This policy explains which personal data Burovski Distillery processes through this website, why it is processed, how long it is kept, and what rights you have over it.
1. Data controller
The controller is Burovski Distillery, Rusinovo, Berovo, Republic of North Macedonia. For any question about your personal data you can reach us through the Contact page or at the email address published there.
2. What we collect
Contact form. First name, surname, email address, phone (optional), and the text of your message. You provide this data voluntarily.
Newsletter subscription. Your email address only.
Visit statistics. Only if you give cookie consent: the page address, title, referring page, language, time spent, approximate screen size, browser type, and the IP address of the visit. This data is used in aggregate, to understand what is read on the site.
Technical logs. The server may keep standard access logs for security and abuse detection.
We do not collect special categories of personal data and we do not carry out automated profiling that produces legal effects for you.
3. Why we process it, and on what basis
- To answer your message — at your request and on the basis of our legitimate interest in communicating with interested parties.
- To send you news — solely on the basis of your consent, which you may withdraw at any time.
- To protect the site from abuse (reCAPTCHA, request rate limiting, anti-forgery protection) — on the basis of a legitimate interest in security.
- To measure visits — only on the basis of the consent you give through the cookie notice.
- To meet legal obligations where the law requires it.
4. How long we keep it
- Contact form messages — at most two years from the last correspondence, unless longer retention is needed for a legal claim.
- Newsletter subscription — until you unsubscribe or ask for deletion.
- Visit statistics — at most 24 months.
- Technical logs — briefly, in line with security needs.
5. Who we share it with
We do not sell or rent personal data. Access is limited to people on our side who need it for their work, and to the following processors:
- the hosting provider running the site and the database;
- the service through which form email is delivered;
- Google — for reCAPTCHA (protection against automated submissions) and, where enabled and accepted, for visit statistics.
Some of these services may process data outside the Republic of North Macedonia and outside the European Economic Area. In that case the transfer is made on the basis of the appropriate safeguards provided for by data protection rules.
6. Your rights
You have the right to request access to your data, its correction or erasure, restriction of processing, objection to processing based on legitimate interest, and portability of the data you have given us. Where processing is based on consent, you may withdraw it at any time — this does not affect the lawfulness of processing before withdrawal.
Requests are made through the Contact page. We reply within the periods provided by law.
If you believe your rights have been infringed, you have the right to complain to the Personal Data Protection Agency of the Republic of North Macedonia, and — if you are in the European Economic Area — to the competent supervisory authority in your country.
7. Security
The site applies technical and organisational safeguards: anti-forgery protection, submission rate limiting, filtering of submitted content, access control for administration, and an encrypted connection where available. No measure guarantees absolute security, but the data is kept with care.
8. Age limit
This site is intended for adults only. We do not knowingly collect data from anyone under 18. If we learn that we have received such data, we will delete it.
9. Changes to this policy
This policy may change. Each new version is published on this page with a new update date.
Last updated: 17 August 2026.