PRIVACY POLICY
PURSUANT TO ALBANIAN LAW NO. 124/2024 ‘ON PERSONAL DATA PROTECTION’
UIM Albania (hereinafter “Data Controller”) provides this privacy notice (in accordance with Law No. 124/2024) regarding the processing of personal data collected from individuals (hereinafter “data subjects”) who browse its website, access or use the content of social media platforms managed by the Data Controller, send emails to the Data Controller, etc.
Following the consultation of this website, data relating to identified or identifiable individuals may be processed.
TERMS AND CONDITIONS
1. Data Controller
The Data Controller is UIM Albania, with headquarters in Tirana, Themistokli Gërmenji, Ndërtesa 8, n.7, 1011, Tel. 068 822 1111
The Data Controller may be contacted via certified email (PEC) at info@uimalbania.org
2. Subject of the Processing
The Data Controller processes personal and identifying data (including, but not limited to, IP address, first name, last name, phone number, email address, etc. — hereinafter “personal data” or “data”) either directly or through an external Data Processor.
The types of data processed, the methods of processing, the legal basis, and the retention periods are indicated below:
a) Browsing data (technical data collected automatically while browsing the website):
Type: IP addresses, domain names, URI addresses, time of request, browser used, referring page, video resolution, device type.
Legal basis: legitimate interest of the Data Controller (Art. 6(f) of Law 124/2024) to ensure the proper functioning of the website.
Retention period: maximum 12 months, unless otherwise required by law or for investigative purposes.
b) Data provided by the user via email:
Type: first name, last name, email address, phone number, message content.
Legal basis: performance of pre-contractual or contractual measures at the request of the data subject (Art. 6(b) of Law 124/2024).
Retention period: 24 months from receipt of the email, unless a longer retention period is required by law.
c) Data from the contact form on the website:
Type: name, email address, subject of the request, message.
Legal basis: explicit consent of the data subject (Art. 6(a) of Law 124/2024) provided when filling out the form.
Retention period: 24 months from the date the form is submitted.
d) Data collected via the newsletter:
Type: email address and, where provided, first and last name.
Legal basis: explicit consent of the data subject (Art. 6(a) of Law 124/2024), provided at the time of subscribing to the newsletter.
Retention period: until the data subject revokes consent. After revocation, the data will be deleted within 30 days.
e) User data collected through social media and video-sharing platforms:
Type: public interactions (likes, comments, shares), public profile data, direct messages.
Legal basis: legitimate interest of the Data Controller in managing its social media presence (Art. 6(f) of Law 124/2024).
Retention period: in accordance with the policies of the respective platforms. Direct messages are retained for 12 months.
f) Data collected via Meta Platforms and developer tools (n8n automations):
When you interact with UIM Albania via Meta platforms (including Facebook, WhatsApp, and Instagram) or our integrated Meta Developer applications (e.g., Messenger API, Lead Ads, Facebook Login, or Conversions API), we process the following data:
• Identification data: first name, last name, Facebook/Instagram ID.
• Contact data: email address, phone number (if provided in Lead Ads).
• Behavioral data: interactions with our ads (clicks, views, form submissions).
• Conversion data: actions taken on the website after interacting with a Meta ad (via Conversions API).
• Communication content: messages sent via Messenger or WhatsApp Business API.
Legal basis: consent of the data subject (for Lead Ads) and legitimate interest of the Data Controller (for conversion analysis and campaign optimization).
Retention period: lead data is retained for 24 months. Aggregated conversion data is retained for 36 months.
n8n automations are used exclusively to process and route data to UIM Albania’s internal systems, without sharing it with unauthorized third parties.
3. Data Transfers
The Data Controller is merely an end user, and the technology used is owned by these service providers; therefore, to learn about any further processing carried out by these entities, you must contact them directly.
A list of additional platforms used by the Data Controller is provided in Section 8 (Cookie Policy) of this privacy notice.
4. Rights of the Data Subject
Right of access by the data subject (Art. 14, Law 124/2024): The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to such personal data and to the information provided for by applicable Albanian law.
Right to rectification (Art. 15, Law 124/2024): The data subject has the right to obtain from the data controller the rectification without undue delay of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to obtain the completion of incomplete personal data, including by submitting a supplementary statement.
Right to erasure (“Right to be forgotten”) (Art. 16, Law 124/2024): The data subject has the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay, in the cases provided for by applicable law, in particular when the data are no longer necessary in relation to the purposes for which they were collected, when the data subject withdraws his or her consent or objects to the processing, or when the data have been processed unlawfully.
