Who We Are

For the purposes of this policy, “we” refers to University Metropolitan Tirana (UMT), a higher education institution offering various academic and research programs in accordance with Albanian legislation on education and personal data protection. This notice is in compliance with Law No. 124/2024 “On the Protection of Personal Data” and other applicable regulations in force in the Republic of Albania.

Contact

If you have any questions, concerns, or requests regarding how we process your data, you can contact our GDPR Office at the following address: GDPR Office – University Metropolitan Tirana (UMT) Address: Rruga Sotir Kolea, Tirana, University Building of Metropolitan University of Tirana, Tirana, Albania Email: info@umt.edu.al Phone: +355 692591493

Processing of Personal Data

UMT processes the personal data of students, academic and administrative staff, applicants, alumni, parents/guardians, partners, and third parties related to its academic and research activities for the purposes of:

• Developing academic programs and supporting students;
• Managing contractual relationships with staff and collaborators;
• Ensuring academic quality, assessment, and graduation;
• Managing payments, scholarships, and financial services;
• Institutional promotion and development through websites, social media, and other publications;
• Providing appropriate learning conditions and physical security through CCTV systems;
• Complying with legal requirements, inspections, and reporting to public authorities such as MoES, AKKSHI, KSHL, etc.

Legal Basis for Processing

UMT processes data based on:

• Contractual obligations with students and employees;
• Legal obligations under applicable laws on education and data protection;
• Legitimate interests of the institution for efficient functioning, academic development, and representation;
• Consent of individuals, where required (e.g., use of images for marketing purposes).

What Data We Collect

Depending on your relationship with UMT, we may collect the following categories of data:

• Identifying data: name, surname, personal ID number, date of birth, identity documents;
• Contact details: email, phone number, address;
• Academic data: grades, student records, degrees, participation in activities, training;
• Financial data: payments, fees, bank account information (excluding sensitive data such as credit card numbers);
• Health or sensitive data (with consent or for legal reasons);
• Data from our security systems (CCTV, access to IT systems);
• Images/photos/videos taken during university events or for promotional purposes.

Data Retention and Sharing

Your data is securely stored for a specified period in accordance with our data retention policies and may be shared with:

• State institutions for legal purposes;
• Third-party contractors for IT, marketing, or consultancy services, under confidentiality agreements;
• International academic partners for collaboration or student exchange purposes (when necessary and with prior consent).

Your Rights

You have the right to:

• Request access to your personal data;
• Request correction or deletion of your data (where applicable);
• Restrict processing or object to the use of your data;
• Withdraw consent at any time, if processing is based on consent;
• Lodge a complaint with the Commissioner for the Right to Information and Protection of Personal Data.

Marketing and Communications

UMT may use your contact information to:

• Inform you about events, announcements, or university promotional campaigns;
• Invite you to alumni activities or fundraising events;
• Share success stories, publications, and research projects via social media and official channels.

You may choose to opt out of such communications at any time by notifying us via email at: info@umt.edu.al

Policy Changes

UMT reserves the right to update this Privacy Notice. The latest version will be published on the official university website.