Who is responsible
International Security Academy, Macedonia (ISA-MKD) is responsible for the personal data it collects through this website and its training administration. Privacy requests can be submitted through the Contact page.
Data we may collect
- Enquiry details such as name, email address, telephone number, organization, role, and message.
- Free-course registration details including name, email, telephone number, applicant category, follow-up preference, consent record, course progress, and certificate reference.
- Initial professional-application information including legal name, contact details, country of residence, professional category, organization, role, experience range, intended outcome, selected training, an optional affiliate code, and acknowledgements.
- Identity documents, background-verification information, licences, references, and medical fitness information only where applicable and requested separately after initial review. These are not uploaded through the public application form.
- Enrolment, attendance, assessment, certification, payment, support, and correspondence records.
- Technical information such as IP address, browser and device information, security logs, and cookie preferences.
Why we process data
Data is used to respond to enquiries, assess admission and course suitability, administer training and assessment, issue and verify certification, manage payment and support, protect participants and systems, comply with legal duties, and establish or defend legal claims.
Depending on the activity, processing is based on steps requested before a contract, performance of a contract, compliance with legal obligations, legitimate interests in safe and effective training administration, consent, or another lawful basis available under applicable law.
Sensitive and screening information
Health data and other sensitive information are requested only when necessary for course safety, eligibility, or legal compliance. Such data is restricted and processed only where an additional lawful condition applies, such as explicit consent or another basis permitted by applicable law.
ISA-MKD does not use solely automated decision-making to determine admission or certification. Material decisions involve human review.
Sharing and international transfers
Data may be shared only as necessary with authorized instructors and administrators, website hosting and email providers, form and security providers, postal or courier services, payment and accounting providers, professional advisers, and competent authorities where required by law.
Where a service provider processes data outside North Macedonia or another relevant jurisdiction, ISA-MKD will use an available transfer mechanism and appropriate contractual or organizational safeguards where required.
Retention and security
Personal data is retained only for as long as required for the relevant enquiry, application, training, certification, financial, legal, safeguarding, or dispute purpose. Different records have different retention periods based on necessity and legal obligations.
ISA-MKD applies access controls, confidentiality obligations, data minimization, secure handling, and appropriate technical and organizational measures. No system is completely risk-free, but suspected incidents are assessed and handled under applicable law.
Your rights
Subject to applicable conditions and exemptions, individuals may request information, access, correction, deletion, restriction, portability, or objection, and may withdraw consent without affecting earlier lawful processing.
A complaint may also be submitted to the Personal Data Protection Agency of the Republic of North Macedonia. EU or EEA residents may have additional rights under the GDPR where it applies.
Cookies and policy updates
Cookie choices are explained in the Cookie Policy and can be reviewed through the site’s cookie settings where available. This privacy policy may be updated to reflect operational, technical, or legal changes.
Ask before you apply.
Contact ISA-MKD if you need confirmation about eligibility, payment, delivery, assessment, support, or a policy requirement.