Privacy Policy

1. Controller and processor roles

Ideologix Media DOOEL, Dimitar Vlahov St. 17, Kichevo, EMBS 7195389 is the controller for website visitors, enquiries, commercial contacts, account administration, billing, security and our own service operations. Contact us at [email protected].

For personal data that a business customer enters into Smetko about its employees, customers, suppliers or other people, that customer is normally the controller and Smetko is its processor. We process that Customer Data under the customer’s instructions, these services and any applicable data-processing agreement.

2. Data categories and sources

We collect data you provide directly, such as names, contact details, company and billing details, account credentials, messages, bookings, quote requests and support communications. Our forms use Cloudflare Turnstile, which may collect device, browser, IP and interaction signals to prevent spam.

When you use the website or service, we and our providers may receive technical and usage data, including IP address, approximate location derived from IP, browser and device characteristics, pages or features used, timestamps, logs, cookies and security events. Customer Data comes from the customer and its authorised users, integrations or persons they choose to add.

3. Purposes and legal bases

We process data to provide and administer the website and service, authenticate users, answer requests, provide support, prepare quotes, manage subscriptions and manual payments, secure and improve the service, meet legal obligations and establish, exercise or defend legal claims.

Our legal bases are performance of a contract or steps at your request before a contract, compliance with legal obligations, our legitimate interests in running, protecting and improving the service, and consent where it is required. Where we act as processor, the customer is responsible for identifying its legal basis and giving the necessary notices.

4. Analytics, cookies and your choice

If a Google Analytics 4 measurement ID is configured, Google Analytics starts on the first page load by default unless you have previously stopped it. It helps us understand aggregate website use. You can stop analytics at any time using the notice, the Analytics settings link in the footer, or the controls on this page.

Stopping analytics updates the Google consent signal to deny analytics storage, removes current-domain _ga and _ga_* cookies where the browser permits, and prevents Smetko from loading Google Analytics on later visits. Your opt-out is stored locally and is not reset when this notice or policy changes. Theme, session and Turnstile cookies may still be used. The website starts in Macedonian by default. A language preference is stored in a cookie for up to one year only if you select “Remember my language”; clear that option to remove it.

5. Recipients and integrations

We do not sell personal data. We may disclose data to infrastructure, hosting, security, email, payment, support and professional-service providers that process it for us; to Cloudflare for Turnstile; and to Google for GA4 when analytics is active. We disclose data to authorities when required by law or necessary to protect rights, security or the service.

If you choose UJP/eFaktura, relevant document and submission data is sent to UJP under your instructions. If you choose an optional OpenRouter AI feature, prompts and the information included in them may be processed by OpenRouter and the selected model provider. Review their terms and avoid sending personal or confidential information unless you have an appropriate basis and safeguards.

6. International transfers

Providers or integrations may process data in countries outside Macedonia or the European Economic Area. When a transfer requires safeguards, we use the mechanism appropriate to the transfer, such as an adequacy decision, contractual safeguards or another lawful mechanism. Provider locations and arrangements can change, so we do not promise a fixed hosting geography.

7. Retention

We retain controller data only for as long as reasonably necessary for the stated purposes, account administration, security, dispute handling and legal obligations. The applicable period depends on the data type, our relationship, whether a request remains open and legal or accounting requirements.

For Customer Data, retention follows the customer’s instructions, the service configuration, the applicable agreement and law. On termination, available export and deletion processes apply as described in the Terms and relevant agreement. We do not state a fixed retention period where it depends on these factors.

8. Security

We use technical and organisational measures appropriate to the risk, including access controls, authentication, encryption in transit where supported, monitoring and operational safeguards. No internet service can guarantee absolute security. Keep credentials secure and notify us promptly of a suspected incident affecting Smetko.

9. Your rights and complaints

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, and withdrawal of consent where processing relies on consent. If we process data as processor, please direct the request first to the customer that controls the data.

To exercise rights concerning our controller processing, contact [email protected]. You may also complain to the Agency for Personal Data Protection (AZLP) in Macedonia at azlp.mk. We may need to verify identity before responding.

10. Children

Smetko is a business service and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided data to us, contact [email protected].

11. Changes and contact

We may update this policy to reflect legal, technical or operational changes. We will publish the updated version and effective date, and provide additional notice when required. This version is effective from 11 August 2026.

Privacy questions or requests: [email protected].