Privacy Policy
Last updated: 1.04.2026
Who We Are
Women on Boards Albania (WOB-AL) is a nonprofit organization dedicated to advancing women’s leadership and board-level representation in Albania. We collect and process personal data only in connection with our organizational activities, including events, training programs, online webinars, publications, and newsletter communications.
WOB-AL acts as the Data Controller for all personal data collected through this website and our related activities. This means we determine the purposes and means of processing your personal data and are responsible for ensuring it is handled lawfully, fairly, and transparently.
What Personal Data We Collect
We collect only the data that is necessary for the specific purpose for which it is requested (the principle of data minimisation). Depending on how you interact with us, we may collect the following categories of data:
Event & Training Registration
- First and last name
- Email address
- Job title and organization / company name
- Country of residence
- Professional background (where relevant to tailoring program content)
Newsletter Subscription
- First name and last name
- Email address
- Professional sector or area of interest (optional)
LinkedIn Live Event Registration
- First and last name (auto-populated from LinkedIn profile)
- Email address
- Job title and company name
- Country / Region
Website & Technical Data
- IP address and browser type (collected automatically via standard web analytics)
- Pages visited and time spent on the site (aggregated, anonymized where possible)
- Cookie data (where you have provided consent via our cookie banner)
We do not collect sensitive categories of data (e.g., health data, political opinions, ethnic origin) through any of our standard registration or subscription processes.
Why We Collect Your Data and on What Legal Basis
Under GDPR Article 6 and Albania’s Law No. 124/2024, every instance of data processing must rest on a lawful basis. The table below outlines our processing activities, purposes, and the corresponding legal basis.
Processing Activity | Purpose | Legal Basis (GDPR Art. 6) |
Event / Training Registration | To manage your participation, communicate event details, send joining links, and issue certificates of attendance | Contract (Art. 6(1)(b)) — processing necessary to fulfil your registration request |
LinkedIn Live Event Registration | To enable access to the live event and send follow-up resources | Contract (Art. 6(1)(b)) |
Newsletter Subscription | To send periodic updates on WOB-AL activities, publications, and opportunities | Consent (Art. 6(1)(a)) — you opt in at the point of subscription |
Post-event communications / follow-up | To share event recordings, resources, or related programming that you expressed interest in | Legitimate Interest (Art. 6(1)(f)) — where reasonably expected by participants |
Website analytics | To understand how our website is used and improve user experience | Consent (Art. 6(1)(a)) — via cookie banner |
Legal compliance | To meet obligations under Albanian law and international data protection regulations | Legal Obligation (Art. 6(1)(c)) |
Note on Consent: Where consent is the legal basis (particularly for newsletters), you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal is always as easy as giving consent — every email contains an unsubscribe link.
How We Use Your Data
We use your personal data strictly for the purposes stated above.
We do not:
- Sell your data to third parties
- Use your data for automated profiling or solely automated decision-making
- Send unsolicited commercial communications unrelated to our mission
We may use your name and professional title (with your prior consent) in participant lists, certificates, or event-related publications. We will always ask separately if we wish to feature you in testimonials, case studies, or photographs.
Who We Share Your Data With
WOB-AL shares personal data only where necessary and with appropriate safeguards:
Recipient | Purpose | Safeguard |
LinkedIn (for LinkedIn Live events) | Enabling event registration and live streaming | LinkedIn’s own Privacy Policy and GDPR compliance |
StreamYard | Streaming platform for LinkedIn Live events | StreamYard’s Data Processing Agreement |
Email marketing platform (e.g., Mailchimp / equivalent) | Sending newsletters and event communications | Data Processing Agreement in place; EU Standard Contractual Clauses where applicable |
Event platform providers | Managing registrations and participant communications | Data Processing Agreement in place |
Website hosting and analytics provider | Hosting the wobal.org website | Anonymized analytics where possible; DPA in place |
We do not share your data with third parties for their own marketing purposes. Any service providers acting as data processors on our behalf are bound by contract to process data only on our instructions and in compliance with applicable data protection law.
