KOKODA ONLINE DOOEL import-export Skopje

1.General information

Dear consumers,

We ask you to carefully read the Privacy Policy before you start shopping on the platform www.kokoda.mk. When shopping on the internet platform www.kokoda.mk, you agree with the Privacy Policy and confirm that you have read and understood the conditions under which your personal data is processed and thereby accept this Privacy Policy.

The company for production, trade and services KOKODA ONLINE DOOEL import-export Skopje, with its registered office at ul Bihaćka no. 3-1/19, 1000 Skopje, with e-mail address support@kokoda.mk, which is registered in the register of business entities on 14.06.2024 with the entity’s registration number 7767013 and EDB 4058024548611, respects and protects the physical privacy of every user of our platform whose data it collects and processes.

On the platform www.kokoda.mk, the collection and processing of personal data is carried out in accordance with the Law on the Protection of Personal Data (Official Gazette of the Republic of North Macedonia No. 42/20 and 294/21)

https://www.slvesnik.com.mk/Issues/606043d405e847ee92c7eaed5c8bd389.pdf and

https://www.slvesnik.com.mk/Issues/347ca6fd31344c17b804dab7b326c226.pdf

Dedicated to protecting your privacy and the data we collect when using our online platform, we have adopted and publish this Privacy Policy, which defines what personal data we collect, in what way, for what purpose we process it, how we protect it, for what period we store it and what your rights are in relation to your personal data. In relation to the above, the Privacy Policy describes our practices for collecting personal data, regardless of whether we collect it directly from you, from third parties, during your visit to our online platform, through written or oral communication with you or from other sources. If you have any additional questions regarding the protection of your personal data, feel free to contact us at any time at our email address support@kokoda.mk

All basic terms and personal data processed on our online platform are in accordance with the Personal Data Act, and the principles of personal data processing are also based on the Personal Data Act.

https://www.slvesnik.com.mk/Issues/606043d405e847ee92c7eaed5c8bd389.pdf

2. Personal data that www.kokoda.mk collects and processes on your behalf

Personal data that we collect, process and store are: Name and surname, gender, residential address/address for delivery of products and delivery of invoices (street and number, postal code and city), address from which the product is picked up (in case of returning a product), Date and place of birth, email address, mobile/landline telephone number, current account number (in case of returning a product, when returning funds to a current account, voice recordings when talking to our employees and other personal data specified in the Cookie Policy available on the www.kokoda.mk Platform

3. How we collect personal data

We collect personal data directly from you, as the owner of your personal data or from other persons.

3.1 Direct collection of your personal data

a. When purchasing products.

When concluding a contract for the purchase of products with a trader or with us, as well as for the purposes of concluding and executing the contract (including delivery of products, delivery of order specifications, confirmation of purchased products as well as other documents related to the purchase contract), delivery of information and notifications that the shipment of products is ready for shipment, i.e. collection at a specific location/address, delivery of a warranty card and other additional information included in the purchase process on our online platform, you are obliged to provide us with the following personal data that you enter when purchasing a product (name and surname, gender, residential address/delivery address of the goods, street, house number, apartment number, city, postal code, mobile phone number, landline number and email address).

www.kokoda.mk is a platform as an intermediary in the contractual relations between you and the merchant, we forward personal data to the merchant (name and surname, product delivery address, mobile or landline telephone number and in certain cases we disclose to the merchant your e-mail address if further communication is necessary for the exercise of consumer rights in the complaint procedure, etc., and in this way we mediate in the conclusion and implementation of the contract for the purchase and sale of products between you and the specific merchant. Also, we disclose certain personal data (name, surname, gender, address of residence) to the Bank (actually a payment service provider who, based on an agreement with our internet platform, provides services in the payment process and the implementation of payment transactions) for the implementation of payment transactions as well as in certain cases the return of funds to the consumer. In relation to the above, by accepting this Privacy Policy, you as a consumer agree that the specified personal data will be submitted to the Bank, which may process personal data solely for the purpose of fulfilling legal and other regulations, especially those regulating the activities of payment service providers, which includes the obligation to report to state authorities, customer due diligence from the aspect of preventing money laundering and terrorist financing and risk management. Furthermore, we also disclose certain personal data to courier services (name and surname, shipping/delivery address of the product, mobile/landline telephone number) data that is necessary for the full implementation of the concluded contract for the purchase and sale of products and the exercise of your legal rights (right to withdraw from the contract and return the product, exercise of rights based on an accepted complaint, etc.)

