Personal Data Protection
Personal Data Protection
Select the Privacy Information below that is important to you, to read in more detail about the processing of your personal data by ALKALOID AD Skopje, as well as the manner of exercising your rights as an entity from which personal data are collected.
If you have any questions regarding our privacy notices or our privacy practices,
please contact our Corporate Data Protection Officer, Vesna Sokolovska, at dpo@alkaloid.com.mk
This privacy notice explains how ALKALOID AD Skopje (hereunder ALKALOID) as controller, processes and protects your personal data in the context of professional cooperation or correspondence if you belong to one of the following categories:
Business partners, clients, or scholarship holders of ALKALOID
Students from dual classes whose educational process includes practical teaching in ALKALOID, on a regular basis
Visitors to ALKALOID’s premises
Hotel guests at the ALKALOID resort in Star Dojran
ALKALOID Shareholders
Persons who consented to the processing of their personal data for direct marketing or other purposes
Respondents, associates, or other persons whose data is processed as part of clinical trials or during the preparation of a drug registration file
Reporters of adverse drug reactions
Retired Alkaloid employees
When processing personal data, ALKALOID fully complies with the principles of the Law on Personal Data Protection, as follows:
Processes personal data lawfully, fairly, and in a transparent manner ("lawfulness, fairness and transparency")
Collects personal data for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes ("purpose limitation")
Personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed ("data minimisation")
Personal data is accurate and, where necessary, kept up to date, taking all appropriate measures to erase or correct inaccurate or incomplete data without delay, having regard to the purposes for which it is processed ("accuracy")
Personal data is stored in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed ("storage limitation")
Personal data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures ("integrity and confidentiality").
ALKALOID is not only responsible to comply with these principles but able to demonstrate that too ("accountability").
For more details about how ALKALOID processes your personal data, please click on the subheading below that corresponds to your data subject category.
What is the legal basis for the processing of your personal data?
The legal basis for the processing of your personal data is a contract you are a party to or action taken on your request before signing a contract.
What is the purpose of the processing of your personal data?
Depending on the context of the cooperation, we may process your personal data for the purposes of planning, execution, management, and administration of a contractual relation with you, e.g., performance of a contract, your request from us to perform services under a contract we would have with you, making payments, or supporting any other purpose necessary to fulfil our contractual commitments.
What categories of personal data do we process?
Name and surname, personal identification number, passport number (for foreign natural persons), postal address, telephone number, email address, bank account number and degree of education.
How long do we keep your personal information? 10 years since the end of the business cooperation with you.
What is the legal basis for processing your personal data?
The legal basis for processing your personal data is the fulfillment of an agreement concluded between your school and ALKALOID, on the basis of which ALKALOID is directly involved in your educational process through the organization and implementation of practical teaching.
What is the purpose of the processing of your personal data?
We process your personal data for the purposes of performing the contractual relationship with your school, i.e. for the purposes of conducting practical teaching organized by ALKALOID, as well as to pay you compensation in accordance with the assumed contractual obligations.
What categories of personal data do we process?
Name and surname, personal identification number, ID card number, postal address, private phone number, private email address, bank account number, date of birth/age, level of education.
How long do we keep your personal information?
10 years since the end of the practical teaching in ALKALOID.
What is the legal basis for the processing of your personal data?
The legal basis for the processing of your personal data is the legitimate interest of ALKALOID established through a test of legitimate interest.
What is the purpose of the processing of your personal data?
We process your personal data to prevent the entry of unauthorised and uninvited persons, to ensure the security throughout ALKALOID’S sites and facilities, the safety of our employees, and the assets and information located and stored on our premises.
What categories of personal data do we process?
Name and surname, ID card number, passport data (for foreign natural persons), vehicle registration plate number, general data for the department you visit, times of entry and exit, company you work for and your signature.
How long do we keep your personal information?
3 years since the visit.
What is the legal basis for the processing of your personal data?
The legal basis for the processing of your personal data is compliance with a legal obligation under the Company Law.
What is the purpose of the processing of your personal data?
We process your personal data so you can exercise your right (for payment of dividends) under the Company Law.
What categories of personal data do we process?
Name and surname, residential address, personal identification number, bank account number, city and country, passport number, tax number in country of domicile, tax number in Republic of North Macedonia.
How long do we keep your personal information?
Lasting value
What is the legal basis for the processing of your personal data?
The legal basis for the processing of your personal data is compliance with a legal obligation under the Law on Catering Activities and the Law on Foreigners.
