Privacy

I. THE OBJECT

The purpose of this Guide is to inform the subjects of personal data on the method of collection, processing, dissemination, storage and security measures taken for their data.
Based on:

• The Constitution of the Republic of Albania;
• Law No. 9887, dated 10.03.2008 "On the Protection of Personal Data", amended;
• Law No. 9918, dated 19.05.2008 "On Electronic and Postal Communications", amended;
• KDI instruction
• KDIMDP instruction no. 7, dated 09.06.2010 "On the processing of personal data in institutions of higher education", as amended, as well as other bylaws issued pursuant to the law.

The University of Tirana carries out the legal processing of personal data respecting and guaranteeing basic human rights and freedoms and, in particular, the right to preserve private life.

A. Data Protection

Data protection is based on:
1. Processing in a fair and legal manner;
2. Collection for specific, clearly defined, legal purposes and processing in accordance with these purposes;
3. The sufficiency of the data, which must be related to the purpose of the processing and not exceed this purpose;
4. The accuracy that the data must have and, when necessary, must be updated, every reasonable step must be taken to delete or correct inaccurate or incomplete data, in relation to the purpose for which they were collected or to which are processed further;
5. Keeping it in a form that allows the identification of data subjects for a time, but not longer than is necessary for the purpose for which they were collected or further processed.

B. Dissemination of Personal Data

UT does not transmit your personal data to third parties, except in cases where your consent has been expressly given for such a thing.

C. Security measures related to personal data
The University of Tirana is aware of the importance and sensitivity of personal data and strictly respects the security measures provided for in Law no. 9887, dated 10.03.2008 "On the protection of personal data". This goal is achieved through the use of advanced and modern techniques to maintain its databases and computer systems. Likewise, UT ensures that the transfer and recording of data is done with full security measures in full compliance with the relevant legislation.

II. RIGHTS OF THE DATA SUBJECT

A. Right of Access

1. Every person has the right, without payment, upon written request, received from the controller:
a) confirmation of whether the personal data is being processed or not, information about the purpose of the processing, about the categories of processed data and about the recipients and categories of recipients to whom the personal data is disseminated;
b) in an understandable form, personal data and available information about their source;
2. The controller, within 30 days from the date of receiving the request, informs the data subject or explains to him the reasons for not providing the information.

B. Controller

• University of Tirana, Public Institution of Higher Education;
• University of Tirana, Rectorate, "Dëshmorët e Kombit" Boulevard, "Mother Teresa" Square, Tirana. Post box no. 183.
• Web: www.unitir.edu.al

C. The right to request blocking, correction, deletion of processed data

1. Every data subject has the right to request the blocking, correction or deletion of data free of charge, when it becomes known that the data about him are not regular, true, complete or have been processed and collected in violation of the provisions of this law.
2. The controller, within 30 days from the date of receiving the data subject's request, must inform him about the legal processing of the data, the execution or non-execution of blocking, correction or deletion.
3. When the controller does not block, correct or delete the data requested by him, the data subject has the right to complain to the commissioner.

III. DUTIES OF THE CONTROLLER

A. To process the data:

1. In the processing in an honest, fair and legal manner;
2. In the collection for specific, clearly defined, legitimate purposes and in the processing in accordance with these purposes;
3. The data must be sufficient, related to the purpose of the processing and not exceed this purpose;
4. In factual accuracy and, when necessary, updating and taking any action to ensure that inaccurate and irregular data are deleted or changed;
5. In keeping in that form, which allows the identification of data subjects for a time, but not longer than is necessary for the purpose for which they were collected or further processed.

B. The purposes of data processing by the controller are:

1. To enable and administer student data related to their functions from initial application to graduation and beyond, to manage ongoing relationships with graduates;
2. To plan and calculate the services provided;
3. To produce information about the various projects that the government may have for education, for the determination of funds for HEIs based on the number of students;
4. To enable HEI staff to identify and communicate with students while they are studying at the University but also after they leave;
5. To monitor academic progress over a period of time towards qualifications;
6. For the monitoring of complaints, eg: diploma complaints;
7. To provide student support services, including financial support services for students (scholarships, loans, etc.).

 

C. The categories of personal data that may be processed by the controller are listed below:

1. Data collected in Student Data Registers: – Name, Surname and address; – Date of Birth; – Gender; – Nationality and residence; – Contacts (Phone numbers, e-mail address); – Area of ​​permanent residence; – Academic reference; – Unique matriculation number; – Parental profession; – Sensitive data; – Proof of penalty;
2. Updated data: - Address of home and relative; - The address where he is attending the University; – Entry and other qualifications; – Demographic information; – Funding, scholarships and fees granted; – Bank details (eg mandate payments); – Participations, progress and current status; – Final results; – Photo of the Student;
3. The data collected for the purpose of obtaining visas from students studying abroad is the certificate issued by the HEIs where they study, where: - name, patronymic, surname; – birthday and place of birth; – field of study; – study course (eg second year student).

 

D. The exceptional cases when data processing can be done without the student's consent are:

1. When university personnel need information for teaching, administrative actions, or evaluation purposes;
2. When providing addresses of students and courses for members and for those new students who are expected to enroll;
3. When a cooperating organization provides tuition, assessment or support for a University course (only for students enrolled in a course offered in connection with that cooperating organization);
4. When the court, the police and the prosecution deal with the prevention of crime or the operation and enforcement of the law;
5. For hospital emergencies.

E. The right to appeal

Any person, who claims that their rights, freedoms and legal interests for personal data have been violated, has the right to complain or notify the commissioner and request his intervention to replace the violated right. After this appeal, in accordance with the Code of Civil Procedure, the data subject may appeal to the court.

F. Questions or Complaints

• Through the above explanation, UT hopes to have accurately and fully informed you about your privacy issues.
• If you have questions, complaints/requests, or remarks about these matters, do not hesitate to contact us at the following address:

 

G. Controller

• University of Tirana
• University of Tirana, Institution of Public Higher Education
• Address: University of Tirana, Rectorate, "Dëshmorët e Kombit" Boulevard, "Mother Teresa" Square, Tirana. Post box no. 183.
• Web: www.unitir.edu.al
• Email: info@unitir.edu.al
• Email: franceska.celmeta@unitir.edu.al  UT Right to Information Coordinator.

• Email:grisilda.kadiu@unitir.edu.alPersonal data protection officer, for the University of Tirana.

 

H. Data Protection Commissioner
Street "A. Toptani", Second Floor. In case the data subject has appealed, the controller does not have the right to change the personal data until the final decision is made.

I. Other
1. This Guide is for informational purposes only, based on the relevant legislation, and does not entail any legal obligation.
2. This Guide must be understood in compliance with the general conditions of law no. 9887, dated 10.03.2008 "On the protection of personal data" and for any other element not foreseen by this guide, the provisions of the law on the protection of personal data and the by-laws issued in its implementation will be applied.
3. This privacy notice to achieve the protection of personal data includes only publications made UT and does not include publications made within the framework of the link between this site and other cooperating sites.
4. We encourage you to read the privacy statements on any other websites you visit in connection with the UT site, as the terms of those sites may differ from those set by UT.
5. The University of Tirana reserves the right to change or modify this guide at any time, in accordance with any possible change in legislation in the field of personal data protection and privacy.