Privacy Policy

We, KUKOM AG DOO Skopje, as owners of the "YLLO" brand for the Republic of North Macedonia, together with our team, by publishing this Privacy Policy, assure you that we fully comply with applicable data protection legislation and take care to ensure the highest level of protection for your privacy and personal data.

This Privacy Policy is fully aligned with the current legal frameworks in the field of personal data protection in the Republic of North Macedonia, while our consistency and commitment reflect our appreciation of the trust placed in us by you—our clients, consumers, business partners, and all other individuals who share their personal data with us and visit our website: yllo.mk.

Purposes for Collecting and Processing Personal Data

Whenever we collect personal data, the collection is necessary to achieve one or more of the following purposes:

  • To forward all notifications and information to you faster, easier, and simpler;

  • To help you find the products and/or services we offer faster, easier, and simpler;

  • To receive your electronic (online) orders from our product range;

  • To ensure fast and timely delivery of the purchased products to your address;

  • To provide servicing for the products you have purchased;

  • To notify you in a timely manner about all new products or offers that we believe meet your preferences and needs;

  • To allow you to use all the benefits we offer as a reward for your loyalty;

  • To manage loyalty programs, handle returns and exchanges, and prevent fraud;

  • To establish mutual communication and receive your remarks, comments, compliments, and criticisms.

We assure you that your personal data will not be processed for any other purpose than the one for which it was collected. The collection and processing of your personal data for any purpose other than those listed above can only be done strictly based on your prior consent or for the execution of legal obligations.

Legal Basis and Method of Processing Personal Data

We collect, process, and store your personal data lawfully, transparently, and fairly. Your personal data is collected, processed, used, and submitted to third parties only by employees who are specially authorized to do so. Your personal data may be delivered to competent authorities only in accordance with procedures regulated by law.

The processing of personal data may be carried out:

  • Based on your previously given consent for processing your personal data for one or more purposes;

  • When processing is necessary for compliance with our legal obligations;

  • When processing is necessary for the performance of a contract concluded with you, or to take steps at your request prior to entering into a contract;

  • When processing is necessary to protect your vital interests or those of third parties in urgent cases;

  • When processing is necessary for the performance of a task carried out in the public interest and/or in the exercise of official authority;

  • When processing is necessary for the purposes of our legitimate interests, those of a third party, or the person to whom the data is disclosed, except in cases where your freedoms and rights as a data subject override such interests.

The processing of your personal data is carried out exclusively in accordance with the personal data protection regulations of the Republic of North Macedonia.

Categories of Personal Data We Collect

The categories of personal data we collect to achieve the aforementioned purposes are as follows:

  • First and last name;

  • Address (residential address; city; postal code);

  • E-mail address;

  • Contact phone;

  • Remarks/comments on the placed order for products and/or services;

  • Purchasing data (order history), online behavior data (e.g., viewed products, wish lists, abandoned carts).

During every visit to our website, we process your personal data only if you voluntarily provide them by using the following options:

  • Contact;

  • Register / Log in;

  • Placing electronic orders through our electronic system;

  • Making electronic payments for orders placed from our product range.

Whenever you use any of the above options, we collect your personal data.

Retention Period of Your Personal Data

We will retain your personal data for as long as necessary to fulfill the purposes set out in this Privacy Policy and in accordance with applicable legal regulations. Your personal data will be retained only to the extent necessary to comply with our legal obligations, achieve our legitimate interests, and enforce our rules and policies.

Some of your personal data may be retained longer than anticipated exclusively for purposes related to proceedings conducted before competent state authorities and institutions.

Categories of Recipients to Whom Your Personal Data May Be Delivered

Your personal data is processed solely within our company. By exception, in cases and under conditions provided by law, we may deliver your personal data to the following categories of users:

  • Lawyers;

  • Notaries;

  • Enforcement agents (Bailiffs);

  • Courts;

  • Accountants;

  • Other legal entities that use the data to realize your rights and interests (banks, insurance companies, etc.);

  • Other legal entities and authorized state authorities, agencies, and institutions.

Processors Who May Have Access to Your Personal Data

The following categories of processors may also have the right to access your personal data:

  • Entities providing delivery services (cargo, postal, courier, and other types of delivery services);

  • External parties providing IT services for the maintenance of the website and the entire electronic system we use;

  • Entities offering repair services for products and other technical support;

  • Other entities – associates (payment providers, logistics companies, marketing, and hosting companies).

We assure you that we only collaborate with processors who provide sufficient guarantees to implement appropriate technical and organizational measures in a way that the processing will meet legal requirements and ensure the protection of the data subject's rights. The processing of your personal data by third-party processors is regulated by a contract or another legal act in accordance with the law. The processor cannot engage another processor without our prior written authorization.

Transfer and Disclosure of Personal Data

The right to access your personal data is restricted solely to our employees who are specifically authorized to collect and process them. We strictly forbid unauthorized and unlawful access to your personal data, nor do we transfer and/or disclose them to third parties, except in cases prescribed by law.

To process your personal data in order to fulfill our obligations to you or our legal duties, we may need to engage personal data processors located outside the territory of the Republic of North Macedonia (e.g., hosting our website). We will do this exclusively in accordance with the provisions of personal data protection regulations, ensuring the confidentiality and protection of your personal data. If the transfer is made to countries outside the European Union or the European Economic Area, it will only be carried out if the legal conditions for its permissibility are met. These commercial companies may only use the personal data in the manner stipulated by this Privacy Policy and according to the instructions provided by KUKOM AG DOO Skopje, which legally bind these companies via a mutual data processing agreement.

Data transfers are protected by appropriate, high-quality methods so that, in the event of a transfer, the data will be unreadable and appropriately secured according to the risk and nature of the transmitted information. To prevent unauthorized access, we will implement all necessary technical and organizational measures to protect personal data.

Consent Management

You may change your consent status at any time (to grant or withdraw consent) through the following channels: an email message, a written request (via our website), or by sending it to the physical address of KUKOM AG DOO Skopje. The consent for processing personal data for direct marketing purposes that you as a user/customer have given, or its withdrawal, is always valid for the purposes you have selected.

Cooperation with Third Parties

During any visit and/or use of our website, the possibility of encountering third-party websites with which we collaborate is not excluded. Therefore, we inform you that if you come across links on our website directing you to third-party sites, we are not authorized to control their content, nor can we have insight into how they protect personal data. Furthermore, we are not responsible for the actions of employees or authorized personnel working on websites linked "to" and "from" our website. Each of these websites may have its own Privacy Policy, which we recommend you review.

Privacy Policy for Minors (Under 18 Years)

According to the law, minors (children) are not allowed to provide personal data without permission from their parents/guardians. Therefore, we strongly advise all parents/guardians to teach their children safe and responsible ways to handle personal data. Under no circumstances will we intentionally collect and process the personal data of individuals under the age of 18, nor will we forward their personal data to a third party without obtaining prior permission from their parents/guardians.

Contact for Personal Data Protection

For any questions regarding personal data protection:

Name and Surname: Ivica Nikchevski

Contact Phone: +389 70 397 729

Email: ivica@yllo.mk

Sincerely,

KUKOM AG DOO Skopje
Updated: May 2026.

Powered by