Public information

Natasha Kocevska
General secretary

delovensekretar [@] bas.edu.mk

+389 2 2455 754

Prof. Daniela Karadakov, Ph.D.
prijavikorupcija[@] bas.edu.mk

+389 2 2455 754

Official decrees and acts regarding public information

Public information acts and decrees

GDPR Compliance Procedures

Business Academy Smilevski - BAS from Skopje, within its processes and with regards of properly conducting its operations in education and science collects, archives and works with personal information and data.

With respect to protection of data, BAS is a controller of personal data, where subjects of personal data are all candidates to be admitted as students in BAS, currently or previously enrolled students, and internal or external associates.

The procedure outlines the steps to submit a request by the subject of personal data to receive information on the scale, scope and purpose of collecting data by BAS, as well as request change, add or delete part of their personal data.

When data is used to:

  • Conduct public interest business or by an official decree of BAS or on a third person with public information
  • fulfilling the legitimate interests of BAS, a third party or a person to whom the data is disclosed, unless the freedoms and rights of the subject of personal data prevail over such interests
  • the subject of personal data has the right to request the stopping of the processing of his personal data.

If the request is deemed legitimate, BAS is obliged to stop the further processing of personal data. For this purpose, there is a special form, Request to stop the processing of personal data (Appendix 2), published on the BAS website. The personal data subject can submit the Request to the student affairs officers at one of the two BAS locations and it is then forwarded to the Personal Data Protection Officer who collects the necessary information to process the subject's personal data and submits a response to the Request .

At the request of the subject of personal data or when BAS determines that the personal data are incomplete, incorrect or not updated, i.e. if their processing is not in accordance with the legal provisions, he is obliged to supplement, modify, delete or stop the use of personal data. When the request comes from a certain subject of personal data, he documents it on a special form for that purpose, the processing of personal data. For this purpose, there is a special form, Request for addition, modification or deletion of personal data processing information (Appendix 3), published on the BAS website. The subject of personal data can submit the Request to the student affairs officers of BAS in Skopje and Bitola and it is then forwarded to the Personal Data Protection Officer who collects the necessary information for processing the subject's personal data and submits a response to the Request. For the completed addition, modification or deletion of personal data, BAS is obliged to notify the subject of personal data, the users of personal data or third parties to whom the personal data has been disclosed in writing, within 30 days from the day of receipt of the request at the latest. unless this is not possible or would require disproportionate effort or expense.

The rights of the subject of personal data determined in the previous points can be limited in special cases when their exercise will jeopardize the fulfillment of the obligations of BAS provided by law, namely:

  • to protect the security and defense of the state;
  • for the purpose of discovering and prosecuting perpetrators of crimes;
  • for the purpose of protection against violation of ethical rules of a certain profession;
  • for the purpose of protecting important economic or financial interests of the state;
  • for the purpose of protecting important economic or financial interests of the European Union and
  • for the purpose of protecting the rights and freedoms of the subject of personal data or the rights of other persons.

BAS will not act on the request for the submission of information on the processing of personal data by the subject of personal data when authorized in accordance with the law and if the personal data are processed exclusively in scientific research or if they are collected exclusively for established statistical purposes and are stored for a period that does not exceed the period required for the sole purpose of creating statistical data.

When the data is collected from the subject of personal data the subject must be informed about:

  • the identity of the controller and his authorized representative in the Republic of North Macedonia, if any;
  • the purposes of the processing;
  • users or categories of users of personal data;
  • the obligation to provide answers to questions that include personal data;
  • the possible consequences if an answer is not given and
  • the existence of the right of access and the right to correct his personal data.

When the data is not collected from the subject of personal data, the University must inform the subject of personal data at the time of recording the personal data, and if it is envisaged that the personal data will be disclosed to a third party no later than the moment when the data is first disclosed. :

  • the identity of the controller and his authorized representative in the Republic of North Macedonia, if any;
  • the purposes of the processing;
  • categories of data;
  • users or categories of users of personal data and
  • the existence of the right of access and the right to correct his personal data.

BAS has no obligation to inform the subject of personal data about the processing of personal data for historical, scientific or statistical purposes, if:

  • the same is impossible or requires disproportionate effort or expense or
  • the collection or disclosure of personal data is determined by law.

The subject of personal data may request the University to inform him:

  • whether his personal data is being processed;
  • about the purposes and legal basis of the processing of personal data and the users or categories of users to whom the personal data is disclosed;
  • about the personal data regarding the subject of the personal data and the source of the data and
  • about the logic of automated processing, in case of a decision made on automated processing, which has an impact on the subject of personal data.

For this purpose, there is a special form, Request for submission of information for personal data processing (Appendix 1), published on the BAS website. The subject of personal data can submit the Request to the BAS student affairs officers in Skopje or Bitola and it is then forwarded to the Personal Data Protection Officer who collects the necessary information for processing the subject's personal data and submits a response to the Request. BAS is obliged to respond to the submitted request by the subject of personal data within 15 days from the day of receipt of the same. If BAS has once submitted a response to such a request by the subject of personal data, it is not obliged to respond again to the same or similar request of that subject, if there have been no changes in his personal data in the meantime, unless six months have passed since the date of submission of the the previous request to the new request.