Right to restriction of processing (Art. 17, Law 124/2024): The data subject has the right to obtain, where possible, the restriction of the processing of their personal data if any of the circumstances specifically identified by applicable Albanian law apply.
Right to data portability (Art. 18, Law 124/2024): If the processing is based on consent or a contract and is carried out by automated means, the data subject has the right to receive the personal data they have provided to the data controller in a structured, commonly used, and machine-readable format, and has the right to transmit such data to another data controller.
Right to object (Art. 19, Law 124/2024): The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. The data controller shall refrain from further processing unless it demonstrates compelling legitimate grounds for the processing.
Automated decision-making, including profiling (Art. 20, Law 124/2024): The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her. In any case, the Data Controller does not use automated decision-making processes.
Right to lodge a complaint with the supervisory authority (Art. 86, Law 124/2024): Without prejudice to any other administrative or judicial remedies, a data subject who believes that the processing concerning him or her violates the law has the right to lodge a complaint with the Albanian Data Protection Commissioner (Komisioneri për Mbrojtjen e të Dhënave Personale — www.idp.al).
5. How to Exercise Your Rights
You may exercise your rights—including the right of access, rectification, erasure, restriction, data portability, and objection—at any time by sending a written request to the following contact information:
• Email: info@uimalbania.org
• Mail: UIM Albania, Rruga Themistokli Gërmenji, Ndërtesa 8, No. 7, 1011 Tirana
To request the erasure of your data, please send an email with the subject line: “Request for Data Erasure.”
We will process your request and respond free of charge within 30 days of receipt, as required by law. If the request is complex, this period may be extended by up to an additional 60 days, but we will notify you of any delays within the first 30 days.
6. Data Processors
The updated list of data processors is kept at the Data Controller’s headquarters.
In any case, data subjects who wish to know who the data processors are and/or whether they process data relating to them must submit a request to that effect in accordance with the procedures set forth in Section 5 of this privacy policy.
7. Data Protection Officer (DPO)
The Data Controller has appointed a Data Protection Officer (DPO), whose role is to oversee compliance with the General Data Protection Regulation.
The DPO can be contacted at the following email address: info@uimalbania.org
We recommend that you contact the DPO exclusively for matters related to the protection of personal data.
8. Cookie Policy
Cookies (en.wikipedia.org/wiki/HTTP_cookie) are text strings sent by a web server to the user’s Internet browser, automatically stored by the browser on the user’s computer, and automatically sent back to the server each time the user visits the site or returns to it.
By default, almost all web browsers are set to automatically accept technical cookies. Users can delete or disable cookies at any time by changing their browser settings.
Technical (essential) cookies: This website uses technical cookies that do not require prior consent. They are necessary for the website to function properly (session management, language preferences, security).
Statistical cookies (analytics): The site uses Google Analytics (provided by Google LLC) to collect anonymous information about site usage (pages visited, session duration, traffic source). The data is anonymized and aggregated. You can disable Google Analytics using the opt-out tool available at:
https://tools.google.com/dlpage/gaoptout
Profiling cookies (marketing): The website uses third-party cookies for advertising profiling purposes, for which the user must provide explicit consent via the cookie banner. Active services include:
• Facebook / Meta Pixel (Meta Platforms Inc.) — policy: https://www.facebook.com/policies/cookies
• Google Ads / Google Tag Manager (Google LLC) — policy: https://policies.google.com/technologies/ads
For more information on behavioral advertising and to manage cookie preferences, visit: http://www.youronlinechoices.com
Additional tools to disable third-party cookies:
• Network Advertising Initiative (NAI): www.networkadvertising.org/choices
• Digital Advertising Alliance (DAA): www.aboutads.info/choices
• Digital Advertising Alliance of Canada (DAAC): https://youradchoices.ca/en/about-daac
• Australian Digital Advertising Alliance (ADAA): http://www.youronlinechoices.com.au/opt-out/
Legal notice: This cookie policy applies exclusively to this website and not to other sites linked to it.
9. Changes to This Privacy Policy
Should there be any changes to the purposes and/or methods of processing described in this Privacy Policy, or should there be any substantial changes to the processing carried out by UIM Albania, the data controller will notify data subjects of such changes by posting a notice on the website and, where possible, via email.
We recommend that you check this page periodically for any updates.
Latest update: 2026-03-18