PRIVACY POLICY OF UPTC SH.P.K.

UPTC sh.p.k. pays special attention to your privacy. Therefore, we would like to inform you about the types of data we collect from you, how we process, store, protect, or share this information, and your rights throughout this process.

Legality of Data Collection & Processing

The collection and processing of data by UPTC sh.p.k. is carried out in accordance with the Constitution of the Republic of Albania, specifically Article 35, international conventions ratified by the Albanian state, Law No. 124/2024 "On the Protection of Personal Data," and other legal and regulatory frameworks that mandate the collection and processing of personal data.

General Data Protection Regulation (GDPR) No. 2016/679 of the European Union also applies where relevant.

Under this regulatory framework and according to accepted commercial standards, the collection and processing of data by UPTC sh.p.k. is legitimate if:

a) You have consented to the collection and processing of your personal data for one or more purposes, and this consent may be written, electronic, or in any form that expresses your will.

b) It is necessary for the performance of a contract or relationship in which you are a party.

c) It is carried out to fulfill legal obligations.

d) It is done to protect the vital interests of individuals.

e) It is carried out in the public interest or in the exercise of official duties as a controller.

f) It is carried out to exercise the legitimate rights of the controller or a third party, excluding cases where it conflicts with fundamental rights.

Types of Data Collected

UPTC sh.p.k. collects and processes your personal data, such as name, surname, date of birth, place of birth, residence, ID or passport number, personal identification number, age, gender, health-related data, photographs, email, phone number, and similar information, when you apply or personally register this data on forms or applications for one or more purposes defined in this policy.

Additionally, UPTC sh.p.k. collects and processes data related to your use of our website, such as the interest shown in certain issues while browsing, through the IP address of the computer or mobile phone used to access our site, or by using cookies and similar tracking tools for automatic data collection.

The IP address, or Internet Protocol address, is a number assigned to your browser when you access the internet and is automatically provided by the internet server. An IP address does not necessarily constitute identifiable information because multiple people may access the same computer through the internet.

Cookies are small files placed in your browser when you visit the UPTC sh.p.k. website, which allow recognition of your browser and collect and store information about the services you have used or the issues you have shown interest in. Other technological tracking tools, such as web beacons, are small graphic files placed on a website or in an email, mainly used to monitor activity and provide information to the central server, which may belong to a hosting page, ad network, or another third party.

Purpose of Data Collection & Processing

The collection and processing of data is done for the following purposes:

a) Scheduling appointments and registering or opening a file for a medical, dental, or aesthetic visit or treatment.

b) Diagnostic and medical, dental, or aesthetic treatment.

c) Contacting you for medical reasons related to the continuation of medical procedures.

d) Concluding an application and or valid contract to benefit from one of our products or services.

e) Identifying issues and problems related to products or services, addressing complaints, and improving services.

f) Fulfilling legal, regulatory, and or contractual obligations.

g) Addressing delayed obligations or other legal or contractual rights by our institution or in cooperation with third parties or law enforcement institutions.

h) Scientific research, statistics, surveys, and analyses.

i) Personalizing and promoting products or services that you have shown or may show interest in, communication, and providing important information regarding company services, products, news, changes, and various offers through digital marketing and communication tools.

j) Communicating with you for other purposes upon your request or notification.

Data Sharing and Transfer

UPTC sh.p.k. may share your data with companies within the same group, including parent and subsidiary companies. In case of a change in control due to events such as sale, merger, bankruptcy, or similar events, UPTC sh.p.k. reserves the right to transfer your data to the entity acquiring control. In such cases, all data will be processed in accordance with this Privacy Policy, unless changes are made in accordance with the section on Privacy Policy Changes and or in compliance with the applicable legal framework and or for the purpose of improving data collection and processing processes.

Furthermore, UPTC sh.p.k. cooperates with third parties and contractors that assist in the provision, management, and processing of products and services, as well as in operational activities on the website, technological operations, data analysis, research, statistics, email communications, advertising, and promotions. Through the respective contracts, these parties are required not to use or disclose your data for purposes other than those necessary for the fulfillment of the contract.

