{"id":677,"date":"2026-08-05T14:44:06","date_gmt":"2026-08-05T12:44:06","guid":{"rendered":"https:\/\/shijakugroup.al\/?page_id=677"},"modified":"2026-08-05T15:44:24","modified_gmt":"2026-08-05T13:44:24","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/shijakugroup.al\/en\/privacy-policy-2\/","title":{"rendered":"POLITIKAT E PRIVAT\u00cbSIS\u00cb, KUSHTET DHE TERMAT"},"content":{"rendered":"<section class=\"kc-elm kc-css-767903 kc_row\"><div class=\"kc-row-container  kc-container\"><div class=\"kc-wrap-columns\"><div class=\"kc-elm kc-css-413791 kc_col-sm-12 kc_column kc_col-sm-12\"><div class=\"kc-col-container\">\n<div class=\"kc-elm kc-css-946808 kc-title-wrap\">\n\n\t<h1 class=\"kc_title\">Privacy Policy (Last Updated: August 2026)<\/h1>\n<\/div>\n<div class=\"kc-elm kc-css-923818 kc_text_block\"><\/p>\n<p>This Privacy Policy is intended to inform data subjects about the manner in which personal data is collected, processed, disclosed, and protected, as well as the security measures applied to the data processed through our website. These processes are carried out in full compliance with the applicable legal and regulatory framework governing the protection of personal data.<\/p>\n<p>This document is intended to inform data subjects about the manner in which personal data is collected, processed, disclosed, and protected, as well as the security measures applied to the data processed through our website. These processes are carried out in full compliance with the applicable legal and regulatory framework governing the protection of personal data.<\/p>\n<p><strong>Legal Basis:<\/strong><\/p>\n<ul>\n<li>The Constitution of the Republic of Albania;<\/li>\n<li>Law No. 124\/2024 \"On the Protection of Personal Data\";<\/li>\n<li>Law No. 54\/2024 \"On Electronic Communications in the Republic of Albania\", together with its implementing by-laws and other applicable subordinate legislation;<\/li>\n<li>The Regulation \"On the Protection, Processing, Storage and Security of Personal Data\", approved by order of the Company's Administrator.<\/li>\n<\/ul>\n<p><strong>Processing of Personal Data<\/strong><br \/><strong>Protection of Personal Data<\/strong><br \/>The Data Controller, Shijaku sh.p.k., collects and processes personal data fairly and in accordance with the requirements of Law No. 124\/2024 \"On the Protection of Personal Data\", with a particular focus on:<\/p>\n<ul>\n<li>Collecting and processing personal data for specific purposes that are clearly defined and permitted by law.<\/li>\n<li>Protecting the vital interests of the data subject during the collection and processing of personal data, without exceeding the purpose for which the data is processed.<\/li>\n<li>Fulfilling the Data Controller's legal obligation to ensure the accuracy of personal data, including updating, deleting, and correcting inaccurate data where necessary in relation to the purpose for which it was collected or processed.<\/li>\n<li>Pursuing the legitimate interests of the Data Controller or of a third party to whom the data has been disclosed, except where such interests override the rights and privacy of the data subject.<\/li>\n<li>Retaining and storing personal data only for as long as necessary to fulfill the purposes for which it was collected or subsequently processed.<\/li>\n<\/ul>\n<p><strong>Personal data is processed:<\/strong><\/p>\n<ul>\n<li>to protect the vital interests of the data subject;<\/li>\n<li>to comply with a legal obligation to which the Data Controller is subject;<\/li>\n<li>to safeguard the vital interests of the data subject;<\/li>\n<li>for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller or in a third party to whom the data has been disclosed;<\/li>\n<li>for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into or amending such a contract.<\/li>\n<\/ul>\n<p><strong>Key Principles<\/strong><br \/>The Company values the personal data entrusted to it and is committed to processing such data in a fair, transparent, and secure manner. The key principles applied by the Company in this process are as follows:<\/p>\n<ul>\n<li class=\"translation-block\"><strong>Lawfulness:<\/strong> Personal data is collected only in a fair, lawful, and transparent manner.<\/li>\n<li class=\"translation-block\"><strong>Data Minimisation: <\/strong>The collection of personal data is limited to what is directly relevant and necessary for the purposes for which it is collected.<\/li>\n<li class=\"translation-block\"><strong>Purpose Limitation: <\/strong>Personal data is collected only for specified, explicit, and legitimate purposes and will not be processed in a manner that is incompatible with those purposes.<\/li>\n<li class=\"translation-block\"><strong>Accuracy: <\/strong>Personal data is kept accurate and, where necessary, up to date.