Complain here

Frequently Asked Questions (FAQ)

Personal data is any information relating an individual, whether it identifies an individual or it relates to his or her private, professional or public life. It can be anything, the name, a photo, an email address, bank details, posts on social media, medical information, or a computer IP address.
Data protection concerns personal data and how it is processed. Kosovo's Law on the Protection of Personal Data provides a legal framework to ensure that personal data in Kosovo is processed fairly and lawfully.
A data controller is an institution, body or an individual that determines the purpose and means of the processing of personal data. In particular, the controller has the duties of ensuring the quality of data and of notifying the processing operation to the Agency. The data controller is also responsible to implement security measures protecting data processing and storage. The controller is also the entity that receives requests from data subject to exercise their rights.
Only those who are authorised by the controller to process personal data – on the basis of legitimate reason – may do so – naturally within the limits of the authorisation. The controller needs to ensure that technical and organisational measures are undertaken s as to protect the personal data with an appropriate level of security. The controller remains legally responsible of someone who works for the controller would disclose personal data and breach data protection legislation.
Notification is a formal declaration by the data controller to the National Agency for the Protection of Personal Data that personal data are processed. The notification must contain certain information, such as the identity of the data controller, the purpose of the processing operation, the categories of data subjects, any recipients of the data, as well as a description of security measures adopted. In some cases, a processing operation may be subject to prior checking by the Agency.
The data subject is the person whose personal data are collected, held or processed.
Each individual whose personal data are processed is safeguarded by a general right, which is that the Kosovo institutions must process his/her persona data fairly and lawfully, and only for legitimate purposes. This general right is complemented by a number of specific rights of the data subject such as the right to know if a data controller is processing data concerning him or her. The data subject is also to be informed about the particular processing, and the right to objet the obligatory processing and the legal grounds.

Follow Us on Twitter