This Privacy Policy describes how EPOKA University collects, processes, stores, and protects personal data in compliance with Law No. 124/2024 on the Protection of Personal Data of the Republic of Albania. This document also incorporates regulations adapted from the General Data Protection Regulation (GDPR) in the national context.[1]

[1] This law is fully aligned with:

- Regulation (EU) No. 679/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, published in the Official Journal of the European Union, L series, No. 119/1, dated 4 May 2016;

- Directive (EU) No. 680/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA, CELEX number 32016L0680, published in the Official Journal of the European Union, L series, No. 119, dated 4 May 2016, p. 89.

- Lawfulness, Fairness, and Transparency: Personal data is processed lawfully and transparently.

- Purpose Limitation: Data is collected for specific purposes and not processed further for incompatible purposes.

- Data Minimization: Only necessary and relevant data is collected.

- Accuracy: Data must be accurate and updated when necessary.

- Storage Limitation: Data is stored only for as long as necessary for the purpose for which it was collected.

- Integrity and Confidentiality: Data is protected against unauthorized processing.

- Accountability: The University is responsible for demonstrating compliance with legal principles.

EPOKA University may collect and process the following categories of personal data:

- Identification data: Name, surname, date of birth, national identification number.

- Contact data: Address, email, phone number.

- Academic data: Grades, certificates, study programs.

- Financial data: Tuition fee payments.

- Sensitive data: Health information data, only when necessary and with explicit consent.

- Website visit data: IP address, access status, referring URL.

The University guarantees the exercise of data subject rights in accordance with Law No. 124/2024:

- Right to Information: Clear information on data processing.

- Right to Access: The right to obtain information on personal data stored and processed.

- Right to Rectification: Correction of inaccurate or incomplete data.

- Right to Erasure (Right to be Forgotten): Deletion of data in cases provided by law.

- Right to Restriction of Processing: Limitation of data processing.

- Right to Data Portability: Transfer of personal data to another controller.

- Right to Object: Objection to data processing.

- Right Not to Be Subject to Automated Decision-Making: Profiling and automated decisions.

When data processing is based on the data subject's consent, such consent must be freely given, specific, informed, and unambiguous. The data subject has the right to withdraw consent at any time.

EPOKA University implements technical and organizational measures to ensure data security, including:

- Data encryption.

- Access limitation to authorized personnel only.

- Data storage for limited periods in accordance with collection purposes.

International data transfers are carried out only when protective measures required by law are guaranteed, such as standard clauses approved by the Commissioner.

EPOKA University uses cookies to improve website performance and analyze usage. Users can manage their cookie preferences through browser settings.

Please visit the following pages for more information on Google Analytics terms of use and Google's privacy policy.

Any changes to this privacy policy will be published on the official website and, when necessary, communicated via email.

For questions or to exercise your rights regarding personal data protection, please contact us at:

- Email: info@epoka.edu.al 

- Phone: +355 4 2232 086 / +355 4 2222 117

- Postal address: EPOKA University, St. Tirana - Rinas, Building E, Postal Code 1032 Vore, Tirana / Albania