HAXNA DOOEL is a technology company registered in the Republic of Macedonia. We provide IT services, software development, IT consulting, infrastructure solutions, and project outsourcing to businesses across Macedonia and the European Union.

For the purposes of GDPR, HAXNA DOOEL acts as the data controller for personal data collected through our website (haxna.com) and in the course of providing our services.

We collect only the data we need to provide our services and communicate with you. We do not collect sensitive personal data and we do not sell your data under any circumstances.

Messages submitted through our contact form are delivered directly to us by email and are not stored in any website database.

Under GDPR, we must have a lawful basis for every type of data processing we carry out. Below is a clear explanation of each purpose and its legal basis.

We use cookies and similar technologies to understand how visitors use our website. You will be asked for your consent before any non-essential cookies are placed on your device.

Google Analytics 4 does not log or store IP addresses. Your IP is used only momentarily to derive an approximate geographic region and is then discarded — it is never retained by us or by Google. We do not use Google Analytics advertising features, Google Signals, or cross-site tracking.

We never sell your data. We never share your data with third parties for their own marketing purposes. The following parties may access your data only where strictly necessary to deliver our services.

SCCs = Standard Contractual Clauses approved by the European Commission for transfers outside the EU/EEA.

We keep your data only as long as necessary for the purpose it was collected, or as required by law.

Some of our service providers are based outside the European Economic Area (EEA), including in the United States. When we transfer data to countries that do not have an adequacy decision from the European Commission, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism to ensure your data remains protected to the same standard as within the EU.

Specifically, data processed by Google LLC (Google Analytics 4) is covered by Google's Data Processing Terms which incorporate SCCs. Transfers to other US-based processors are handled equivalently.

If you are located in the EU/EEA or are otherwise covered by GDPR, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at contact@haxna.com. We will respond within 30 days.

• Access You have the right to request a copy of the personal data we hold about you, free of charge.
• Rectification You have the right to correct any inaccurate or incomplete data we hold about you.
• Erasure You have the right to request deletion of your data where there is no legitimate reason for us to continue holding it.
• Restriction You have the right to ask us to suspend processing of your data while a dispute is resolved.
• Portability You have the right to receive your data in a structured, machine-readable format and transfer it to another controller.
• Objection You have the right to object to processing based on legitimate interests. We must then stop unless we can demonstrate compelling legitimate grounds.
• Withdraw Consent Where processing is based on consent (e.g. analytics cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Complaint You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data correctly.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

— HTTPS encryption on all website pages and data transmissions

— Access controls limiting who within HAXNA can access personal data

— Secure email via our self-hosted mail server (mail.haxna.com) using TLS/StartTLS encryption

— Regular review of data handling practices and third-party processors

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Article 33 and 34.

Our website and services are directed exclusively at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have inadvertently collected data from a child, we will delete it promptly. Please contact us at contact@haxna.com if you believe this has occurred.

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy. If you disagree with any changes, please contact us or discontinue use of our services.

For any questions, requests, or complaints regarding this privacy policy or our data handling practices, please contact us using the details below. We aim to respond to all privacy requests within 30 days.