Privacy Policy

1. Who We Are

This platform is operated for the Circular Economy project. If you have questions about this policy or would like to exercise your data protection rights, you can contact the project team at service@nordmazedonien.ahk.de or by phone at +389 2 3228 824.

This policy reflects the current behaviour of the application as configured in this repository. Before production use, the site operator should review this page and update any controller, hosting, retention, or supervisory authority details that are specific to the live deployment.

2. Personal Data We Collect

Depending on how you use the platform, we may collect the following categories of personal data:

• Account data: your email address, encrypted password, account creation date, and last login timestamp.
• Company information you submit: company name, country, sector, company size, company email, years operating, main markets, whether the company has previous assessments, annual turnover band, and whether you are completing the assessment alone.
• Quiz data: the quiz name, questions shown, your selected choices or text responses, the language used, and answer timestamps.
• Self-assessment data: the self-assessment quiz name, questions, your answer values, attempt timestamps, and related scoring or result-level outputs.
• Session and security data: authentication sessions, CSRF/security tokens, and temporary in-progress quiz or self-assessment answers stored to let you continue where you left off.

3. Why We Use Your Data

We process personal data to provide the platform and its main features. This includes:

• creating and securing user accounts;
• letting you log in and maintain your session;
• saving quiz and self-assessment progress;
• showing results, history, and profile information;
• allowing you to download your personal data export;
• allowing you to manage company information connected to your account;
• protecting forms and accounts against misuse or unauthorised actions; and
• administering and maintaining the service.

4. Legal Bases for Processing

We rely primarily on the following GDPR legal bases:

• Article 6(1)(b): processing necessary to provide the account, quiz, self-assessment, and related user-requested services.
• Article 6(1)(f): legitimate interests in securing, maintaining, and improving the platform and keeping reliable records of submitted answers and account activity.

The registration checkbox on this website is used as confirmation that you have read this Privacy Policy. It is not intended to serve as blanket consent for every processing activity.

5. How Long We Keep Data

• Account, quiz, company, and self-assessment data are kept while your account remains active, unless a shorter retention period is set by the site operator.
• Temporary session-progress data is kept only for as long as the session remains active or until it is cleared by the application.
• If you use the account deletion feature, the application currently anonymises your email address, removes basic name fields, and deactivates the account. Related submissions may remain attached to that anonymised account record unless the operator separately deletes them or another legal requirement applies.

6. Who Receives Your Data

Personal data is not published publicly through the normal use of this platform. It may be accessible to authorised administrators managing the service. It may also be processed by technical service providers used to host, maintain, back up, or secure the platform, and it may be disclosed where required by law.

7. International Transfers

This application does not present any built-in public feature for transferring your data outside the EEA. If the live service uses hosting, email, or infrastructure providers outside the EEA, the site operator should ensure that an appropriate transfer mechanism and safeguards are in place.

8. Your Rights

Under the GDPR, you may have the right to:

• access the personal data held about you;
• receive a copy of your data;
• ask for inaccurate data to be corrected;
• ask for your data to be erased in certain circumstances;
• ask for processing to be restricted in certain circumstances;
• object to processing based on legitimate interests in certain circumstances;
• receive portable data where the legal conditions for portability apply; and
• lodge a complaint with your relevant supervisory authority.

This platform already includes a personal data download feature and an account deletion/anonymisation feature in the user profile area. For correction requests or other rights requests, please contact the project team using the contact details above.

9. Automated Decision-Making

The platform calculates quiz and self-assessment scores automatically to display educational results to the user. It does not currently use solely automated decision-making that produces legal effects or similarly significant effects on users.

10. Data Security

We use technical and organisational measures available through the platform, such as password-based authentication, server-side form validation, session handling, and CSRF protection. No internet-based service can guarantee absolute security, so users should also choose strong passwords and protect access to their devices.

11. Contact and Complaints

If you have questions about this Privacy Policy or want to exercise your rights, contact service@nordmazedonien.ahk.de. If you believe your data protection rights have been infringed, you may also lodge a complaint with the supervisory authority competent for your country, place of work, or place of the alleged infringement.