What is the purpose of the processing of your personal data?
We process your personal data to keep a log of domestic and foreign guests at the accommodation facility of the ALKALOID-owned Star Dojran resort.
What categories of personal data do we process?
On domestic guests: Name and surname, ID card number, home address, place and date of birth.
On foreign guests: Name and surname, ID card number, type and number of travel document, place and country of birth, date and place of birth, and nationality.
How long do we keep your personal information?
3 years of stay at the resort.
What is the legal basis for the processing of your personal data?
The legal basis for the processing of your personal data is the statement of consent to the processing for a specified purpose. You may withdraw your consent at any time. The withdrawal of consent will not impact the data processed before the withdrawal.
What is the purpose of the processing of your personal data?
We process your personal data for direct marketing, commercial research, planning of operations, to respond to your questions concerning our products and services, or for other purposes you have consented to.
What categories of your personal data do we process?
Depending on the context and purpose for collection, we may process the following personal data:
Contact details (name and surname, sex, private telephone number, business telephone number, home address (if necessary), email address, place of work)
Data related to education and profession (level of education, academic and professional qualifications)
Other information you opt to share with us (e.g., date of birth/age, number of children, consumer habits, etc.)
How long do we keep your personal information?
Personal data collected on the basis of your consent is processed for the duration of the purposes for which the consent was given or until the consent is withdrawn. Consent may be withdrawn at any time. Withdrawal of consent will not affect data processed prior to withdrawal of consent.
What is the legal basis for the processing of your personal data?
The legal basis for the processing of your personal data during clinical trials is compliance with legal obligations under the Law on Drugs and Medical Devices, the Guidelines for the Principles of Good Clinical Practice, and the Law on Personal Data Protection related to the processing of special categories of personal data.
What is the purpose of the processing of your personal data?
We process your personal data to keep drug registration files, to comply with the Law on Drugs and Medical Devices and the Guidelines for the Principles of Good Clinical Practice.
What categories of your personal data do we process?
Depending on the category of the data subject (whether a participant in clinical research or medical professional, expert, etc.), we process the following data: name and surname, knowledge of languages, sex, CV/biography/work experience, home address, business phone number, place of birth, date of birth/age, level of education, place of work, physical appearance (weight and height), racial background, health/medical data.
How long do we keep your personal information?
10 years after the date of delisting of the portfolio registration file.
What is the legal basis for the processing of your personal data?
The legal basic for processing your personal data when reporting adverse drug reactions is the compliance with a legal obligation under the Law on Drugs and Medical Devices, the Guidelines on the manner of reporting, the content of the adverse drug reaction reporting form, and the organization of the pharmacovigilance system, as well as in accordance with the provisions of the Law on Personal Data Protection relating to the processing of special categories of personal data.
What is the purpose of processing your personal data?
The personal data we receive in connection with reports of adverse drug reactions is processed exclusively for the purpose of monitoring adverse reactions, ensuring that each reported reaction is properly documented, assessed, and reported in compliance with legal obligations, for the purpose of identifying and preventing adverse reactions or other risks associated with the use of medicinal products.
What categories of your personal data do we process?
Name, surname, phone number, email address, residential address, date of birth, sex, age and occupation of the person filling out the form.
Images/photographs (related to adverse drug reactions), as well as information related to the health and medical history of the subject - the user of the medicine - may also be collected, if necessary for the processing of adverse reaction data, in order to fulfil legally prescribed pharmacovigilance obligations.
How long do we keep your personal data?
At least 10 years after the withdrawal of the medicinal product or medical device from the market, or at least 10 years after the termination of the pharmacovigilance system.
What is the legal basis for processing your personal data?
The legal basis for processing your personal data is your consent and ALKALOID’s legitimate interest, determined on a legitimate interest test.
What is the purpose of processing your personal data?
The purpose is to express ALKALOID’s concern about you, our retired colleagues, recognizing your contribution to the growth of our company by implementing many social responsibility activities.
What categories of your personal data do we process?
Name and surname, residential address, contact telephone number, year of birth, and year of retirement.
How long do we keep your personal data?
We process the personal data collected with your consent for the duration of the purpose for the consent or until the consent is withdrawn. You may withdraw the consent at any time. The withdrawal of consent will not affect the data processed before its withdrawal.
If the consent is not withdrawn or the legal basis is a legitimate interest, we will keep it for ten years.
