Thank you for visiting the website of LDA Europe (formerly LDA Balkan). We are committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy explains how we collect, use, share, and safeguard your personal data when you visit ldaeurope.com, become a member, take part in our programs and events, or otherwise interact with us.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable national data protection laws in the countries where we operate, including Albania.

1. Who we are (Data Controller)

The organization responsible for your personal data is Leadership Development Association Europe, headquartered at HV. 26, 1001, Tirana, Albania, together with its national associations and branches across the Balkans and Baltics. You can reach us at info@ldaeurope.com.

2. Information we collect

2.1 Information you provide to us

This may include your name, email address, phone number, country, date of birth, and any information you share when you contact us, apply for membership, register for an event or training, apply to a project (including Erasmus+ mobilities), subscribe to updates, or volunteer with us.

2.2 Information collected automatically

When you use our website, we may collect technical data such as your IP address, browser type, device and operating system, referring pages, and browsing activity, through cookies and similar technologies (see Section 6).

2.3 Special note on young people

As a youth organization, we sometimes collect data from young participants. Where a participant is below the age of digital consent that applies in their country, we require the consent of a parent or legal guardian. See Section 11.

3. How we use your information and our legal bases

We use your personal data to:

• Communicate with you and respond to your inquiries;
• Manage membership, event registration, and participation in our programs and projects;
• Deliver information, resources, and services related to our mission;
• Send newsletters and updates about our activities, events, and campaigns (where you have subscribed);
• Improve our website, services, and user experience, and analyze usage trends;
• Protect against fraud and unauthorized access; and
• Comply with our legal, accounting, and grant/funding obligations.

Depending on the activity, we rely on one or more of the following legal bases under the GDPR: your consent; the performance of a contract or steps taken at your request; our legitimate interests in running and promoting the organization; and compliance with a legal obligation. You can withdraw consent at any time (see Section 9).

4. Marketing communications

We may send you promotional communications, newsletters, and updates about our activities and events where you have opted in or where permitted by law. You can opt out at any time using the unsubscribe link in our emails or by contacting us directly.

5. Sharing and disclosure

We do not sell or rent your personal data. We may share it with:

• Service providers (processors) who help us operate — for example website hosting, analytics (Google), CRM and community tools (such as Salesforce and Slack), email and payment providers. These providers are bound to keep your data confidential and to use it only on our instructions.
• Project partners and funders where required to deliver or report on funded programs (for example Erasmus+ National Agencies and the European Union), in line with the applicable grant requirements.
• Authorities where required by law or in response to valid legal requests.

A current list of our main service providers is available on request.

6. Cookies and analytics

Our website uses cookies and similar technologies to function properly and to understand how the site is used, including through Google Analytics / Google Site Kit. You can control or disable cookies through your browser settings and, where shown, through our cookie consent banner. Disabling some cookies may affect how the site works. [CONFIRM: link to a dedicated Cookie Policy / consent tool if you have one.]

7. International data transfers

Some of our service providers are located outside your country or the European Economic Area (for example in the United States). Where personal data is transferred internationally, we take steps to ensure an appropriate level of protection, such as relying on adequacy decisions or standard contractual clauses.

8. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, or as required to meet legal, accounting, audit, and grant/funding obligations (for example, records tied to EU-funded projects may need to be retained for a defined period). When data is no longer needed, we securely delete or anonymize it.

9. Your rights

Subject to applicable law, you have the right to: access your personal data; request correction or deletion; restrict or object to processing; request data portability; and withdraw consent at any time. To exercise any of these rights, contact us at info@ldaeurope.com.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the competent data protection authority — in Albania, the Information and Data Protection Commissioner (IDP) — or with the supervisory authority in your country of residence.

10. Data security

We use reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s and minors’ privacy

Where we process the personal data of a young person below the age of digital consent in their country, we do so only with the consent of a parent or legal guardian, and for activities and events involving minors we obtain guardian consent as part of registration. If you believe a minor has provided us personal data without the required consent, please contact us and we will take appropriate steps to address it. [CONFIRM the applicable age of digital consent for your main countries — it ranges from 13 to 16 depending on the jurisdiction.]

12. Links to third-party websites

Our website may link to third-party sites (including our related domains and partner organizations). We are not responsible for their content or privacy practices and encourage you to review their privacy policies before providing personal data.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is indicated by the “Last updated” date above. We encourage you to review it periodically.

14. Contact us

By using ldaeurope.com, you acknowledge that you have read and understood this Privacy Policy.