North Macedonia
ukim@ukim.edu.mk
3293-293
