1. The Zemi.mk web service is owned by Vortechs Media LLC Valandovo, 29th November St. no. 21, 2460 Valandovo, North Macedonia (hereinafter referred to as 'We' or 'Zemi.mk').
2. Scope and Purpose. This policy describes how we and our trusted partners collect, process, share, archive, and protect your personal data, solely for the purpose of providing, delivering, and improving services for domain registration, web hosting, related digital services, and electronic document signing.
3. Policy Changes. This policy may be changed from time to time; changes become effective immediately upon posting on this page. Each user is responsible for periodically checking the version for any changes.
4. Data Sharing. Your personal data is NOT shared with third parties (except with the trusted partners listed in point 19 and with competent state authorities when required by law or regulation).
5. Data stored in our systems
   
   
   • 5.1. Individuals (registrants and users)
     • Username;
     • Full name;
     • Email;
     • Full postal address (street, number, postal code, city/town, municipality, country);
     • Phone number;
     • IP address, browser type and version, screen resolution, time zone;
     • Digital certificate/serial number and time stamps of documents signed via Evrotrust/eIDEasy;
     • Order history, invoices, tickets, and other communications.
     This data is also submitted to MARnet upon .mk domain registration and may be publicly disclosed in the WHOIS database.
   
   
   • 5.2. Legal entities (companies)
     • Username;
     • Short and full company name;
     • Tax number, bank account;
     • Headquarters and address (street, number, postal code, city, country);
     • Contact person information (name, surname, email, phone);
     • IP address, browser/device data;
     • Digital signatures of submitted documents;
     • Order and invoice history.
     This data is also submitted to MARnet upon .mk domain registration.
   
   
   • 5.3. Unregistered visitors
     • IP address, browser type/version, resolution, time zone;
     • Cookies and similar identifiers.
6. Marketing and analytics. Cookie data and aggregated statistics may be used for internal analytics, advertising, and service optimization, also by our partners (Google Analytics, Meta, Hotjar, etc.).
7. Cookies. When visiting, necessary, functional, and analytical cookies are created. Some functions will not be available if cookies are disabled in your browser.
8. Data security. Transmission is carried out via TLS 1.3 with PFS; databases are encrypted at rest, and administrative access is protected with two-factor authentication.
9. Payment data. Zemi.mk does NOT store or process payment card data; transactions are processed by CaSys and the Bank, according to PCI DSS standards.
10. Minors. Persons under the age of 18 are not allowed to use our services without written consent from a parent or guardian.
11. Right to deletion. Send a request to info@zemi.mk and all your data will be deleted within 30 days, unless it must be kept longer by law.
12. Disagreement. If you do not agree with this policy, please immediately leave the service and do not access it again.
13. Legal basis. Processing is carried out on legal bases: contract, legal obligation, legitimate interest, or given consent.
14. Your rights. You have the right to access, rectification, deletion, restriction, portability, objection, and withdrawal of consent. Requests should be sent to dpo@zemi.mk.
15. International transfer. Data is transferred only to the EU/EEA or based on standard contractual clauses.
16. Retention periods. Data is kept for up to 10 years after the expiration of the contract or legal obligation, after which it is destroyed or anonymized.
17. Technical and organizational measures. Servers are in ISO 27001 data centers; access is logged, and backups are kept for 30 days.
18. Electronic signing and e-identification. Zemi.mk enables document signing via Evrotrust and eIDEasy – solutions compliant with Regulation (EU) 910/2014 (eIDAS). We do not store copies of your personal documents; the system receives only hash values and signature certificates used for validation.
19. Trusted partners and subprocessors. (i) MARnet – national .mk domain registry;
    (ii) Evrotrust Technologies AD, Bulgaria;
    (iii) SignWise Services OÜ (eIDEasy), Estonia;
    (iv) CaSys and partner bank;
    (v) ISO 27001 data center of Hetzner Online GmbH, Germany;
    (vi) Google LLC – analytics;
    (vii) Meta Platforms Inc. – marketing;
    (viii) OVH Cloud SAS – data centers/cloud;
    (ix) World Host Group – hosting infrastructure;
    (x) Amazon Web Services (AWS) – cloud infrastructure;
    (xi) Linode LLC – VPS/cloud.
20. System logs. Logs are kept for IP addresses, login attempts, DNS record changes, and activities related to domain and hosting account management.
21. Incident procedure. In the event of a security breach, we will notify you and inform the DPA within 72 hours.
22. Backups and restore. Backups are made every night and kept for 30 days; restoration is done upon written user request.
23. Availability and SLA. We aim for 99.9% monthly availability; downtime for upgrades is announced at least 24 hours in advance.
24. Policy updates. This policy is effective from the date stated above and will be replaced with a new version upon any change.
25. Contact for personal data protection.
    Personal Data Protection Officer (DPO):
    Kostadin Stojchev
    Tel.: +389 70 777 402
    Email: kosta@zemi.mk
    
    Data controller:
    Vortechs Media LLC Valandovo
    29th November St. no. 21, 2460 Valandovo, North Macedonia
    VAT: MK4032012501998
    Contact: info@zemi.mk, tel. +389 34 381 000