Draft pending legal review. This notice accurately describes what this website does with personal data. It has not yet been reviewed against RVA's wider processing activities or approved by the Advisory Board, and it does not replace the organisation's full data protection policy.
Data controller
Roma Versitas Albania (RVA) is an Albanian non-profit association, registered by Decision No. 5347 of the Tirana Judicial District Court, dated 30.05.2016.
Roma Versitas AlbaniaRruga Princ Vidi Nd.7, H1, K.2
Tirana 1029, Albania
rva@rvalb.org
RVA determines the purposes and means of processing personal data and ensures that such processing is lawful, fair and transparent.
What this website collects
This site collects personal data in exactly two places.
The contact form
If you send us a message we store your name, email address, optionally your organisation, the enquiry type you selected, and the message itself. We use it only to reply to you. We keep contact messages for up to 24 months, after which they are deleted.
Newsletter
If you subscribe we store your email address, any name you give, and the time and basis of your consent. Subscription uses double opt-in: you receive a confirmation email and are not added until you confirm. Every message includes a one-click unsubscribe link. Unsubscribed addresses are deleted within 30 days.
Legal basis
Both are based on your consent, which you give explicitly by ticking the box on the relevant form. You can withdraw consent at any time by writing to rva@rvalb.org or, for the newsletter, by using the unsubscribe link.
Cookies and analytics
This website sets no advertising or tracking cookies, and does not use third-party analytics that profile you across sites. Because of that, there is no cookie consent banner — there is nothing to consent to.
Who else processes your data
- Supabase — hosts the database in which form submissions are stored.
- ImageKit — serves the images on this site. It receives the usual technical request data (IP address, user agent) needed to deliver a file.
- Cloudflare — serves the site and provides security protection.
We do not sell personal data, and we do not share it for marketing.
Your rights
You have the right to ask what data we hold about you, to have it corrected or deleted, to withdraw consent, and to complain to the Information and Data Protection Commissioner of the Republic of Albania. To exercise any of these, write to rva@rvalb.org.
Photographs of people
We publish photographs of programme participants only where consent has been recorded, and we do not publish identifiable images of children as a matter of default practice. If you appear in a photograph on this site and want it removed, write to us and we will remove it.