In certain cases and where you want the product to be delivered to an address other than yours, we ask you to provide us with the following personal data of the person to whom the product is delivered (name and surname, address, street number, apartment number, city, postal code, mobile/landline telephone number)

The decision to do this is of course yours and in that case we will consider that you have consented. The specified personal data will be stored for the specified purpose until you revoke your consent and in any case will be deleted five years after your last activity on our internet platform or mobile application. Considering that in order to implement the purchase agreement with you, we are obliged to provide some of your personal data to our business partner, but in any case our business partner may not use your personal data for other purposes.

In situations where you do not provide your personal data, we will not be able to conclude and execute the contract for the purchase of products with the merchant, a contract that includes issuing the necessary documentation in accordance with the positive regulations in the field of cash payments, and in relation to the executed turnover of goods and services. The purpose for which we process the above-mentioned personal data is sales and mediation in concluding and executing a contract for the purchase of products by us and with a merchant. Personal data is stored in our database for five years from your last activity on our platform, as well as the issued documentation in accordance with the positive regulations in the field of cash payments and in relation to the executed turnover of goods and services that may contain your personal data. Your personal data is also stored in the database of the merchant, bank and courier service in accordance with their privacy policies.

Please note that the payment card number and the CVV2 or CVC number are not processed by www.kokoda.mk

b. When registering for your account on our platform or mobile application

In situations where you intend to cooperate with us by registering for your account on our platform or mobile application, you can start the registration process and create your account, for which purpose you need to fill out the registration form available on our platform and the personal data that we process in that case are: name and surname, gender, email, address and mobile phone number, and of course if you choose the option to enter and save personal data that are necessary for the implementation of a contract for the purchase of a product, your personal data will be collected and processed in accordance with point a of this section of the privacy policy.

The personal data that you need to disclose for the purpose of registering on our platform or mobile application are necessary and we will use them exclusively to register your account and establish communication for the purpose of registering it, we can also use your email address for direct marketing if you allow us to do so, i.e. we have your express consent for this. Taking into account the above, you are not obliged to allow us to use your email address for direct marketing but it will be used for registration of an account on our online platform.

Optional personal data is also date of birth, if you disclose such information to us it will be used for direct marketing. In any case, the registration form contains a notification of which personal data are necessary and which personal data you can disclose yourself or which are optional. In situations where you do not disclose the necessary personal data to us, we will not be able to register your account on our platform. The personal data we process and collect is only to register your account on our platform or mobile application and to provide appropriate assistance when using it. Op The personal data will be collected and processed for direct marketing to achieve better communication with you and better service. The necessary personal data is stored in our database for two years from your last activity on your account until you revoke your consent or they are deleted after five years from your last activity on your account.

c. When exercising your legal rights (rights to withdraw from a contract and return goods or services, rights to file complaints, rights to cancel an order, etc.)

According to the Law on Obligations and the Law on Consumer Protection, in cases of concluding a contract for the sale of products with a trader, you have various legal rights, such as the right to cancel the contract, the right to file a complaint, etc., in that regard and in order to exercise your rights, we inform you that we have received your request to exercise your legal rights, regardless of whether you have registered your account on our platform or not, we need to disclose your personal data (name and surname, gender, phone number, residential address or address from which the product is picked up, email address, as well as your current account). In this case, we will disclose your current account number to the trader for the purpose of returning funds, as well as your name, surname and address.

