Last updated: 21 July 2026
1. Who we are
This website (coworkingprilep.mk) is operated by Dastian DOO Prilep (the "Company", "we", "us"), which runs Coworking Prilep through its branch BLOK 02 in Prilep, North Macedonia. For the purposes of data protection law, we are the data controller of the personal data described below.
- Registered name: Друштво за производство, промет, услуги и трговија ДАСТИАН увоз-извоз ДОО Прилеп (Dastian DOO Prilep)
- Registered seat: Kej 1-vi Maj no. 9, Prilep, North Macedonia
- Coworking location (branch BLOK 02): Jane Sandanski no. 33, Prilep
- Company reg. no. (ЕМБС): 7821808
- Tax no. (ЕДБ): 4021025551046
- Email: coworkingprilep@outlook.com
2. What data we collect
We collect only what we need to run the service:
- Contact data — your email address when you join our mailing list, and your name and email if you contact us or create a booking or membership. For a free tour request, we collect your first and last name, phone number, email, and profession to arrange your visit and understand your workspace needs. Submitting this form does not join our mailing list.
- Payment data — when you pay by card, the payment is processed directly by ProCredit Bank's secure payment gateway. We do not receive, see, or store your full card number, expiry, or CVV. We may retain a transaction reference, the last four digits of the card, the amount, and the date for accounting and support.
- Usage & device data — with your consent, we use analytics tools that collect information such as pages viewed, approximate location, device and browser type, and interactions with the site.
- Technical logs — our servers record standard data such as IP address and request time for security and reliability.
Member accounts (website and app) share one account. We store your email, first name, surname, profession and date of birth, together with your memberships and recorded visits, to maintain your member profile and membership records. Your date of birth is private and is not shown in the community directory. You can edit your personal details in My Account. Signing in with Google uses your Google identity and email; we do not request your birthday from Google. My Account uses browser session storage to keep you signed in within the tab; analytics and session replay are disabled on that page.
3. Why we use it and our legal basis
- To provide the service (accounts, bookings, memberships) — performance of a contract.
- To process payments and issue receipts/invoices — contract and legal obligation.
- To send you updates you asked for (newsletter and service emails) — your consent.
- To keep the site secure and improve it (analytics) — your consent and our legitimate interest.
- To meet accounting and tax duties — legal obligation.
4. Cookies & analytics
We show a cookie banner on your first visit. Analytics and any non-essential cookies load only after you accept. We use Google Analytics (aggregate visitor statistics) and Microsoft Clarity (anonymous session insights and heatmaps). You can change or withdraw your choice at any time by clearing the site's cookies and reloading.
The interactive location map loads only when you select “Load interactive map”. This connects your browser to Google Maps, which receives information such as your IP address and may use cookies. You can use the external Google Maps link instead of loading the embedded map.
5. Who we share data with
We do not sell your personal data. We share it only with service providers that help us operate, each bound to protect it and use it only on our instructions:
- ProCredit Bank / its card processor — to process card payments.
- Supabase — database and authentication hosting.
- Resend — sending transactional and confirmation emails.
- Google (Analytics) and Microsoft (Clarity) — website analytics, subject to your consent.
- Our hosting provider — running the website infrastructure.
We may also disclose data where required by law or to protect our legal rights.
6. International transfers
Some of our providers process data outside North Macedonia, including in the EU and the USA. Where this happens, we rely on appropriate safeguards (such as providers' standard contractual clauses and adequacy measures) to protect your data to the standard required by law.
7. How long we keep it
We keep personal data only as long as necessary: subscriber and marketing data until you unsubscribe or ask us to delete it; account, booking, and membership data for the life of your relationship with us; and payment/invoice records for the period required by tax and accounting law (currently up to 10 years).
8. Your rights
Under the Law on Personal Data Protection you have the right to:
- access the data we hold about you;
- correct inaccurate data;
- delete your data ("right to be forgotten");
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time (without affecting past processing).
To exercise any of these, email coworkingprilep@outlook.com. You also have the right to lodge a complaint with the Agency for Personal Data Protection of North Macedonia (Агенција за заштита на личните податоци, azlp.mk).
9. How we protect your data
The site is served over encrypted HTTPS (TLS). Access to our database is restricted with row-level security and role-based controls, and card data is handled entirely within the bank's PCI-DSS-compliant gateway. We apply appropriate technical and organisational measures to guard against unauthorised access, loss, or misuse.
10. Children
Our services are intended for people aged 18 and over. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows the current version. Material changes will be highlighted on this page.
12. Contact
Questions about this policy or your data? Email coworkingprilep@outlook.com or write to Dastian DOO Prilep, Kej 1-vi Maj no. 9, Prilep, North Macedonia.