HomePrivacy

Privacy policy and confidentiality

How Certi AL collects, uses and protects the information you share with us.

Personal data

The information you send us

Certi AL collects personal information from applicants and clients only on a voluntary basis, when you ask for information or send us a company profile or application form.

Information in a company profile may be shared with accreditation bodies and authorities where the certification scheme requires it. Once reviewed, information is either discarded or kept on file. It is used for internal purposes only and is never sold or passed to third parties.

This website uses Google Analytics cookies only if you accept them in the cookie banner. They measure visits anonymously and are never used for advertising. If you decline, no tracking cookies are set. You can change your choice at any time: .

The data controller is the legal representative of Certi AL Sh.p.k.. For any question about your data, write to info@certi-al.com.

Confidentiality

Privacy, professional secrecy and confidentiality

All data collected shall be used by CERTI AL® or by personnel appointed and duly instructed by CERTI AL® on personal data security and privacy matters, for the purpose of carrying out the requested certification activities, ensuring the efficiency of the services provided, and for statistical purposes, in accordance with applicable data protection legislation, including Law No. 124/2024 on Personal Data Protection and, where applicable, Regulation (EU) 2016/679 (GDPR).

CERTI AL® maintains the strictest confidentiality regarding all information obtained during the performance of its activities. This obligation applies to both employees and non-employed personnel acting on behalf of CERTI AL®.

Where CERTI AL® is required by law or authorised by contractual arrangements to disclose confidential information, the client shall be informed of the information disclosed, unless such notification is prohibited by law.

Information disclosed to Accreditation in the course of their regular assessment, surveillance or verification activities shall be considered authorised disclosure.