Personal data protection

Privacy.

This notice explains what personal data the Radiologists Association of Kosovo (SHRK) collects, why, who sees it, how long we keep it and what your rights are, in line with Law No. 06/L-082 on the Protection of Personal Data.

Updated 30 October 2026

Who is responsible for your data

The data controller is the Radiologists Association of Kosovo, a non-governmental organisation with registration number 5100386-1, seated at the Clinic of Radiology, University Clinical Center of Kosovo, Prishtina.

For any question about your data, write to info@shrk-ks.org.

What data we collect

Website visitors: we use no advertising, no tracking analytics and no third-party cookies. The site stores only one technical cookie to remember your chosen language. Like any server, our hosting provider logs technical visit data (such as your IP address) for security and operation.

Members: first name and surname, email address, phone number (if you give it), specialty or residency status, the institution where you work, membership fee status, and participation in votes and in meetings of the Association's bodies.

Correspondence: when you write to us, we keep your message and the contact details you send.

We do not collect health data, identification numbers, bank details or photographs, unless you give them to us yourself for a specific purpose.

Where your data comes from

Most data you give us yourself, when you apply for or confirm your membership.

To invite Kosovo's radiologists to join, we use the name, email address and membership number from the register of the Kosovo Chamber of Physicians. We use them only for the invitation and to verify that you are a radiologist. If you don't confirm, we send one reminder and nothing more.

Every invitation has a link to ask us not to contact you again. Your name and email are then deleted, and we keep only an encoded trace (hash) of the address so we don't invite you again.

Why we use it and on what basis

To administer membership under the Statute: the members' register, membership fees, invitations to the Assembly, votes and minutes.

To meet legal obligations, such as accounting and reporting requirements for non-governmental organisations.

For the Association's legitimate interests: official correspondence, the security of the platform and keeping the institutional archive.

With your consent: anything optional, such as showing your name in a public list of members. By default your data is not public, and you can withdraw consent at any time.

Electronic voting

When you vote electronically, the system records only the fact that you voted, to prevent double voting. Your vote is stored separately and cannot be linked to you, either by the Board or by the platform's administrators.

Who sees your data

Within the Association, only the people who need your data for their duties see it, such as the Secretary and the members of the Board.

For technical operation we use service providers that process the data only on our behalf: Supabase (database, with servers in Frankfurt, Germany), Vercel (website hosting) and Purelymail (email). Some of them may also process data outside Kosovo.

We do not sell your data or give it to anyone for marketing. We disclose it only when the law requires it.

How long we keep it

We keep membership data while you are a member and for two years after you leave, and then delete it.

We keep financial records as long as accounting law requires. Minutes and decisions of the Association's bodies are part of its archive.

Your rights

You have the right to request access to your data, its correction, deletion or the restriction of its processing, to object to processing, to receive a copy of it, and to withdraw any consent you have given.

We will reply within 30 days. If you believe your data is not being handled properly, you have the right to complain to the Information and Privacy Agency (AIP).

Send requests by email to info@shrk-ks.org

Security

The members' database is stored on servers in the European Union, data is transmitted encrypted, and access to it is restricted by role. Administrative accounts are protected with two-step sign-in.

Changes to this notice

If we change this notice, the update date above will change. We will notify members by email of any significant change.