The Law on Personal Data Protection (Official Gazette of the Republic of North Macedonia No. 42/2020) gives the citizen the right to know which personal data the controllers collect, process, and store for him and whether they work legally.
The protection of personal data in the Republic of North Macedonia is realized in two ways:
1. On the one hand, the person who processes personal data must adhere to the principles of personal data protection, which guarantee that they are:
process in accordance with the law;
collect for specific, clear, and legally determined purposes;
process in a way that is in accordance with those goals;
appropriate, relevant, and not excessive in relation to the purposes for which they are collected and processed;
accurate, complete, and, if necessary, updated and the data that are inaccurate or incomplete will be deleted or corrected; and
kept in a form that enables identification of the personal data subject no longer than it is necessary to meet the purposes for which the data were collected for further processing.
2. On the other hand, the citizen has the right:
to be informed about the identity of the controller and his representative in the Republic of North Macedonia;
to inspect the collection of personal data;
to know what personal data are stored about him in electronic or paper form;
to know the goals of the processing of his personal data;
to know the users or categories of data users;
not to agree with the use of the data for commercial purposes or their transfer to third parties for such purposes;
data access and correction.
If your request to inspect the personal data collection has been rejected, ie you have been denied the right to access, correct, or delete personal data, you have the right to submit a request for determining a violation of the right to personal data protection to the Personal Data Protection Agency.
NOTE: The rights of the personal data subject are prescribed in accordance with the provisions of Articles 16, 17, and 18 of the Law on Personal Data Protection (Official Gazette of the Republic of North Macedonia No. 42/2020) and the provisions of the Rulebook on processing security of personal data (Official Gazette of the Republic of North Macedonia, no. 122/20).
Namely, in accordance with Article 16 para. (1), in connection with para. (3) - The information should be provided in writing or by other means, including where applicable electronically. At the request of the personal data subject, the information may be provided orally, provided that the identity of the personal data subject is proven by other means; and at the same time, when the personal data subject submits a request in electronic form, the information is provided using electronic means where possible, unless the personal data subject requests otherwise.