The above personal data that you disclose to us in order to exercise your legal rights will be disclosed to the trader in order to act on your request. The reason why we process the above Personal Data is to enable the exercise of your legal rights (right to withdraw from a contract, right to lodge a complaint, etc.) and to inform you that we have received your request related to the exercise of your legal rights, which often includes the return of the product, i.e. the refund of the funds paid.

In the event that you do not provide us with the requested personal data, we will not be able to enable you to exercise your legal rights.

Also in order to exercise your legal rights (withdrawal from the contract and return of the product), we disclose certain personal data to courier services (name and surname, delivery address, phone number. The specified personal data is stored in our database for two years from the exercise of your legal right.

d. When registering for direct marketing (via email or via phone messages such as SMS messages, WhatsApp and Viber messages)

When you register for direct marketing in the Promotions section, you give us your consent to collect and process your email address and phone number for the purpose of sending promotions, news or a promotional code, which you can use when purchasing on our platform or mobile application and for the period of validity of the promotion.

The purpose of processing the above personal data is direct marketing and they will be stored in our database and processed until you revoke your consent or for a maximum of five years from your last activity on our platform or mobile application. You can revoke your consent at any time via your email address.

e. When contacting our employees by phone or on social networks

In a situation where you contact our employees in order to facilitate your shopping on our platform, your personal data will be used only for the purpose of improving and simplifying your use of our platform, in order to answer questions related to the products on our platform, to check the status of a shipment, to postpone the delivery deadline or in order to exercise your legal rights as a consumer.

f. When registering a merchant account on our platform (by you personally or by our employees).

When you intend to cooperate with our platform and place your products on our platform, you need to register an account, for that purpose it is necessary to fill out a merchant registration form that is available on our platform under the name – Become a Seller

Although, only legal entities or entrepreneurs as merchants can register on our platform, we process the data of contact persons or legal representatives for the purpose of registering the store, respectively establishing cooperation and establishing communication. For that purpose, the personal data of contact persons or legal representatives that we process are name and surname, gender, position title, email address and phone number. Contact number. If you do not provide or provide the necessary personal data, we will not be able to register your account or store and establish cooperation with our platform. Therefore, the legal basis for processing the above personal data is the execution of a brokerage agreement between you as a trader and our platform. The collection of your personal data by the contact person/legal representative of the trader is in accordance with the brokerage agreement concluded between you and our platform will be used only for that purpose and they will be stored in our database for two years from your last activity as a trader after which they will be deleted.

g. When you visit our platform.

When you visit our platform in certain situations we collect and process your personal data through cookies, but there are also cookies that do not collect your personal data. For more information about the above, visit our cookie policy

3.2. Personal data provided by other persons

In situations where you can provide us with personal data from third parties, for example for the delivery of purchased products to a third party’s residential address, in that case we will consider that you are authorized or have the consent of the third party to disclose their personal data and in that situation we will not bear any responsibility for the processing of the third party’s personal data.

3.2.a When logging into social networks

In a situation where you disclose yours on Facebook or Google, in accordance with the terms of use and privacy policies of third parties and those parties transfer your personal data in a structured, commonly used and machine-readable format to us, i.e. www.kokoda.mk Because that transfer is made by third parties, in accordance with their terms of use and privacy policies, we will consider that you have given your consent to those parties to transfer your personal data to us. Therefore, we will not be responsible for the processing of personal data transferred to us by third parties (Facebook, Google), further from the moment we receive your data from those parties we will be considered the controller and we are solely responsible for their processing. The purpose for which we collect personal data from those parties is to register your account on our platform and they will be stored and processed in our database until you revoke your consent or after five years from your last activity on your account.

4. Purpose of collecting and processing personal data.

The purpose for which we collect personal data is exclusively for the conclusion and execution of contracts for the purchase and sale of products, execution of payment transactions, compliance with the legal obligations of the legal entity, i.e. for the exercise of your legal rights as a consumer (right of withdrawal from the contract, right of objection, right to cancel an order, etc.), registration of your account on our platform, answering your questions and requests, improving the functioning of our platform and our service, sending notifications about promotions, registration of a merchant store, e-mail and phone communication with the legal entity after registration of the store, as well as other purposes defined in the Cookie Policy.

