Kosovar Civil Society Foundation (KCSF), is committed to protecting your personal data and ensuring transparency in how it is processed, in accordance with the General Data Protection Regulation (GDPR) and applicable laws in Kosovo.

Data Controller

The Data Controller responsible for your personal data is:

Kosovar Civil Society Foundation (KCSF)
Adresa: Besa Imami, Lam A, H1, Kat.12, nr. 65-1, Lakrishtë, Prishtinë, Kosovë
Tel: +383 38 600 633
Email: office@kcsfoundation.org

What Data We Collect

We may collect and process the following personal data:

1. Personal Information: name, surname, email address, phone number
2. Technical Data: IP address, browser type, device information
3. Usage Data: pages visited, session duration, interaction data
4. Communication Data: messages sent via contact forms or email
5. Marketing Data: newsletter preferences and subscription data

How We Use Your Data

We process your personal data to:

1. Respond to your inquiries and requests
2. Provide information about our programs and activities
3. Send newsletters via Mailchimp (only if you subscribe)
4. Improve website functionality and user experience
5. Ensure security and prevent misuse
6. Fulfill legal and reporting obligations

Legal Basis for Processing

We rely on the following legal bases:

1. Consent (e.g., cookies, newsletter subscriptions)
2. Legitimate Interest (e.g., website improvement, security)
3. Legal Obligation (e.g., compliance with donor/reporting requirements)

Data Retention Periods

1. We retain personal data only as long as necessary: Contact form data: up to 12 months
2. Newsletter subscription data: until you unsubscribe
3. Analytics data: up to 14 months
4. Email communications: up to 24 months, unless legally required longer

Data Sharing and Third-Party Processors

We may share data with trusted third-party processors, including:

1. Hosting provider (private server hosted in Germany via Hetzner)
2. Google Analytics and Google Tag Manager
3. Meta (Meta Pixel)
4. Mailchimp (newsletter distribution)
5. YouTube

International Data Transfers

Some of the third-party services we use (such as Google, Meta, and Mailchimp) may transfer personal data outside Kosovo and the European Economic Area (EEA), including to the United States.
In such cases, KCSF ensures appropriate safeguards are in place, including:

1. Standard Contractual Clauses (SCCs) approved by the European Commission

Your Rights

You have the right to:

1. Access your personal data
2. Request correction or deletion
3. Restrict or object to processing
4. Withdraw consent at any time
5. Lodge a complaint with a relevant data protection authority

How to Exercise Your Rights

To exercise your rights, you can contact us at:
office@kcsfoundation.org

We will respond to your request within 30 days

Data Security

KCSF implements appropriate technical and organizational measures to protect your data, including secure hosting, controlled access, and monitoring systems.

Updates to This Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page.