Privacy Policy

Last updated: 17.03.2026

KRCT – Kosova Rehabilitation Centre for Torture Victims is committed to protecting the privacy and personal data of all users, partners, beneficiaries, and visitors to our website. This Privacy Policy explains how KRCT collects, processes, uses, and protects personal data and describes the rights individuals have regarding their personal data.

This policy applies whenever KRCT collects or processes personal data through its website, digital platforms, communications, and other interactions.

For the purposes of this policy, “KRCT,” “we,” “us,” or “our” refers to the Kosova Rehabilitation Centre for Torture Victims and its authorized representatives acting on its behalf. KRCT acts as the data controller for the personal data described in this policy.

1. When and How We Collect Your Information

KRCT may collect personal data when you:

  • Visit our website
  • Contact us through an online form or email
  • Subscribe to newsletters or publications
  • Register for events, trainings, or conferences
  • Participate in campaigns, advocacy activities, or research initiatives
  • Apply for employment, internships, or volunteer opportunities
  • Collaborate with KRCT through partnerships or projects

We may also collect limited information from publicly available sources, including social media platforms or public databases, where this is necessary for our work and consistent with applicable law.

2. What Personal Data We Collect

KRCT may collect some or all of the following information:

Basic Contact Information

Information that identifies or could reasonably identify you, including:

  • Name and surname
  • Email address
  • Telephone number
  • Organization or professional affiliation
  • Any information voluntarily provided in communications with us

Technical and Website Information

When you visit our website, we may automatically collect certain technical information, including:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Website usage data
  • Cookies and similar technologies

This information helps us improve website functionality, understand how visitors use the site, and ensure security.

3. Social Media

KRCT may engage with users through social media platforms. When you interact with us on social media, you may allow us access to certain information from your profile depending on your privacy settings.

Information you post publicly or share when interacting with our social media accounts may become publicly available online. We encourage users to review the privacy policies and settings of the social media platforms they use.

4. Legal Basis for Processing Personal Data

KRCT processes personal data only where there is a lawful basis for doing so, including:

Legitimate interest

Processing necessary for communication, outreach, research, advocacy, or management of organizational activities.

Performance of a contract
Processing required to fulfill obligations related to employment, partnerships, events, or services.

Legal obligation
Processing required to comply with applicable laws or legal processes.

Public interest
Processing related to KRCT’s mission of supporting survivors of torture and conflict-related violence and promoting human rights.

Consent
In certain cases, we rely on your consent, particularly when sending newsletters or electronic communications.

5. How We Use Personal Data

KRCT uses personal data to:

  • Respond to inquiries and requests
  • Manage event registrations and communications
  • Share information about KRCT activities, publications, and initiatives
  • Support advocacy and awareness campaigns
  • Improve our website and digital services
  • Conduct research, analysis, and reporting
  • Ensure the security and integrity of our systems

We may also use anonymized or aggregated information for statistical and research purposes.

6. Sharing Personal Data

KRCT does not sell or rent personal data.

We may share personal data only in limited circumstances, including:

  • With service providers who support website hosting, IT services, or communications
  • With partners involved in joint projects where data sharing is necessary
  • Where disclosure is required by law or legal process
  • To protect the rights, safety, or security of individuals or the organization

All service providers processing data on our behalf are required to ensure appropriate data protection safeguards.

7. International Data Transfers

In some cases, personal data may be processed or stored outside Kosovo by trusted service providers. When this occurs, KRCT ensures that appropriate safeguards are in place to protect personal data in accordance with applicable data protection laws and internationally recognized standards.

8. Children’s Privacy

KRCT’s website is not intended for children under the age of 16, and we do not knowingly collect personal data from children without appropriate legal authorization.

If we become aware that personal data from a child has been collected without consent, we will take appropriate steps to delete the information.

9. Your Rights

In accordance with Kosovo Law No. 06/L-082 on Personal Data Protection and applicable international standards, individuals have the right to:

  • Access personal data held about them
  • Request correction of inaccurate data
  • Request deletion of personal data in certain circumstances
  • Restrict processing of personal data
  • Object to processing where applicable
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the relevant supervisory authority

Requests regarding personal data may be submitted using the contact details provided below.

10. Data Retention

KRCT retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.

Where appropriate, data may be retained longer for legitimate organizational, legal, or security purposes.

11. Data Security

KRCT takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

Our website uses secure communication protocols and encryption technologies where appropriate.

However, no system can guarantee complete security, and users should exercise caution when sharing information online.

12. External Links

KRCT’s website may contain links to external websites. KRCT is not responsible for the privacy practices or content of third-party websites. Users should review the privacy policies of those websites before providing personal information.

13. Cookies and Tracking Technologies

KRCT uses cookies and similar technologies to understand how visitors use our website and to improve functionality.

Cookies may include:

Necessary Cookies

Essential for the functioning of the website.

Analytics Cookies

Help us understand how visitors interact with the website so we can improve performance.

Users may manage cookie preferences through their browser settings or through the website’s cookie consent banner.

Further details are available in the Cookie Policy section of this website.

14. Changes to This Policy

KRCT may update this Privacy Policy from time to time. When updates are made, the revised version will be posted on this page with an updated revision date.

We encourage users to periodically review this policy.

15. Contact Us

If you have questions regarding this Privacy Policy or the processing of your personal data, please contact:

Kosova Rehabilitation Centre for Torture Victims (KRCT)
Hamez Jashari street, 16b/2, Pristina 10000, Kosovo
Email: [email protected]
Website: https://krct.org/ 

OTHER

PUBLICATIONS

NEWS