<\/li>\n<li class=\"translation-block\"><strong>Data Security and Protection: <\/strong>Appropriate technical and organizational measures are implemented to ensure an adequate level of security and protection of personal data, taking into account, among other things, the nature of the data being protected. Such measures are designed to prevent unauthorized disclosure or access, accidental or unlawful destruction, accidental loss, alteration, or any other unlawful form of processing.<\/li>\n<li class=\"translation-block\"><strong>Access and Rectification: <\/strong>Personal data is processed in accordance with the legal rights of data subjects, including their right to access and request the correction of their personal data.<\/li>\n<li class=\"translation-block\"><strong>Storage Limitation: <\/strong>Personal data is retained in accordance with applicable data protection laws and regulations and for no longer than is necessary for the purposes for which it was collected.<\/li>\n<li class=\"translation-block\"><strong>Safeguards for Third Parties: <\/strong>Access to and transfer of personal data to third parties is carried out in accordance with applicable law and subject to appropriate contractual safeguards.<\/li>\n<\/ul>\n<p><strong>Categories of Personal Data<\/strong><br \/>The personal data collected and processed by the Data Controller includes both special categories of personal data (sensitive personal data) and ordinary personal data. The processing of special categories of personal data is subject to specific legal requirements, including the obligation for the Data Controller (or Data Processor, where applicable) to obtain the explicit written consent of the data subject, unless otherwise permitted by applicable law.<\/p>\n<p><strong>Rights of the Data Subject<\/strong><br \/>The data subject has the right, at any time, to be informed about the personal data collected and processed by the Data Controller. The Data Controller shall provide the data subject with information regarding the categories of personal data being processed, the purposes of the processing, the manner in which the data is processed, and any other information necessary to ensure fair and transparent processing.<\/p>\n<p><strong>Right of Access and Information<\/strong><br \/>The data subject has the right to request confirmation as to whether or not their personal data is being processed. Such information may be obtained by submitting a written request, free of charge. The data subject also has the right to obtain a copy of the personal data being processed, information about the purposes of the processing, and the categories of personal data being processed. Furthermore, the data subject has the right to object to the further processing of their personal data where permitted by applicable law.<\/p>\n<p>The data subject has the right to access their personal data where they have been informed that such data is being processed.<\/p>\n<ul>\n<li>to request the restriction, rectification, or erasure of their personal data, free of charge, where they become aware that the data relating to them is inaccurate, incomplete, incorrect, or has been collected or processed in violation of the applicable legal provisions;<\/li>\n<li>to be informed by the Data Controller within 30 days as to whether the requested restriction, rectification, or erasure has been carried out, together with the relevant explanation;<\/li>\n<li>to object, at any time, to the processing of their personal data, except where otherwise provided by law;<\/li>\n<li>to lodge a complaint where they believe that their rights, freedoms, or legitimate interests regarding their personal data have been violated, or to notify the Commissioner for the Right to Information and Protection of Personal Data and request the Commissioner's intervention.<\/li>\n<\/ul>\n<p><strong>Right to Rectify Personal Information<\/strong><br \/>If the personal information held by the Company is inaccurate or incomplete, the data subject has the right to request that it be corrected or updated. Where such information has been disclosed to third parties, the Company shall inform the data subject of the rectification. If requested by the data subject and where permitted by applicable law, the Company shall also inform the data subject of the third parties with whom their personal information has been shared, so that the data subject may contact those parties directly if necessary.<\/p>\n<p><strong>Security of Personal Data<\/strong> <br \/>The Data Controller recognizes the importance and sensitivity of personal data and employs dedicated personnel who are trained in the applicable legal framework and certified for this purpose. Personal data is processed both manually and electronically, in full compliance with physical information security measures and electronic security safeguards against malicious software, as defined in the applicable internal regulations and specific guidelines.