This policy describes what we do with personal information we collect from you and the ways in which we may collect that information. The purpose of this privacy notice is to inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from). We’ll also tell you about your privacy rights and how the data protection law protects you.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Kreston Albania.
• Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
• Country refers to: Albania.
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Website.
• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Website refers to Kreston Albania, accessible from kreston.al 
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

1. Who we are and important information

Kreston Albania is part of the Kreston Global network that comprises independent firms of accountants. Kreston Albania respects your privacy because we understand that it is important to you. Kreston Albania is committed to respecting your privacy and protecting your personal information. By submitting personally-identifiable information, you consent to Kreston Albania’s use of such personal information as described herein. Please review this Privacy Policy to learn more about how we collect, use, share and protect the personal information that we have obtained.

We may collect information from you through your use of our website, when you request information from us or engage our services. By using any of our services including our website and by providing us with any personal information, you are consenting to the use of your personal information as set out in this policy.  Please do not send us any personal information if you do not want your personal information to be used in this way.

We are committed to protecting your personal information, maintaining your privacy and security. This document, compiled in the form of a Privacy Policy, is intended to inform you of how and why we process your personal information through (a) Our website: www.kreston.al (hereinafter referred to as “website”) and the Performance of our activity, and (b) In our capacity as Data Controllers.

2. Legal framework in collecting and processing data

Kreston Albania will collect and process data in accordance to the legal framework in power, as mentioned in the Albanian Constitution, Article 35  and enforced by the Law No.9887, dated 10.03.2008, amended “For the protection of personal data” and other complementary regulations.

According to this regulatory framework and in accordance to commercially accepted standards, the collection and processing of Kreston Albania data is legitimate if:

a) the client has consented to the collection and the processing of personal data for one or more purposes;

b) is carried out for conclusion of a contract in which the client will be part of;

c) is carried out in pursuance of legal obligations;

d) is carried out for the protection of the individuals’ vital interests;

e) is performed for the fulfillment of duties in the public interest or in the implementation of official duties in the role of the controller;

f) is carried out for the implementation of the legitimate rights of the controller or a third party, aside from the cases when they conflict with the fundamental rights.

3. What information do we collect and process?

Kreston Albania collects, uses, stores and processes personal data of entities to the extent that is necessary throughout its activity. For this purpose, we process personal data as listed below:

• If you would like to contact us via a message on our website: name, surname, e-mail address, telephone number (if you wish to provide it), personal information in the content of the message (if it contains such);
• If you are one of our clients and would like to check your practice information with us: the number of client files and data in case you are a company, information about your practices with us, the stage where it is located;
• If you apply to become our client: name, surname, e-mail address, mobile number, Personal Identification Number, purpose of service;
• If you send a request for consulting online: your name, e-mail address, mobile phone number, Personal Identification Number (PIN), date of birth, your comment, your IP address.

Please note that part of the processing of your personal information above is required to be made available in order to fulfill a contract with us. If you do not provide us with your identification information or contact information it is impossible for us to offer you our services.

A number of facilities on our website invite you to provide us with personal information. Kreston Albania does not collect any personal data from visitors to its website or our users of Internet Services that is not voluntarily provided (Personal Information). The purpose of these facilities is apparent at the point that you provide your personal information and we only use your information for those purposes.

If you fail to provide personal data

Where we need to collect your personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services). In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.

4. How we use your personal data

We use your personal information for the following purposes:

•  To carry out our obligations arising from any contracts entered into between you and us;
• To comply with our legal and professional responsibilities;
• To provide and improve our services to you and to our clients including handling personal information of others on behalf of our clients;
• To conduct our recruiting and selection process;
• To maintain and update our records;
• For research, planning, service development, security or risk management;
• To provide you with information about our services, and to advise you of news and industry updates, events, promotions and competitions, reports and other information, and to carry out market research campaigns;
• For other legitimate business purposes;
• To personalize and promote products / services or issues for which you have shown or may show interest.
• To conclude a valid application and / or contract to benefit from one of our products / services;
• Get in touch with you upon your request;
• To identify and report legally cases of fraud or of similar cases;
• Identify matters and issues related to products / services, or dealing with raised complaints;
• Conduct analysis, statistics, research, questionnaires.