International Data Transfers
WOB-AL may use service providers based outside Albania or the European Economic Area (EEA). Where personal data is transferred outside Albania or the EEA, we ensure that appropriate safeguards are in place in accordance with Albania’s Law No. 124/2024 and GDPR standards, including:
- EU Standard Contractual Clauses (SCCs)
- Transfers to countries recognized as providing an adequate level of data protection
- Data Processing Agreements with service providers that include transfer safeguards
How Long We Keep Your Data
We retain personal data only for as long as necessary for the original purpose for which it was collected, in line with GDPR’s storage limitation principle (Article 5(1)(e)).
Data Type | Retention Period |
Event / Training registration data | 3 years from the date of the event, then securely deleted |
Certificates of attendance | 5 years (professional record-keeping) |
Newsletter subscriber data | Until you unsubscribe, or 2 years of inactivity, whichever comes first |
LinkedIn Live registration data | 1 year from the event date |
Website analytics data | 13 months (standard analytics cycle), then anonymized |
Financial / legal records (where applicable) | As required by Albanian law (typically 7 years) |
When data is no longer required, we securely delete or anonymize it so that it can no longer be linked to an individual.
Your Rights
Under GDPR and Albania’s Law No. 124/2024, you have the following rights regarding your personal data:
- Right to be informed — You have the right to know how and why we process your data (this policy fulfils that obligation)
- Right of access — You may request a copy of the personal data we hold about you
- Right to rectification — You may ask us to correct inaccurate or incomplete data
- Right to erasure (“right to be forgotten”) — You may request deletion of your data, subject to legal retention requirements
- Right to restriction of processing — You may ask us to limit how we use your data in certain circumstances
- Right to data portability — You may request your data in a structured, commonly used, machine-readable format
- Right to object — You may object to processing based on legitimate interests; you can always unsubscribe from newsletters
- Right to withdraw consent — Where processing is based on consent, you may withdraw at any time
To exercise any of these rights, contact us at: info@wobal.org
We will respond within 30 days of receiving your request. Requests are free of charge unless manifestly unfounded or excessive.
How We Protect Your Data
WOB-AL takes the security of your personal data seriously. We apply appropriate technical and organizational measures to protect your data against unauthorized access, accidental loss, alteration, or disclosure, including:
- Password-protected access to databases and email platforms
- Use of reputable, GDPR-compliant service providers
- Regular review of data access permissions
- Limiting data access to authorized staff and volunteers only
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Albanian Data Protection Commissioner in accordance with applicable legal timeframes.
Cookies
Our website (wobal.org) may use cookies and similar technologies to improve your browsing experience and collect anonymized analytics data. You will be asked for your consent before any non-essential cookies are placed on your device. You may update your cookie preferences at any time through the cookie settings banner on our website.
For more detail on how we use cookies, please see our separate Cookie Policy.
Third-Party Links
Our website and communications may contain links to third-party websites (e.g., LinkedIn, partner organizations). This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.
- Children’s Data
WOB-AL’s programs and services are directed at professional adults. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child under 16 has provided us with personal data, please contact us immediately at info@wobal.org and we will promptly delete the information
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will post the updated policy on our website with a new “Last Reviewed” date. Where appropriate, we will notify you by email.
Contact and Complaints
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:
Women on Boards Albania (WOB-AL)
Email: info@wobal.org
Website: www.wobal.org
If you are not satisfied with our response, you have the right to lodge a complaint with the Albanian data protection supervisory authority: Commissioner for the Right to Information and the Protection of Personal Data (IDPP). Website: www.idp.al
This Privacy Policy was drafted in April 2026 in alignment with EU GDPR principles and Albania’s Law No. 124/2024 on the Protection of Personal Data, which came into full effect on 1 February 2025 and is fully harmonised with GDPR standards.