Your data may also be shared by UPTC sh.p.k. with public authorities or third parties in the following cases:

a) To fulfill legal obligations.

b) When disclosure is necessary for the protection of your safety or the safety of others, public health interests, investigations, or prevention of fraud or other risks.

c) For addressing outstanding obligations or protecting our other legal or contractual rights, by our institution or in cooperation with third parties or law enforcement agencies, or in case of transferring or assigning rights and obligations to a third party.

d) In exceptional cases such as responding to threats or risks to persons, property, or in defense of fundamental rights.

e) To public and health authorities as required by law.

f) To public or private bodies for reimbursement of healthcare expenses.

g) To other specialists for necessary consultation regarding the required healthcare services.

h) To substitutes, collaborators, third parties, and contractors with whom the company cooperates, including promotional partners.

Data will not be transferred to a third country or an international organization, except under the conditions provided in this section.

Our website may contain links to other websites that apply their own Privacy Policies. UPTC sh.p.k. does not transfer your data to these websites. However, you are advised to review their Privacy Policies, as we do not control how these websites collect or process your data.

Data Security & Retention Period

For the security of personal data, our institution has implemented appropriate technical and organizational measures to prevent unauthorized access, unlawful processing, loss, or destruction of data, ensuring confidentiality and integrity. However, users should be aware of risks arising from external cyberattacks that are beyond UPTC sh.p.k. control.

Your data will be retained for a period ranging from 5 to 20 years, or for as long as necessary in accordance with the purposes of processing and legal requirements, including:

a) Achieving the purpose for which the data was collected.

b) Fulfilling contractual obligations.

c) Compliance with legal obligations.

d) Resolving disputes or legal issues.

e) Exercising fundamental rights.

f) Protecting public interest.

g) Archiving for public, scientific, or historical purposes.

Your Rights

At any time, you have the right to access information about the personal data that has been collected and processed about you, as well as to request correction, updating, restriction of processing in specific legal cases, cessation of processing, and or deletion of your data when its processing is no longer necessary, or when you have withdrawn your consent.

However, deletion of data cannot be carried out if there is any reason stated in the Data Security and Retention Period section above. Also, please be aware that, from a technical and technological standpoint, it may not be possible to delete every record stored on our servers.

In exercising your rights, you have the option to opt out of receiving communications, emails, publications about UPTC sh.p.k. products or services, or other promotional notifications by unsubscribing via the link or by updating your notification preferences.

The above rights can be exercised by submitting a formal request to UPTC sh.p.k. at the address provided on this page, or by emailing [email protected], or by calling +355676084446. Upon receiving your request, the relevant departments within UPTC sh.p.k. will evaluate it and inform you of the actions taken.

Protection of Children's Privacy

UPTC sh.p.k. collects and processes data and information about children only for health-related purposes and in compliance with legal requirements and is committed to protecting their privacy.

Contacting UPTC sh.p.k. Regarding Privacy and Your Data

For any questions, clarifications, requests, or complaints regarding the collection and processing of your data, you may contact UPTC sh.p.k. at the following addresses:

Central Office: Lagjja Loni Dhamo, Lushnje, Albania

All branches of UPTC sh.p.k. in Albania

Email: [email protected]

Tel/Cel: +355676084446

Upon receiving your request, the relevant departments within UPTC sh.p.k. will evaluate it and inform you of the actions taken. If you believe that the issues or concerns regarding the collection and processing of data have not been properly addressed, you have the right to contact the Information and Data Protection Commissioner at www.idp.al and or other competent judicial authorities.

Changes to the Privacy Policy

UPTC sh.p.k. reserves the right to modify this Privacy Policy and the products or services offered at any time. Any changes will become effective on the date of publication on this page, or upon notification via email, or through any other communication channels.

Continued use of this website after such changes to the Privacy Policy shall be considered as acceptance of those changes. We encourage you to periodically review the Privacy Policy to stay informed of the latest updates and practices. If you do not accept the terms of this Policy, you should discontinue use of this website.