LEGAL
Privacy Notice
This notice explains what personal data you share with USTOUR through this website, why it is processed, where it is stored and what rights you have.
1 · Data controller
Ustur Dooel Skopje (USTOUR) — Macedonia Square No.1/1-0, 1000 Skopje, North Macedonia
Email: [email protected] · Phone: +389 70 773 884
2 · What data we collect
You do not need to share any personal data to browse the site. Data is collected only when you submit a form:
Contact / quote request form
- Full name and phone number
- Email address and preferred time to be contacted (optional)
- Your note about the request
- The page the request came from (so we understand which service you are interested in)
- The program preferences you select in the Program Planner (route, duration, group size, concept, period, service selections) and, optionally, your agency's name
Group price quote form
- The contact details listed above
- The program you are interested in, planned date, group size and room type
At the quotation stage we do not ask for passenger details such as traveller names or dates of birth; those are shared only once the operation is confirmed, and outside this website.
Visit statistics
We measure how often pages are viewed. This measurement does not identify you: no personal profile is built, it is not used for advertising and your data is not shared with advertising networks.
3 · Purpose and legal basis
- Handling your request: contacting you, preparing a program or quote and planning the operation. Legal basis: the consent you give when submitting the form and the steps needed to enter into and perform a contract.
- Service quality and site improvement: understanding which services attract interest. Legal basis: legitimate interest (aggregated, non-identifying statistics).
- Legal obligations: record-keeping and retention required by applicable law.
4 · Retention
Form data is kept for no longer than 24 months after your request is closed; if a legal obligation requires a longer period, that period applies. At the end of the period the data is deleted or anonymised. You can ask for earlier deletion at any time (see section 7).
To prevent abuse of the forms, a one-way hash of your IP address is kept at the time of submission; the raw IP address is not stored and the hashes are deleted automatically within 24 hours.
5 · Who receives the data
Your data is not sold, rented or passed to third parties for marketing. Only the infrastructure providers needed to run the service are involved:
- Supabase — the database where form submissions are stored. Servers are located abroad; to that extent your data is transferred outside the country.
- Netlify — hosting and delivery of the website.
- If your request turns into a program operation, the data needed to run that operation is shared with our suppliers (hotels, transport, guides) to the extent necessary.
6 · Cookies
This site uses no advertising or tracking cookies, which is why you see no cookie banner. The only technical record kept in your browser is a session flag that stops the opening sequence from playing twice in the same visit; it is deleted when you close the tab and does not identify you.
7 · Your rights
Under the applicable data-protection law you have the right to learn whether your data is processed, to request information about it, to learn whether it is used for its stated purpose, to know the third parties it is transferred to at home or abroad, to have incomplete or inaccurate data corrected, to have it deleted or destroyed, to have these actions notified to recipients, and to claim compensation for damage caused by unlawful processing.
You can send your request to [email protected]; we will respond without undue delay and in any case within the period set by law.
8 · Changes
This notice may be updated as our services or legal obligations change. The current version is always published on this page and the date above is updated.