To achieve the purpose for collecting your personal data, depending on your subject category the access is limited to:
- ALKALOID employees who need to receive the data to achieve the purpose of collection
- Banks, to be able to make a payment
- Competent authorities of the Republic of North Macedonia or other competent EU or non-EU agencies (including regulatory agencies) to whom ALKALOID is obliged to send your personal data to, based on legal requirements, or based on a court order or other official legal requirement.
- Certain companies from the Republic of North Macedonia or the European Union that ALKALOID has engaged to perform auxiliary data processing activities. All these companies are under contractual obligations with ALKALOID to protect the data secrecy, to act according to ALKALOID’s directions, and in compliance with applicable data protection regulations. The company will take care of the confidentiality and the duty to keep a commercial secret. If the company processes your personal data based on your consent, its withdrawal shall apply to the respective companies too.
- Under certain circumstances, when executing regulatory procedures set by laws outside of the Republic of North Macedonia (registration of a drug), our business partners may have access to your personal data within the limits set by law. We may transfer your personal data to an EU or EEA (European Economic Area) member country and outside of the EU if such transfer is necessary for the public interest or in compliance with local regulatory procedures (registration of a drug) of a specific country.
- Legal representatives for the execution of legal proceedings.
ALKALOID guarantees that you will be able to exercise your legal rights concerning the processing of your personal data. At any time, you can ask ALKALOID for the following rights:
Right to access – right to request access to your personal data, i.e., to be informed about the data processed about you and check if it is accurate and up to date.
Right to rectification – if you find out your personal data we process is inaccurate or incomplete, you have the right to request that it is rectified
Right to erasure – right to request that we erase your personal data under certain conditions set by law
Right to restriction of processing – right to request that we restrict the processing of your personal data under certain conditions set by law
Right to data portability – right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another processor without ALKALOID obstructing.
Right to object – right to object for a specific situation if the processing of your personal data is based on legitimate interest or for direct marketing or profiling related to direct marketing under certain conditions set by law, and
Right to withdraw consent – at any time, you have the right to withdraw your consent to the use of your personal data. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal
If you wish to exercise the above rights derived from the Law on Personal Data Protection, please click on the following link, complete the appropriate form and send it to us by email or post at the address listed below.
If you have any questions you can write to us at any time at the following address:
Alkaloid AD Skopje
Blvd. Aleksandar Makedonski no. 12
1000 Skopje
to the attention of the Data Protection Officer
or
to the email address of the Data Protection Officer at: dpo@alkaloid.com.mk
To answer your questions, please provide the following information:
Your reference and interaction with us and description of the request/information you need from us.
If you think Alkaloid has processed your personal data contrary to the Law on Personal Data Protection or that some of your data protection rights have been violated, you may file a request to examine the violation with the Personal Data Protection Agency.
This privacy notice explains the kind of personal data ALKALOID AD Skopje (hereinunder: Controller) collects on you when visiting the official/business premises and how the Controller uses this data.
Why do we collect/process personal data?
The Controller collects data through the video surveillance system for the following reasons/purposes:
To control access to the premises (building, entrance, facilities) and to ensure the security of the premises, the safety of Controller's staff and visitors, as well as property and information located or stored on the premises;
To prevent, deter, and if necessary, investigate unauthorised physical access, including unauthorised access to secure and protected facilities, IT infrastructure, or operational information; and
To prevent, detect and investigate destruction and theft of equipment, assets, and products owned by the Controller, visitors, or staff, or threats to the safety of personnel working at the premises (e.g., injury at work, fire, physical assault).
The video surveillance system is not used for any other purpose, such as to monitor the work of employees or their attendance. The positioning of the video cameras is such that they do not cover the surrounding public space. The cameras are aimed to give a general overview of what is happening in certain places but not to recognize persons.
The system is also not used as an investigative tool or to obtain evidence in internal investigations or disciplinary procedures unless a security incident is involved, which the video surveillance is installed for, under the Law on Data Protection. (In exceptional circumstances, we may transfer the data to investigatory bodies in the framework of a formal disciplinary or criminal investigation).
The video surveillance cameras are installed at all sites/premises owned by the Controller and are placed and so focused that they film only people who access the official/business premises/facilities, including property.
The video surveillance system covers the following area:
Perimeter fence around the Company’s site (property)
Entrances at the perimeter fence,
Secured entrances to sites,
Entrances to premises,
Internal roads,
Internal parking lots,
Facilities in premises for production or storage of specific products, including narcotic products,
Facilities in premises where information technology, telecommunications, or other power equipment is installed,
Facilities in premises for archiving/storage of documents,
Facilities in premises for storage of particularly valuable spare parts and equipment,
What kind of data does the Controller collect?
