Privacy Policy
This policy explains what personal data is collected when you visit this website or contact us, why it is used, and the rights you have. It applies Albanian Law No. 124/2024 “On Personal Data Protection” and, for visitors in the European Union, the General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is Genard Hajdini, founder of the Gjergj Kastrioti Foundation, Rruga Ali Visha, Pall. Standard J, Ap. K, Nd. 69, H. 1, Ap. 4, Tirana 1000, Albania. Email: [email protected] · Phone: +355 69 88 23 169.
2. What data we collect
- When you browse the site: technical data needed to deliver and secure the website, such as IP address, browser type, pages requested and the date and time. This is recorded in server and security logs.
- When you contact us by email, phone or WhatsApp: your name, contact details and anything you choose to include in your message.
- When you apply for admission to one of the Foundation’s education programmes: your application form, transcripts, recommendation letters, certificates and interview notes.
- When you donate or pay through PayPal, GoFundMe or bank transfer: the name, amount, date and contact details that the payment provider shares with us. We never receive your card details.
This website does not use advertising or social-media tracking tools, and it does not sell or rent personal data. It may use Cloudflare Web Analytics, a privacy-first statistics service that counts page views without cookies, without fingerprinting and without building visitor profiles.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Delivering and protecting the website | Legitimate interest in a secure, working website |
| Answering your questions and requests | Your request, and our legitimate interest in replying |
| Processing admission applications | Steps taken at your request before an enrolment agreement |
| Recording donations and payments | Contract and legal obligations such as accounting |
4. Cookies
This website only uses cookies that are strictly necessary for it to work and stay secure, for example a security cookie set by our content delivery network to filter malicious traffic. These do not track you and do not require consent. Fonts are served from our own server, not from third parties. If we ever add cookie-based analytics or other optional cookies, we will ask for your consent first.
5. Who receives your data
- Sfida.PRO (Tirana, Albania) designs, hosts and maintains the website as a data processor. The website is hosted on servers in Germany.
- Cloudflare, Inc. delivers and protects the website and may process technical data in the United States under Standard Contractual Clauses.
- PayPal, GoFundMe, WhatsApp (Meta), Gmail and Google Classroom process data under their own privacy policies when you choose to use them.
- YouTube (Google): our videos are shown as links, not embedded players, so nothing is loaded from YouTube until you choose to watch a video there.
- Partner institutions named on this website receive admission data only if you ask us to share it, or with your consent.
6. How long we keep it
- Server and security logs: up to 30 days.
- Messages and enquiries: up to 2 years after our last contact.
- Admission applications: for the duration of your studies; unsuccessful or withdrawn applications are deleted within 12 months.
- Donation and payment records: as long as Albanian accounting and tax law requires.
7. Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its use, receive it in a portable format, and withdraw any consent you gave at any time. To use these rights, email [email protected]. We reply within one month.
You can also complain to the Albanian Commissioner for the Right to Information and Protection of Personal Data (idp.al) or, in the EU, to your national data protection authority.
8. Security and children
The website uses encrypted connections (HTTPS), regular updates and backups. No website is completely secure, so please do not send highly sensitive information by ordinary email unless necessary. This website is not directed at children under 16; applicants under 16 should apply with a parent or guardian.
9. Changes to this policy
We may update this policy. The date at the top shows the latest version.