5. Legal basis for processing personal data

We process your personal data in accordance with the law and on the basis of various grounds prescribed by law.

Your consent

We process and store your personal data obtained on the basis of your consent in our database as long as your consent exists, in fact until you revoke it yourself. You may withdraw your consent to the processing, collection and use of your personal data at any time by revoking your consent in the email you have received from us as well as by sending an electronic request to support@kokoda.mk

Fulfillment of contractual obligations

Our platform collects your personal data that is necessary for the conclusion and execution of a sales contract between you and the merchant and the fulfillment of pre-contractual obligations in the event that we have a basis for collecting, processing and storing your personal data.

Fulfillment of legal obligations in accordance with the provisions of the Consumer Protection Act and the Law on Obligations

The processing of your personal data that is necessary to fulfill the legal obligations of our platform and the merchants with whom we cooperate, and which obligations are defined by different laws, is carried out on a relevant legal basis (e.g. Consumer Protection Act)

6. Processors and third parties

Our platform discloses your personal data to certain processors and third parties who are our collaborators, employees, service providers, merchants whose products you have purchased on our platform, marketing companies, communication service companies or market research or customer satisfaction companies, IT service providers or state authorities, who are obliged to use the personal data exclusively for the purpose for which they were disclosed, i.e. for the performance of the services and tasks for which they are engaged (otherwise, if they use them for other purposes, they will be considered independent controllers).

Your personal data will not be available to other processors, i.e. third parties, except in the cases specified in this privacy policy.

7. Data retention period personal data

The information and data that our platform collects on the basis of law as a legal basis is obliged to keep for as long as determined by the specific law or other positive regulation (two years from the day of exercising your legal rights, i.e. five years from the issuance of the invoice).

The data that we collect on the basis of a contractual relationship, our platform will keep as long as you are our user or five years from your last activity on our platform or until your consent is revoked by you.

8. Rights of persons related to the processing of personal data.

In addition to the rights already listed in this privacy policy, as well as other rights provided for by law and other regulations in accordance with the law, the person to whom the personal data relates has the right to request information whether our platform processes his/her personal data.

Upon request from the data subject, we will endeavour to provide information on the personal data in accordance with our instructions on the purpose of processing the personal data, the legal basis and duration of the processing, the name and address of the processor and its activities related to the processing, the circumstances and impact of the personal data breach, as well as the measures taken to eliminate it, and in the case of data transfer, information on the legal basis of the process and the recipient thereof.

We will provide you with a written response to your request as soon as possible after your request has been submitted and no later than 15 days from the date of receipt of the request. The written response will be provided free of charge, unless the request is obvious, unfounded or excessive and especially if it is frequently repeated, for which we may charge administrative costs for providing a written response to the request or we may refuse to provide a response.

Our platform undertakes to provide the data subject with a copy of the personal data we process upon request and to claim reimbursement of the necessary costs for making additional copies requested by the data subject. In the event that the request for a copy is submitted electronically, the information is usually provided in the most commonly used electronic form unless the data subject has requested a different submission.

If the data subject requests the rectification, amendment or deletion of his/her personal data and the right to object to the processing of the data, he/she has the right to have his/her data corrected without undue delay. In relation to the purpose of the processing, the data subject has the right to have incomplete personal data completed, which includes providing an additional statement. The user of personal data has the right to request that their personal data be deleted from our platform, they can be deleted using the “delete account” option on our mobile application or in your profile on our platform and in that situation your personal data will be deleted immediately except for those that we have to keep for a certain period of time due to legal obligations (defined in this privacy policy) or those data that everyone disclosed when registering for direct marketing. However, of course after the expiry of the legal terms or after using the option not to receive our direct marketing your personal data will be deleted immediately.