The Controller collects just images caught on camera and does not record voice.
Who is responsible for the data processing?
The Controller is an entity that processes personal data and determines the objectives of this processing operation, solely in compliance with the Law on Personal Data Protection. Moreover, the Head of General Services Kjire Kocev is the contact person and responsible person for this operation.
What is the legal basis for this processing of personal data through the video surveillance system?
The Controller uses video-surveillance equipment for (list one or more of the listed purposes):
Protection of the life and health of people;
Protection of property;
Protection of the life and health of employees due to the nature of operation; or
Entry and exit control to/from official or business premises.
Therefore, the processing is lawful under Article 90 of the Law on Personal Data Protection.
In addition, at the entrance of ALKALOID AD Skopje, there is a visible and clearly posted notice about the video surveillance that allows data subjects to learn about the video surveillance, the name of the Controller performing video surveillance, and how they can obtain information about where and for how long the recordings of the video surveillance system are stored.
Who can see my personal data?
Only a person authorised for video surveillance can access the recordings (such as Controller’s employees in the security and IT&T departments). Access to the digital device or hard disc recorder is limited and protected by technical data security measures (a password and recording of any log or action from the staff members or authorised persons). The data, i.e., video recordings, cannot be accessed without the authorisation of the CEO of ALKALOID AD Skopje.
How to control your data?
You can send a request by email to dpo@alkaloid.com.mk or by post to the following address: Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje, to the attention of the Personal Data Protection Officer.
Can I access my data?
You have the right to access your data at any time and free of charge by sending a request by post to: Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje, to the attention of the Personal Data Protection Officer or by email to: dpo@alkaloid.com.mk.
Can I modify my data?
Modifying the video surveillance footage is not allowed.
Can I request restriction to the processing of my data?
You have the right to restrict the processing of your data at any time by sending a request by post to: Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje, to the attention of the Personal Data Protection Officer or by email to: dpo@alkaloid.com.mк, when you contest the accuracy of your personal data or when the Controller no longer needs the data for completing its tasks. You can also block the processing activity when the operation is unlawful, and you oppose the erasure of the data. However, blocking is not possible in case of an official investigation.
Can I delete my data?
You have the right to delete your data at any time by sending a request by post to: Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje, to the attention of the Personal Data Protection Officer or by email to: dpo@alkaloid.com.mk, when the processing activity is unlawful.
Do you share my personal data with other persons?
We keep your data inside the Controller unless you ask us or give us your permission to share it. If we share your data with third parties, you will be notified to whom your personal data has been disclosed, for what purpose, and on what legal grounds.
Do I have the right to object?
Yes, you have the right to object at any time by sending a request by post to Alkaloid AD Skopje, Blvd. Aleksandar Makedonski 12, 1000 Skopje to the attention of the Personal Data Protection Officer or by email to: dpo@alkaloid.com.mk, when you have legitimate reasons relating to your particular situation. The Controller will address your requests within 15 days from the receipt of the request.
What can I do in the event of a problem?
a) The first step is to notify the Controller by sending an email to kicev@alkaloid.com.mk and ask us to take action.
The second step is, if you obtain no reply from us or if you are not satisfied with it, to contact our data protection officer at dpo@alkaloid.com.mk.
At any time, you can file a complaint with the Personal Data Protection Agency at www.azlp.mk, which will process your request and adopt the necessary measures.
When will you start the processing of my personal data through the video surveillance system?
The processing operation starts when you visit the Controller sites, premises, and facilities.
Security of personal data
The Controller is committed to protecting the security of your personal data. Therefore, we use security technologies and procedures to protect your personal data from unauthorised access, use or disclosure. We keep your data on computer systems that are limited access and just in a controlled environment.
How long do we keep your data?
The Controller will keep your personal data for up to 30 (thirty) calendar days after visiting our premises. After that period, any video surveillance recorded footage is automatically deleted.
This notice is to inform the data subjects of the manner and procedure in which they can exercise their rights concerning their personal data processed by ALKALOID AD Skopje (hereinunder: ALKALOID) under the Law on Personal Data Protection.
