P a g e 3 | 4
a) confirmation whether or not his personal data are being processed, information on the purposes of processing, the
categories of processed data and the recipients or categories of recipients to whom personal data are disclosed;
b) communication to him in a comprehensible form of the data undergoing processing and of any available
information as to their source;
The information about the data shall be communicated in the form they were at the time when the request was made. Within
30 days upon receipt of the request, the controller informs the data subject or explains the reasons why the information cannot
be provided.
The right to access shall be exercised in respect of the constitutional principles of freedom of speech and information, freedom
of press and professional confidentiality and it may be restricted if it violates national security interests, the foreign policy, the
economic and financial interests of the state, prevention and prosecution of criminal offences.
If access is denied on arguments of violation of national security interests,foreign policy, economic and financial interests of
the state, prevention and prosecution of criminal offences or of the freedom of speech and information or press freedom, the
data subject may require from the Commissioner to check on the exemption for the concrete case. The Commissioner shall
inform the data subject about the undertaken measures.
2. The right to request blocking, rectification and erasure
Every data subject has the right to request blocking, rectification or erasure of his data, free of charge whenever he is informed
that data relating to him are irregular, untrue, and incomplete or have been processed and collected in contradiction with the
provisions of this law.
Within 30 days from receipt of the data subject request, the controller shall notify the data subject on the lawful processing of
the data, whether the blocking, rectification or erasure has been carried out or not.
3. The right of the data subject to refuse
The data subject, pursuant to the law, has the right to object, at any time, free of charge the processing of data related to him
carried out under letter “a” and “b” , unless otherwise stipulated by the law.
a)for the performance of a legal task of public interest or in exercise of powers of the controller or of a third party to whom the
data are disclosed;
b) processing is necessary for the protection of the legitimate rights and interests of the controller, the recipient or any other
interested party. However, in any case, processing of personal data cannot be in clear contradiction with the data subject right
to protection of personal life and privacy.
The data subject has the right to demand the controller not to start processing, or if processing has started, to stop processing of
personal data related to him for the purposes of direct marketing and to be informed in advance before personal data are
disclosed for first time for such purpose.
In any case, when a citizen claims that his rights and personal interests have been infringed, he is entitled to ask the
Commissioner to intervene, according to the provisions of the Law on Protection of Personal Data. In case of conflict with
provisions of other legal acts, the rules of this Instruction, of the Law on protection of personal data and of the specific
legislation on banks in the Republic of Albania shall prevail.
PRIVACY POLICY CHANGES
This privacy statement states our current practices and policies. If our practices change in the future, this statement will be
updated and posted here so that you have the latest information on our data collection and use policies.