Last updated: March 2026
PRIVACY POLICY
This Privacy Policy explains how Mitrovica Women Association for Human Rights (MWAHR) collects, uses, stores, and protects personal data when you visit our website at www.mwahr.org. It applies to all personal data collected through this website.
This Policy is issued in compliance with Kosovo Law No. 06/L-082 on the Protection of Personal Data and Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), to the extent it applies to our processing activities.
1. Data Controller
The data controller responsible for your personal data is:
Organisation: Mitrovica Women Association for Human Rights (MWAHR) Website: www.mwahr.org Email: info@mwahr.org Address: Mitrovice/Mitrovica, Kosovo Privacy Contact: info@mwahr.org (attn: Privacy)
Note: As a small non-profit, MWAHR does not currently process data at a scale requiring a formally appointed Data Protection Officer. All privacy-related requests and concerns can be directed to the contact above.
2. What Personal Data We Collect
2.1 Automatically Collected Technical Data
When you visit our website, the following data is collected automatically through our web server:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on those pages
- Date and time of your visit
- Referring website (how you found us)
This data is used for security monitoring and website improvement.
2.2 Data You Provide Voluntarily
When you submit an enquiry through our contact form, we collect:
- Name
- Email address
- Phone number
- Any other information you include in your message
You are not required to provide this information to browse our website. We do not collect sensitive personal data (such as health data, political opinions, or religious beliefs) through this website.
3. Purposes of Processing and Legal Basis
GDPR and Kosovo Law No. 06/L-082 require us to identify a lawful basis for each processing purpose:
- Responding to your contact form enquiry → Legal basis: Consent (obtained via opt-in checkbox on the form)
- Website security monitoring and fraud prevention → Legal basis: Legitimate interests (to protect the integrity of our website)
- Improving website functionality → Legal basis: Legitimate interests (to ensure the website functions correctly)
- Compliance with legal obligations → Legal basis: Legal obligation
Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights. You may object to this processing at any time (see Section 8).
4. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. Cookies are small text files placed on your device to help the website function or to collect usage data.
Types of cookies we use:
- Strictly necessary cookies: Required for WordPress core functionality and security. No consent required.
- Analytics cookies (if used): Help us understand how visitors use the site. Require your consent via the cookie banner.
- Preference cookies: Enable storage of user preferences. Require your consent.
Non-essential cookies are only placed after you have given your consent via the cookie banner displayed on your first visit. You can withdraw or change your cookie preferences at any time by clicking ‘Cookie Settings’ in the website footer.
For full details, please refer to our Cookies Policy.
5. Data Retention
We retain personal data only for as long as necessary:
- Contact form submissions (name, email, phone, message): 12 months from receipt, then securely deleted
- Server logs / IP addresses: 30 days, then automatically deleted
- Analytics data (if used): Up to 14 months, then anonymised
- Data retained for legal compliance: As required by applicable law
After the applicable retention period, data is securely deleted or anonymised so it can no longer be linked to an individual.
6. Data Sharing and Third Parties
MWAHR does not sell, rent, or commercially distribute personal data to any third party.
We may share limited personal data with the following, strictly as necessary to operate our website:
Hosting Provider: Our website host processes technical data (including IP addresses) on our behalf as a data processor, acting only on our instructions.
Analytics Provider (if applicable): If we use Google Analytics, data about your visit may be transmitted to Google LLC in the United States under Standard Contractual Clauses. You can opt out via the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout.
Legal Disclosure: We may disclose personal data to authorities where required by law or a binding legal order.
7. International Data Transfers
Some service providers may process your data outside Kosovo or the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs). If you would like details of the specific safeguards in place, please contact us at info@mwahr.org.
8. Your Rights
Under Kosovo Law No. 06/L-082 and GDPR, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Ask us to correct inaccurate or incomplete data
- Right to Erasure: Ask us to delete your personal data, subject to legal obligations
- Right to Restriction: Ask us to limit how we process your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent. This does not affect the lawfulness of prior processing.
- Right to Lodge a Complaint: Lodge a complaint with the Kosovo Information and Privacy Agency (IPA) at www.ipa-ks.org
To exercise any of these rights, contact us at info@mwahr.org with the subject line “Data Subject Request”. We will respond within 30 days. There is no charge for making a request.
9. Automated Decision-Making and Profiling
MWAHR does not carry out any automated decision-making or profiling of website visitors. No decisions with legal or significant effects are made about you based solely on automated processing.
10. Data Security
We have implemented the following measures to protect your personal data:
- HTTPS/SSL encryption for all data transmitted to and from our website
- Access controls to our website backend and server systems
- Regular software updates and security patches for WordPress and all plugins
- Secure password protection for all administrative accounts
- Periodic review of third-party service providers
In the event of a personal data breach likely to result in risk to your rights, we will notify the Kosovo Information and Privacy Agency within 72 hours and affected individuals without undue delay.
11. Children’s Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data without parental consent, please contact us at info@mwahr.org and we will delete it promptly.
12. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy applies only to our website. We encourage you to review the privacy policies of any external sites before providing personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised date. For significant changes, we will display a notice on our website.
Version history:
- 28/03/2026
Contact & Supervisory Authority
For all privacy-related enquiries: info@mwahr.org (Subject: “Privacy Enquiry”) Response time: Within 30 calendar days Kosovo Supervisory Authority (IPA): www.ipa-ks.org
If you are not satisfied with how we have handled your request, you have the right to lodge a complaint with the Information and Privacy Agency of Kosovo.