As data subjects whose data ALKALOID has processed, you have the right to be fully informed about the following:
The identity of the Controller (ALKALOID) and its contact details
The contact details of the Data Protection Officer
The purposes and legal basis for the processing
Alkaloid's legitimate interest (if data is processed under this legal basis)
Categories of data subjects and personal data processed
Recipients data are disclosed to
Retention period
Whether the personal data is transferred to any third countries
This information on the rights of data subjects is published on Alkaloid’s website and can be obtained at its official and business premises or delivered to you directly in hard or electronic copy.
| А. RIGHTS OF DATA SUBJECTS |
As data subjects whose data ALKALOID has processed, you have the right to request to exercise your legal rights as follows:
Right of access
On your request, Alkaloid shall inform you what data it collects on you, the purposes of the processing, the retention period, and whether it has disclosed it to third parties.
Right to rectification
On your request, Alkaloid shall rectify and complete your personal data if the data is incomplete, inaccurate, or outdated and the processing is not in compliance with the Law on Personal Data Protection.
Right to erasure
On your request, Alkaloid shall erase your personal data if the purpose it was processed for has been achieved, if you have withdrawn your consent for processing, if the data was processed unlawfully, if you object to processing, or for compliance with Alkaloid’s legal obligations to erase the data when the legal basis for processing no longer exists.
Right to restrict processing of personal data
On your request, Alkaloid shall restrict the processing of your personal data if you contest its accuracy until it verifies its accuracy, if you think the data has been unlawfully processed, but you oppose erasure, or if you need the data to exercise a legal claim.
Right to data portability
On your request, Alkaloid will transfer your personal data in a structured, commonly used, and machine-readable format or will transmit it to another company. This right applies when personal data is processed based on consent or contract and by automated means.
Right to object
You have the right to object in a specific circumstance related to you if your personal data processing is based on legitimate interest, if your personal data is processed for direct marketing and profiling related to direct marketing, or for scientific or historical research, or statistical purposes.
Right to withdraw consent
You may withdraw the consent for the processing of your personal data at any time. File the consent withdrawal request with Alkaloid, following the procedure described below.
Right not to be subjected to automated individual decision making including profiling
You have the right not to be subjected to automated decision-making, including profiling that has a legal or similarly significant effect on you.
| B. PROCEDURE TO EXERCISE YOUR RIGHTS |
How to file a request
To exercise your rights under Section A of this Information Notice, you may file a request. You can find the request forms to exercise each right on Alkaloid’s website. You can file a request in several ways:
а) In hard copy, by completing a request form and submitting it in person or by post in an envelope marked “Request for ______ (write the appropriate title of the request), addressed to ALKALOID AD Skopje’s archive at Blvd. Aleksandar Makedonski 12, 1000 Skopje, Republic of North Macedonia, to the attention of the Data Protection Officer.
b) Electronically, by sending a completed request form by email to the Data Protection Officer at dpo@alkaloid.com.mk.
c) By calling the Data Protection Officer by telephone at: +389 2 3104 000
The request should be legible, properly completed, and signed. Each request form contains completion instructions.
The request sent to Alkaloid must contain the following data:
Your identification - full name and surname
Your contact details: address, telephone, and email address
Explanation and basis for the request
If noted on the request form, proof of your identification.
Processing requests
The person responsible for the processing of your request is the Data Protection Officer. Upon receipt, the request is registered in the Request Registry, and the processing begins. If the Data Protection Officer has reasonable doubt concerning your identity as the one filing the request, he/she may require further information to confirm it. If your identity is confirmed, the request will be assessed for admissibility. If it is impossible to establish your identity even after you have submitted additional information, the request will be rejected, and the reasons explained.
The Data Protection Officer may ask for additional documents or information for you to exercise your right. We will send you a notification in hard copy or electronically to inform you about your request. We will notify you about the activities we have taken and the conclusion we have drawn and advise you on the further steps. If we reject your request, we will provide the reasons why you are unable to exercise your right, the conclusion we have drawn, and advise you on the further steps.
We will send you the notification in hard copy, or where possible electronically unless you request otherwise.
Processing periods
Alkaloid shall inform you about the activities taken without undue delay and, in any case, within the deadline prescribed by law - within one month or no later than three months for complex requests. Alkaloid shall inform you about any delay within one month from the day of receipt of the request and will provide the reasons for the delay.
Should Alkaloid fail to take action upon your request within one month from the day of receipt of the request, it must inform you about the reasons for failing to act and about the possibility to file a request with the Data Protection Agency and of the option to take judicial action.