5. Distribution and dissemination of the data

Kreston Albania may only distribute your data in accordance to the Privacy Policy, unless the changes to this policy are made under the section below relating to Privacy Policy Changes and / or when they are made in accordance with the legal framework in force and / or for the purpose of improving the process of data collection and processing. The dissemination of your data by Kreston Albania to the official authorities or third parties may occur in the following cases:

a) the fulfillment of legal obligations;

b) when the publication is made for the protection of our legitimate rights, or the protection of your security or other persons ,to investigate and avoid fraud or other misunderstandings;

c) in special cases as a response to threats or risks to a person, property or the protection of fundamental rights.

Kreston Albania collaborates with third parties and contractors that assist in providing product and service management, or assisting in operational activity on the web site, technological actions, data analysis, research, statistics, performing e-mail support, advertising and promotion. Through the respective contracts, Kreston Albania and these parties have agree to use or advertise your data for purposes other than those required for the execution of the contract concluded between the parties.Our site may have links to other sites that implement their own Privacy Policy. Kreston Albania does not disseminate your data to these pages, but you should keep reviewing their Privacy Policy. Kreston Albania does not guarantee how these pages collect and process your data.

We may provide your personal information to other entities within the Kreston Network in order to provide you with information that may be of interest to you and to conduct market and other research. Personal information may also be provided to third parties in order to respond to your requests as part of any corporate transaction such as a sale, divestiture, reorganization, merger or absorption, or where those parties manage information on behalf of ours.

All such disclosures may involve the transfer of personal information to countries or regions without similar personal data protections to those in force in your country of residence.

Personal information may be provided to law enforcers, regulatory institutions or other agencies, as well as third parties, in each case to be in line with legal and regulatory obligations or requirements.

By providing this information through the website, you are agreeing to their disclosure as described above.

6. Security and deadline for data retention

For personal data security, our institution has set up and implemented certified tools and technology systems that provide encryption and data confidentiality, which undergo continuous testing for security and effectiveness, enable real-time restoration of data access in case of a technical or physical incident and it is accessible only by authorized persons. Nevertheless, you should consider the risks that may come as a result of external cyber attacks that lie outside the will and the ability of Kreston Albania.

In determining the data retention period, we consider:

• legislation in force:
• the fulfillment of the contractual relationship
• the fulfillment of the purpose and nature for which they are collected;
• the legitimate basis according to which they are processed from the beginning as well as the expectations and requirements of our customers;
• the end of the liability period in which litigation or investigations might arise in respect of our services.

When we no longer need the information on personal data, we ensure that this data is deleted or destroyed. We will keep your information for as long as we need to in accordance with the purpose for which you first shared your personal information with us and we will only keep it beyond that purpose when we have reason to based and clearly justified to retain your personal data, such as account maintenance or responding to customer requests.

7. Rights and options

You have the right to access information on the data that has been collected and processed for you, to request correction, update, prohibit of further processing and / or delete these data at any time. However, deletion of data can not be exercised if there is any of the causes cited in the section above “Security and Data Retention”. Likewise, you should bear in mind that in the technical and technological aspect it is impossible to delete any registration stored on our server.
The above mentioned rights can be exercised by submitting a formal application to Kreston Albania at the address given on this site or by submitting this request to info@kreston.al or by calling +355 44 50 42 81. Upon receipt of your request, the respective units of Kreston Albania will evaluate the application and will notify you of the actions taken.
You are able to choose the withdrawal from receiving communications, emails, Kreston Albania products / services, or other advertising notices by opting out of the link or by deleting the choice of arrival options notices, publishers etc.

You have the right to:

• request a copy of the personal data which we hold about you;
• request that we correct any personal data if it is found to be inaccurate or out of date;
• request your personal data is erased where it is no longer necessary to retain such data;
• withdraw your consent to the processing at any time, where consent was the lawful basis for processing your data;
• request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), where applicable i.e. where our processing is based on consent or is necessary for the performance of our contract with you or where we process your data by automated means);
• where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
• object to our processing of personal data, where applicable i.e. where processing is based on our legitimate interests (or in performance of a task in the public interest/exercise of official authority); direct marketing or processing for the purposes of scientific/historical research and statistics).

8. Change the privacy policy

Kreston Albania reserves the right to change at any time this Privacy Policy which will become effective on the date of their publication on this site. Use of this site, even after changes to the Privacy Policy, is considered approved by you. We encourage the periodic revision of the Privacy Policy to update you with the latest changes and practices.

9. Queries or requests

If you have any questions about the Privacy Policy regarding your personal data, practices or communications with us, please contact us via our contact page (https://www.kreston.al/contact/).