Report Fraud and Corruption
Data Privacy and Security Policy

1. Introduction

This Data Privacy and Security Policy explains how MCA Kosovo processes and protects personal data in compliance with the General Data Protection Regulation (GDPR), Kosovo’s data protection legal framework, and other applicable laws.

2. Data Collection

We collect and process the following types of personal data:
Personal Identification Information: Name, email address, postal address, and phone number.
Usage Data: Information on how users interact with our services and websites.
Cookies and Analytics: We use cookies and tracking technologies, such as Matomo, to monitor website traffic and user behaviour.
Survey Data: Data collected from surveys for research and feedback purposes.

3. Data Usage

The personal data collected is used for the following purposes:
Service Provision: To provide requested services, process inquiries, and improve the user experience.
Grant and Application Processing: For evaluating and processing applications for grants or funding.
Legal Compliance: To comply with legal obligations, including data protection regulations.
Communication: To send updates, notifications, and service-related information.
Survey Processing: For research purposes, with the option for participants to request deletion of their data at any time.

4. Data Storage and Sharing

The data is deleted as soon as it is no longer needed for our record-keeping purposes. The generated statistics and underlying data are not deleted. Data will only be shared within MCA Kosovo or with trusted third parties when necessary, such as Millennium Challenge Corporation. Data will not be shared with unauthorized third parties without prior consent, unless required by law.

5. Data Retention

We retain personal data only as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Afterward, the data will be securely deleted.

6. User Rights

You have the following rights regarding your personal data:
Right to Access: Request a copy of your personal data.
Right to Correction: Correct or update inaccurate data.
Right to Deletion: Request the deletion of your personal data, where applicable.
Right to Object: Object to the processing of your data or withdraw consent for specific purposes, such as marketing.
To exercise these rights, please contact us at [insert contact email].

7. Legal Compliance

Data collection and processing will be conducted in compliance with the Kosovo data protection legal framework, GDPR, and other applicable laws, ensuring that all data processing activities are lawful.

8. Cookies and Analytics

Some cookies are required to provide you with the basic functions of the website and cannot be deactivated.
Key cookies:
cookie – hides the cookie banner to prevent it from showing again.
pll_language – stores the language code of the last browsed page.

We use Matomo (formerly PIWIK) to analyze website usage. Matomo:
– Does not transfer data outside MCA Kosovo servers.
– Does not record session data without consent.
– Uses cookies stored on your computer to analyze usage.
– Keeps your IP address anonymous.
You can allow or disallow web analysis cookies in your browser. For more info: Matomo Privacy Settings.

9. Data Security

We implement strict security measures, including encryption and access controls, to prevent unauthorized access, data breaches, or loss of personal information.

10. Right to Objection and Deletion

Cookies are stored on the user’s computer and transmitted to our site from there. You can:
– Disable or restrict cookies via browser settings.
– Delete previously stored cookies at any time.
Disabling cookies may limit some website functions.

11. Changes to This Policy

We may update this Data Privacy and Security Policy periodically to reflect changes in our practices or laws. Significant changes will be communicated via our website or direct notifications.
Driving Economic Growth for
Shared Prosperity
Contact