The deadline for processing a request for rectification of your personal data is 15 days.
The deadline for processing a request for the erasure of your personal data is 30 days.
Payment of fees
Under the Law on Personal Data Protection, the information demanded in your request shall be provided free of charge. In exceptional circumstances, if Alkaloid deems your request to be evidently unfounded or excessive, especially if repetitive, it may charge a fee. You will be informed about it, considering the volume, complexity, and time necessary to provide the information or communication or process the request.
If you do not agree to pay the requested fee necessary to take the appropriate actions, Alkaloid may reject your request.
Closure of requests
When Alkaloid delivers the necessary notification to you, the request shall be considered closed.
Should you have further questions or requests concerning Alkaloid’s processing of your personal data in the capacity of controller, you should address them to the Data Protection Officer by telephone at +38923104000 or by email at dpo@alkaloid.com.mk.
Alkaloid Ad Skopje (hereinafter (ALKALOID) respects your privacy and pays significant attention to protect your personal data, in compliance with the legal standards set within the data protection legislation of the Republic of North Macedonia and the company by laws.
This privacy notice aims to provide more detail about the processing of your personal data if you apply for employment or internship in ALKALOID AD Skopje or its capitally affiliated companies in the Republic of North Macedonia.
If you are applying for employment in ALKALOID, based on a published announcement for specific job position, or you want to join the pool of candidates for evaluation and selection for employment, create a profile at the following link: https://career.alkaloid.com.mk. Fill out the online application and attach your letter of motivation, copies of certificates and diplomas, and all other documents you think may be relevant.
If you are applying for your personal data to be stored and processed in ALKALOID's database of candidates for internship, and in order to participate in the process of evaluation and selection of candidates for internship and selection of interns, create a profile at the following link https://career.alkaloid.com.mk.
Fill out the online application and attach the required documents.
We respect your privacy and collect, process and store personal data legally, transparently and fairly, in accordance with legal regulations and the legal basis set forth therein.
When you are applying for employment based on a published announcement for specific job position, the legal basis for processing of your personal data is the Law on labor relations.
When applying to have your personal data stored and processed in the employment and internship candidate database, the legal ground for your personal data processing is the consent you have given at the moment of application.
Your personal data can be processed for the following purposes:
Evaluation and selection of candidates based on a published announcement in order to assess your qualifications suitability for the job position you are applying for;
Communication with you, related to the interviewing process and selection of candidates for filling vacancies or internships;
Evaluation and selection of candidates when opening future job positions in ALKALOID or in its subsidiaries;
Keeping records related to the processes of evaluation and selection of candidates for employment or internship.
When you apply for employment or internship, ALKALOID may process:
Data you enter yourself when filling out the online application
Depending on whether you apply for employment or internship, ALKALOID may process the following categories of personal data:
Your identification data- name and surname, gender, place and date of birth, citizenship,
Contact information - home address, phone number and email address;
Information on education and other qualifications– degree and type of completed education, knowledge of languages, work experience, in-service training, profession, copy of diplomas and other certificates, etc.
Other information - other information you choose to share with us in your CV that you are submitting when applying for employment or internship.
If you are applying for employment in ALKALOID based on a published announcement for specific job position, we store your data in accordance with the deadlines prescribed by law i.e. if you are not selected for the specific announcement, your data is deleted within 5 working days from the day of concluding an employment contract with the selected candidate.
If you are applying for your personal data to be stored and processed in the database of candidates for employment or internship, we store your personal data in accordance with the deadlines prescribed by the internal acts of ALKALOID, where the deadlines for storing the data prescribed by internal acts are determined by the duration of the purpose for which the data was collected or processed. In doing so, we keep your data as candidates for employment or internship for three (3) years from the date you applied, or shorter, if you have informed us that you are withdraw the consent for processing your data, after which we immediately delete your data from the base of candidates for employment or internship.
Please ensure that your data is constantly updated so that we can have relevant information that is important to both you and us in the evaluation and selection process. After 3 years from the date of application, we will contact you again in order to get information whether you want us to continue to store and process your personal data or to delete them. If we do not receive feedback from you or if you do not consent to further storage and processing of the data, we will delete it.
In order to achieve the purpose for which the personal data is provided, access to your personal data is limited to:
Employees in ALKALOID, who according to their work tasks have a real need to access that data in order to achieve the purpose for which they are processed
Legal representatives for the purpose of conducting legal proceedings
We take all technical, organizational and procedural measures to ensure the highest level of confidentiality and protection of the processing of your personal data, in order to prevent unauthorized access, unauthorized disclosure or their possible misuse. These protective measures include implementation of specific technologies and procedures designed to protect your privacy.
