Last Updated: December 2024
At ACTI, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, process, and safeguard your personal information in compliance with Albanian data protection laws and applicable international regulations. By using our website or interacting with us, you agree to the practices described in this policy.
1. Who We Are
ACTI is an IT and innovation association based in Albania. For the purposes of data protection laws, we act as the Data Controller of the information we collect. We process your personal data in accordance with Law No. 9887/2008 “On the Protection of Personal Data,” as amended (“ADPL”), relevant secondary legislation, and principles inspired by the EU General Data Protection Regulation (GDPR), where applicable. For any questions regarding this policy or your personal data, you can contact us at: [email protected]
2. Data We Collect
We may collect the following types of personal data:
- General Personal Data: Name, email address, phone number, and other contact details.
- Special Categories of Data (if applicable): Sensitive data, such as health information or biometric data, only with your explicit consent.
- Technical Data: IP address, on-site search activity, and log files to improve website performance.
- Membership and Transaction Data: Information related to your membership, purchases, and requested services.
3. How We Use Your Data
We process your personal data for the following purposes:
- To provide services and information related to your membership or interests in the association.
- To send updates, newsletters, or event details.
- To improve our website and user experience.
- To fulfill legal obligations under ADPL.
4. Legal Basis for Processing
We process your personal data based on:
- Your consent (e.g., newsletter subscriptions).
- Contractual necessity (e.g., providing requested services).
- Legal obligations (e.g., responding to lawful requests from authorities).
5. Data Sharing
Your personal data may be shared with:
- Authorized service providers assisting us in delivering our services.
- Regulatory authorities, where required by law.
We ensure that any third party processing your data applies appropriate technical and organizational measures to protect your information.
6. Data Protection Measures
We implement technical, administrative, and physical safeguards to protect your data from unauthorized access, loss, or misuse. While no system is completely secure, we strive to apply best practices, including:
- Encryption and secure servers.
- Organizational policies restricting data access to authorized personnel only.
7. Your Rights
Under ADPL, you have the following rights:
- Right to Information: Know how your data is processed.
- Right to Access: Request access to your personal data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data, unless legal obligations require retention.
- Right to Object: Object to processing under certain circumstances.
- Right to Complaint: File a complaint with the Commissioner for the Protection of Personal Data.
For requests, contact: [email protected]
8. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy and as required by law. Examples include:
- Membership records: During your membership and a reasonable period afterward.
- Transaction records: As required for tax and audit purposes.
9. International Data Transfers
If your personal data is transferred outside Albania, we ensure proper safeguards, such as contractual agreements or compliance with GDPR principles.
10. Privacy Breaches
In case of a privacy breach, we will notify the supervisory authority and affected individuals in compliance with applicable legal requirements.
11. Updates to this Policy
We may update this Privacy Policy to reflect legal or operational changes. Updates will be posted on this page with the effective date.
12. Third-Party Links
Our website may include links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing personal data.
Supervisory Authority Contact
Commissioner for the Protection of Personal Data
Email: [email protected]
Phone: +355 69 411 8209
By using our website, you accept the terms of this Privacy Policy. Thank you for trusting ACTI.