Privacy Policy
Who is the controller?
In the following paragraphs, we, Fondacioni Shoqëria e Hapur për Shqipërinë, a legal entity established in accordance with Albanian legislation with TIN No. L71513046P, (hereinafter also referred to as “we”, “us”, “the controller’’), are providing information on the processing of your personal data when you use the website www.osfwb.org (hereinafter also referred to as “website”).
Purpose and lawful basis for processing
We process your personal data to inform you about our activities and upcoming events. The lawful basis we rely on for the processing is your consent.
What data do we use?
In order to send you our newsletter(s) we need your e-mail address, and your name and surname for your identification in case of any complaints or queries with regard to the way we process your personal data request.
How do we collect your data to send you our newsletter(s)?
We collect the data from you when you subscribe to the newsletter(s).
How do we use your data?
We use your data to send you our newsletter(s). We also gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter.
How long we keep your data?
We keep your data for the purpose of sending you our newsletter(s) for as long as you have not withdrawn your consent or objected to such processing of your data.
Do we use any data processors?
We use Mailchimp to send our newsletters. In addition, and in the context of using Mailchimp services, namely creating and sending emails, they have access to the information contained in the subject and content of the emails that we send out, as well as the email contacts we send the newsletter via their services. You can find Mailchimp privacy policy here.
What data protection rights do you have?
We consider it is important to make the procedures for processing data fair and transparent. We therefore firmly believe that you should be able to exercise inter alia the following rights:
- Right of access, Article 12 Law No. 9887 dated 10.03.2008, “On the Protection of Personal Data”.
- The right to request blocking, rectification and erasure, Article 13 Law No. 9887 dated 10.03.2008, “On the Protection of Personal Data”.
- The right to refuse, Article 15 Law No. 9887 dated 10.03.2008, “On the Protection of Personal Data”.
- The right to complain, Article 16 Law No. 9887 dated 10.03.2008, “On the Protection of Personal Data”.
- Right to Compensation of the damage, Article 17 Law No. 9887 dated 10.03.2008, “On the Protection of Personal Data”.
Information on your right to access
Every data subject is entitled to obtain free of charge from the controller upon his written request:
a) confirmation whether or not his personal data are being processed, information on the purposes of processing, the categories of processed data and the recipients or categories of recipients to whom personal data are disclosed;
b) communication to him in a comprehensible form of the data undergoing processing and of any available information as to their source;
The information about the data shall be communicated in the form they were at the time when the request was made. Within 30 days upon receipt of the request, the controller informs the data subject or explains the reasons why the information cannot be provided.
If access is denied on arguments of violation of national security interests, foreign policy, economic and financial interests of the state, prevention and prosecution of criminal offences or of the freedom of speech and information or press freedom, the data subject may require from the Commissioner to check on the exemption for the concrete case. The Commissioner shall inform the data subject about the undertaken measures.
Information on your right to request blocking, rectification and erasure
Every data subject has the right to request blocking, rectification or erasure of his data, free of charge whenever he is informed that data relating to him are irregular, untrue, and incomplete or have been processed and collected in contradiction with the provisions of the law.
Within 30 days from receipt of the data subject request, the controller shall notify the data subject on the lawful processing of the data, whether the blocking, rectification or erasure has been carried out or not. The controller informs the recipient of personal data on the rectification or erasure of the personal data transmitted before the rectification or erasure.
When the controller does not carry out the blocking, rectification or erasure of the data requested, the data subject has the right to file a complaint with the Commissioner.
Upon its own initiative the controller shall carry out the blocking, rectification or erasure of personal data, when it ascertains that personal data are inaccurate, untrue, and incomplete or have been processed in contradiction with the provisions of the law.
Information on your right to complain and on compensation of the damage
Every person who claims that his rights, freedoms and legal interests concerning his personal data have been violated shall have the right to complain or to notify the Commissioner and to request his intervention to remedy the infringed right. Following this complaint, in accordance with the Code of Civil Procedure, the data subject may file a complaint in court.
When the data subject has filed a complaint, the controller shall have no right to make any changes to the personal data until a final decision ruled.
Everyone who has suffered damage due to an unlawful processing of personal data is entitled to compensation, pursuant to the rules defined by the Civil Code.
Whom can I contact and how can you complain?
If you have any complaints or queries with regard to the way we process your personal data, you can an email to the following address: info@osfwb.org
In this case, we will need the following information for identification purposes:
First Name
Last Name
E-mail address
Copy of your identity card
When you send us a copy of your identity card, please blank out everything except the first name and last name.
Please note that in order to handle your request as well as for identification purposes, we will process your personal data in accordance with (a) and (ç) of Article 6 (1) Law No. 9887 dated 10.03.2008, “On the Protection of Personal Data”.
We retain your data collected for identification purposes for six months, in case of any proceedings conducted by the Commissioner of Data Protection and Freedom of Information, prosecution, or the court.
How can you withdraw consent?
If you have given us consent to process your personal data, please note that you can withdraw your consent at any time.
If you wish to withdraw your consent, you may unsubscribe at any time using the link in our newsletter or by sending an email to info@osfwb.org
Please note that a withdrawal of consent has prospective effect only and does not affect the lawfulness of any processing performed in the past.
