The Agency for Quality Assurance in Higher Education (ASCAL), in the exercise of its institutional functions and responsibilities, is committed to respecting privacy and protecting personal data, in accordance with Law No. 124/2024 “On Personal Data Protection”, the relevant legislation in force, and ASCAL’s internal regulation on the protection and processing of personal data.“On Personal Data Protection”, and ASCAL’s internal regulation on the protection and processing of personal data.
Processing and protection of personal data
ASCAL processes personal data in the exercise of its statutory functions, including quality assurance processes in higher education, institutional and study programme accreditation, institutional analysis, the administration of electronic systems, and the fulfilment of administrative duties.
Depending on the purpose of processing, personal data may include identification data, contact details, professional and educational information, as well as other data necessary for the performance of institutional functions.
Personal data is processed on lawful grounds, in compliance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability.
ASCAL implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, damage, alteration or unlawful processing. Access to personal data is restricted to authorised personnel, in accordance with their duties and responsibilities.
Personal data is retained and managed in accordance with applicable legislation and the retention periods established by the relevant institutional acts. Disclosure of personal data to other entities is carried out only where permitted or required by law.
Rights of data subjects
In accordance with Law No. 124/2024“On Personal Data Protection”, data subjects have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to object to the processing of their personal data.
These rights may be exercised in accordance with the conditions, procedures and limitations established by law.
Data Protection Officer and submission of requests
ASCAL has appointed a Data Protection Officer (DPO), who performs the duties prescribed by the applicable legislation, contributing to the provision of advice, monitoring of compliance and observance of legal requirements concerning personal data protection.
For information, clarification or the exercise of rights relating to the processing of personal data, individuals may contact ASCAL at the following email address:
- Email: info@ascal.al
Requests are reviewed in accordance with the procedures and time limits established by the applicable legislation. Responses are provided without undue delay and, as a rule, no later than 30 days from receipt of the request, with the possibility of an extension in cases provided for by law.
Right to lodge a complaint
Any individual who considers that the processing of their personal data infringes the rights guaranteed by the legislation in force has the right to lodge a complaint with the Commissioner for the Right to Information and Personal Data Protection, the independent supervisory authority in the Republic of Albania, as well as to pursue other legal remedies available under the law.