Our platform undertakes to delete your personal data without undue delay and no later than 30 days from the date of submission of the request in the event that the personal data are no longer necessary to achieve the purpose for which they were collected or otherwise processed, if the person has withdrawn the consent on the basis of which the processing was carried out and there is no basis for another legal basis for the processing, or if the person has objected to the processing, if the personal data have been processed unlawfully, in a situation where the personal data must be deleted to comply with legal obligations or the personal data were collected in connection with the use of information society services in accordance with the law.

In relation to the above, we also undertake to inform all recipients of your personal data to whom they have been disclosed of any correction or addition to the same or of the deletion of personal data and restriction of their processing in accordance with the law and to inform you at your request of all recipients of your personal data.

The data subject has the right to receive the personal data he or she has previously provided to us in a structured, commonly used and machine-readable format and has the right to transmit his or her personal data to another controller without interference on our part if the processing is based on consent or on a contract or the processing is carried out by automated means.

Our platform has the right to restrict the processing the erasure of your personal data if the data subject contests the accuracy of the data within a period that does not allow us to verify the accuracy of the data, if the processing is unlawful and the data subject opposes the erasure of the data and instead of erasure requests the restriction of the use of the data, or in a situation where we do not need your personal data to achieve the purpose of the processing, but the data subject has requested it for the purpose of submitting a legal claim, or if the data subject has lodged an objection to the processing pursuant to Article 25 paragraph 1 of the law, and an assessment is underway as to whether the legal basis for processing by the controller outweighs your interests. In situations where the data subject considers that this is justified in relation to the specific case in which he or she finds himself or herself, he or she has the right to lodge an objection to the processing of his or her personal data at any time in accordance with the law. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, if that decision produces legal consequences for that person or significantly affects his or her position. If you need to exercise your rights, please send an email with a request to the email address support@kokoda.mk, while the right to delete personal data in the case of using our platform by selecting the Delete account option.

9. Procedure in the event of a breach of your personal data

In the event of a breach of your personal data that may cause a high risk to your rights and freedoms, we are obliged to notify you as the owner of the personal data of the breach that has occurred and is in accordance with the law without undue delay and in the same situation to notify the Personal Data Protection Agency as soon as possible after becoming aware of the breach electronically at incident@privacy.mk or at https://eprijavi.privacy.mk/.

The notification to be submitted to the competent authority will contain all information in accordance with the law and relevant by-laws.

10. Transfer of personal data outside the territory of the Republic of North Macedonia

Our platform may transfer your personal data to another country or international organization without prior approval if it is determined that that other country or international organization provides an adequate level of protection, i.e. has appropriate protective measures for personal data in accordance with Art. 50 of the Personal Data Protection Act or is a member state of the European Union or the European Economic Area. The legal entities to which the company transfers personal data use public cloud servers ANJ located on the territory of the Federal Republic of Germany and Ireland, which are members of the European Union, so the transfer of personal data to their territory in accordance with the protection law is unhindered.

11. Links to Third Party Websites and Services

Our platform may contain links and websites of third parties (Bank, etc.) and please note that we are not responsible for the collection, use, maintenance, sharing or disclosure of data by third parties. In a situation where you provide information on third party websites and use the same, the policies and terms of use of those websites will apply. We recommend that you carefully read the privacy policies of the websites you visit before sending personal information. By accepting our sponsored advertisement on Facebook or Instagram, you accept the possibility that the data about your visit to our platform may be processed by the above-mentioned social networks if you have an account with them, and to avoid this situation, we suggest that you first log out of your account on the mentioned social networks and then click on the link on our platform to visit our platform on one of the mentioned social networks.

12. Confidentiality of personal data and transparency

Your personal data will be treated as confidential information and we will do our best to take appropriate necessary measures to protect them in accordance with the law, they will be available only to persons who, taking into account the description of the work they perform, need to be familiar with your personal data and only to the extent necessary to perform their work. This privacy policy is published on our platform, if it undergoes changes, they will be published on our platform. You can ask all questions regarding the processing of your personal data and contact us 24/7 by e-mail support@kokoda.mk