<\/p>\n<p>Data Processors and other entities involved in the processing of personal data operate under the supervision and control of the primary Data Controller. Any person acting under the authority of the Data Controller and processing personal data is required to sign a confidentiality declaration, through which they undertake to comply with the requirements of applicable law and this Privacy Policy regarding the protection of privacy and the security of personal data, both during the performance of their duties and after the termination of their engagement.<\/p>\n<p><strong>Confidentiality and Security of Your Personal Information<\/strong><br \/>The Company is committed to keeping your personal information secure and takes reasonable precautions to protect it against loss, misuse, unauthorized access, disclosure, alteration, or destruction. To this end, the Company has implemented appropriate security policies, procedures, and technical measures designed to safeguard personal information against:<\/p>\n<ul>\n<li>Unauthorized access;<\/li>\n<li>Improper use or disclosure of personal data;<\/li>\n<li>Unauthorized modification;<\/li>\n<li>Unlawful destruction or accidental loss.<\/li>\n<\/ul>\n<p>All employees of the Company and any Data Processors who have access to or are involved in the processing of personal information are required to maintain the confidentiality of the personal data of all users of our services. They remain bound by these confidentiality obligations both during their employment or engagement and after the termination of their duties.<\/p>\n<p><strong>Other Provisions<\/strong><br \/>The Data Controller collects and maintains the contact details of data subjects for specified purposes, including responding to inquiries or complaints submitted by them. The Data Controller allows the data subject to withdraw, in writing, the consent previously given at any time.<\/p>\n<p>The Data Controller obtains the data subject's approval (consent) confirming that the data subject has been informed of and agrees to the processing of their personal data in accordance with the provisions of this Privacy Policy.<\/p>\n<p>The Data Controller is committed to safeguarding the privacy of personal data and may update this Privacy Policy from time to time. Where changes are made, the Data Controller will inform data subjects accordingly.<\/p>\n<p><strong>Communication and Inquiries<\/strong><\/p>\n<p class=\"PDq2pG_selectionAnchorContainer translation-block\" data-start=\"247\" data-end=\"577\">If you have any questions, requests, or complaints regarding the processing of your personal data, please contact us first at <strong data-start=\"399\" data-end=\"426\"><a class=\"decorated-link cursor-pointer\" rel=\"noopener\" data-start=\"401\" data-end=\"424\" target=\"_self\">shijaku@shijakugroup.al. <\/a><\/strong>Shijaku sh.p.k. will review your request or complaint and respond within the time limits prescribed by applicable law.<\/p>\n<p class=\"translation-block\">If, after receiving our response, you believe that your rights have not been respected or that your complaint has not been resolved satisfactorily, you have the right to lodge a complaint with the  <strong data-start=\"756\" data-end=\"837\">Commissioner for the Right to Information and Protection of Personal Data<\/strong>, in accordance with Law No. 124\/2024 \"On the Protection of Personal Data\".<\/p>\n<p>Shijaku sh.p.k. is continuously developing its services, and this Privacy Policy, as well as the Terms and Conditions, may be updated from time to time. Unless otherwise stated, this Privacy Policy applies to the processing and use of all personal information collected in relation to any data subject.<\/p>\n<p>\n<\/div><\/div><\/div><\/div><\/div><\/section>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-templates\/full-width.php","meta":{"footnotes":""},"class_list":["post-677","page","type-page","status-publish","hentry","kingcomposer","kc-css-system","masthead-fixed"],"_links":{"self":[{"href":"https:\/\/shijakugroup.al\/en\/wp-json\/wp\/v2\/pages\/677","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shijakugroup.al\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/shijakugroup.al\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/shijakugroup.al\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/shijakugroup.al\/en\/wp-json\/wp\/v2\/comments?post=677"}],"version-history":[{"count":11,"href":"https:\/\/shijakugroup.al\/en\/wp-json\/wp\/v2\/pages\/677\/revisions"}],"predecessor-version":[{"id":698,"href":"https:\/\/shijakugroup.al\/en\/wp-json\/wp\/v2\/pages\/677\/revisions\/698"}],"wp:attachment":[{"href":"https:\/\/shijakugroup.al\/en\/wp-json\/wp\/v2\/media?parent=677"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}