We inform you that you have the right of access, correction, deletion, restriction of processing, portability of your personal data and the right of objection.
At the same time, you have the right at any time to withdraw the statement of consent for the processing of your personal data in the database of candidates for employment or internship.
By withdrawing the consent, your personal data will be immediately deleted from the database of candidates for employment or internship.
Please note that the withdrawal of the consent does not affect the legality of the processing, based on the consent given before its withdrawal. These rights arise from the Law on Personal Data Protection.
If you want to exercise the above rights arising from the Law on Personal Data Protection, please access the following
link, fill out the appropriate form and send it to us via the email or mailing address listed below.
In any case, in order to exercise your rights, as well as for questions related to the processing of your personal data, you can send a request to:
Email address of the data protection officer of ALKALOID AD Skopje, dpo@alkaloid.com.mk
Telephone number of the data protection officer: +389 2 3104 000 or
Mailing address Blvd. Aleksandar Makedonski 12, 1000 Skopje, Republic of North Macedonia – data protection officer.
If you consider that the processing of your personal data violates the provisions of the Law on Personal Data Protection, you have the right to submit a request to the Agency for Personal Data Protection as a competent body to supervise the legality of the activities undertaken in the processing of personal data on the territory of the Republic of North Macedonia.
PERSONAL DATA PROTECTION IN ALKALOID KONS
Please select the privacy information that is important to you to read in more detail about the processing of your personal data by ALKALOID KONS DOOEL Skopje and how to exercise your rights as a personal data subject. If you have any questions regarding our privacy notices or practices, please contact our Personal Data Protection Officer at dpokons@alkaloid.com.mk.
This Privacy Notice details how ALKALOID KONS DOOEL Skopje (hereinafter referred to as "ALKALOID KONS"), as the Controller, processes and safeguards your personal data in the context of business cooperation or communication if you belong to the following categories of entities:
· Associates of ALKALOID KONS
· Medical professionals who have given their consent to the processing of their personal data for direct marketing or other purposes
· Reporters of adverse drug reactions.
When processing personal data, ALKALOID KONS fully adheres to the principles prescribed in the Law on Personal Data Protection, including:
· Processing personal data lawfully, fairly, and transparently (“lawfulness, fairness, and transparency").
· Collecting personal data for specific, explicit, and legitimate purposes and not processing them in a manner incompatible with those purposes ("purpose limitation").
· Ensuring that personal data is adequate, relevant, and limited to what is necessary for the purposes for which it is processed ("data minimization").
· Ensuring that personal data is accurate and, where necessary, updated by taking appropriate measures to promptly correct or erase incorrect or incomplete data, considering the purposes for which it is processed ("accuracy").
· Storing personal data in a form that allows for identifying the data subjects for no longer than necessary for the purposes for which it is processed ("storage limitation").
· Processing personal data to ensure an appropriate level of security, including protection against unauthorized or unlawful processing, as well as accidental loss, destruction, or damage, by applying appropriate technical and organizational measures ("integrity and confidentiality").
· ALKALOID KONS is not only obligated to comply with these principles but also to demonstrate that compliance. ("accountability").
To learn more about how ALKALOID KONS processes your personal data, please select the appropriate subheading based on your category as a personal data subject.
What is the legal basis for processing your personal data?
The processing of your personal data is based on fulfilling a contract in which you appear as a contracting party or undertaking activities at your request before entering into a contract.
What is the purpose of processing your personal data?
Depending on the context of our cooperation, we may process your personal data for planning, executing, managing, and administering the contractual relationship with you. For instance, we may use your personal data to fulfil a contract, request your service in accordance with the agreement we have with you, make payments, or provide support for any other purpose necessary for the performance of our contractual obligations.
What categories of personal data do we process for you?
We process your name, surname, personal identification number, passport number (if you are a foreign national), postal address, telephone number, email address, and current account number.
How long do we keep your personal data?
Ten years from the end of our business cooperation with you.
What is the legal basis for processing your personal data?
We process your personal data based on your statement of consent for processing for a specific purpose. You have the right to withdraw your consent at any time, and this withdrawal will not affect any data processed prior to the withdrawal.
For what purpose do we process your personal data?
We process your personal data for the purposes of direct marketing, commercial research, work planning, answering your questions related to our products and services, or for any other purposes for which you have given your consent.
What categories of personal data do we process for you?
Depending on the context and purposes for which personal data is collected, we may process the following personal data:
Contact details such as your name, surname, gender, private and official phone numbers, private and official email addresses, and your place of work.
Data on your education and profession, such as your level of education, academic and professional qualifications.
How long do we keep your personal data?
The personal data we collect based on your consent will be processed for the duration of the purposes for which the consent was given or until you withdraw your consent. You have the right to withdraw your consent at any time, and this withdrawal will not affect any personal data processed prior to the withdrawal.
What is the legal basis for processing your personal data?
The processing of your personal data when you report adverse drug reactions, is based on fulfilling a legal obligation according to the Law on Medicines and Medical Devices, the Rulebook on the method of reporting, the content of the form for reporting adverse drug reactions and the way of organization of the system of pharmacovigilance. The processing is also carried out in accordance with the provisions of the Law on Personal Data Protection related to the processing of special categories of personal data.
For what purpose do we process your personal data?
We process your personal data that we receive in connection with reports of adverse drug reactions solely to monitor adverse reactions. It allows us to properly document, evaluate, and report each adverse reaction under legal obligations. By doing so, we aim to identify and prevent adverse reactions or other risks associated with using medicines.
What categories of personal data do we process for you?
The personal data we process include the name, surname, telephone number, email address, country of residence, date of birth, gender, age, and profession of the reporting subject.
In some cases, we may also collect images/photographs related to adverse drug reactions, as well as information related to the health and medical history of the subject - the drug user - if this is necessary to fulfil legal requirements and obligations for pharmacovigilance.
How long do we keep your personal data?
At least 10 years after the withdrawal of the drug or medical device from the market.
Access to your personal data is limited to the following entities or categories of users, depending on your category and to achieve the purpose for which the personal data was provided:
ALKALOID KONS employees who need to access the data to achieve the intended purpose;
Banking institutions to facilitate payment processing;
Competent state authorities in the Republic of North Macedonia to which ALKALOID KONS is required to submit your personal data based on a legal obligation arising from applicable regulations or in response to a court or other official request based on the law;
The manufacturers with whom ALKALOID KONS has concluded agreements nd whose products it distributes;
ALKALOID AD Skopje, which ALKALOID KONS engages to perform data processing activities, and other companies acting as processors. Each such company is contractually obliged by ALKALOID KONS to protect the confidentiality of the data and act according to the instructions of ALKALOID KONS, and following applicable personal data protection legislation. Processors are bound by confidentiality and the obligation to maintain trade secrets;
Legal representatives to conduct legal proceedings.
ALKALOID KONS ensures that all your legal rights regarding the processing of your personal data are respected. You have the following rights that you can exercise at any time by contacting ALKALOID CONS:
Right of access – the right to request access to your personal data, receive information about the data being processed, and check its accuracy and completeness;
Right to rectification – the right to request the correction of any inaccurate or incomplete personal data;
Right to erasure – the right to request the erasure of your personal data under certain circumstances prescribed by law;
Right to restriction of processing – the right to request the limitation of processing under certain circumstances prescribed by law;
Right to data portability – the right to receive your personal data in a structured, commonly used, and machine-readable format and transfer it to another data controller without obstructions by ALKALOID KONS;
Right to object – the right to object based on a specific situation if your personal data is being processed for purposes of legitimate interest or direct marketing, including profiling related to direct marketing, under certain conditions prescribed by law; and Right to withdraw consent – the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the legality of the processing that was based on your consent before its withdrawal.
To exercise your rights, under the Law on Personal data Protection please fill out the appropriate form at the following link and send it to ALKALOID KONS via email or the postal address below.
If you have any additional questions, you may contact us at the following address:
ALKALOID KONS DOOEL
Blvd. "Aleksandar Makedonski" no. 12
1000 Skopje
Attn: Personal Data Protection Officer
Alternatively, you may email the Personal Data Protection Officer at dpokons@alkaloid.com.mk.
To assist us in providing an appropriate response, please include the following information:
Your relationship and interaction with us, and Description of the request/information you would like to receive from us.
If you believe that the processing of your personal data by ALKALOID KONS does not comply with the provisions of the Law on Personal Data Protection, or if you believe that any of your rights to the protection of personal data have been violated, you have the right to file a complaint for determination of the violation of the regulations for the protection of personal data through the Personal Data Protection Agency.