Privacy Policy
National Agency for Cannabis Control/ NACC
Content of the “Privacy Policy” of the National Agency for Cannabis Control (hereinafter referred to as the Agency)
- Informacion i përgjithshëm mbi Agjencinë.
- Përdorimi i informacionit.
- Access to personal data.
- Sharing of personal data.
- Our contacts.
- Information security policy.
- General information about the Agency;
The National Agency for Cannabis Control is a public legal entity under the authority of the minister responsible for health.
The Agency’s mission is to oversee, control, and inspect the cultivation and processing of cannabis plants, as well as the production of their products and by-products for medical and industrial purposes, along with monitoring the enforcement of the law.
The Agency is headquartered in Tirana and extends its activities throughout the territory of the Republic of Albania.
The Agency was established in accordance with Law 61/2023 “On the control of the cultivation and processing of cannabis plants and the production of their by-products for medical and industrial purposes.”
The Agency is led by the Director General, who organizes and directs the entire activity of the institution and is accountable to the minister responsible for health.
A Licensing Commission is established within the Agency, consisting of 7 members representing the Ministry of Health and Social Protection, the Ministry of Interior, the Ministry of Agriculture and Rural Development, and the Ministry of Economy.
- Use of information
This privacy notice informs you about what to expect when the Agency collects your personal data.
This applies to the information collected regarding:
- Individuals who submit various requests for information, meetings, etc.
- Visitors to the Agency’s official website.
- Job applicants, current employees, as well as former employees.
2.1 Individuals who request information from the Agency.
The Agency responds to a person who has previously requested information or consultation regarding the institutional activities, as provided by specific legislation.
2.2 Visitors to our official website.
Through the official website, the Agency transmits and collects information. The purpose of transmitting and collecting information via the internet is to be as close as possible to the entities applying for the Agency’s services (such as authorizations, permits, licenses) or anyone seeking information about the Agency. Through the official website, the Agency assists entities by presenting the law and its obligations.
For visitors to www.nacc.gov.al, the system collects standard information related to clicks on articles or sections of the page. This information is collected for statistical and research purposes (to show visitor access, to see which sections are most sensitive, and consequently the interest of personal data subjects, always without making them identifiable).
The Agency does not use (and does not allow any third party to use) analytical statistical tools to track or collect personal information that would make visitors to our official website identifiable. We do not link any data collected from this site with any personal data that would identify the visitor from any source as part of our usage.
The search engine on our website is designed to be powerful and easy to use, just like searching on Google. The search is made possible by a hardware component (a ‘search application’) provided by Google, which is hosted on our server and continuously indexes the content on our site. All search queries are handled by the application, and the information is not shared with any third party, including Google.
2.3. Job applicants, current employees, and former employees of the Agency.
When individuals apply for employment with the Agency, we use the information for their application process and to monitor recruitment statistics. When we wish to share data with a third party, for example, when we need to obtain a reference or gather information from other relevant institutions (e.g., the Judicial Status Authority), we do not do so without first informing the subjects, unless this information is required by law.
Personal data related to unsuccessful applicants is kept for 12 months after the recruitment competition has ended, and then destroyed or deleted. We retain anonymized information for statistical purposes regarding applicants, to assist our recruitment activities, but no applicant is identifiable from this data.
When an employee is no longer in employment with the Agency, we prepare a file regarding the period during which they were employed. The data included in it is kept secure and used only for purposes directly related to the individual’s employment.
- Access to personal data.
The Agency ensures full transparency to provide individuals with access to their personal data. Individuals can find out if we hold any personal data by sending us a “request for access to personal data,” based on the Law on the Protection of Personal Data. In cases where a request for information regarding the processing of personal data is made to the Agency, the following procedures are followed:
- We provide a description of the collected data;
- We inform why we retain them;
- We indicate to which recipients we may disclose this data;
- We provide a copy of the information in an understandable form;
- We inform whether the provision of personal data is mandatory or voluntary.
- Disclosure of personal data.
Article 6 of Law no. 61/2023 “On the control of the cultivation and processing of cannabis plants and the production of their by-products for medical and industrial purposes” foresees the process of verifying the integrity of a person’s background. According to this provision, employees of the Agency and licensed or authorized entities must undergo the background verification process.
To carry out the background verification process for Agency employees, as well as for individuals employed by licensed or authorized entities under the provisions of the law, the Agency shares data with the State Police and the relevant authorities or institutions responsible for holding or managing data for this purpose.
- Our contact details.
Requests for information regarding our privacy policy can be sent via email to info@nacc.gov.al or through the contact form at the following link: https://www.nacc.gov.al/kontakt/
- Information security policy.
The Agency processes information for the purpose of fulfilling its legal duties. This may include confidential information about entities and individuals.
The Agency is committed to ensuring the use of information and information systems technology to maintain the integrity and confidentiality of the information under its control.
The Agency’s staff is required to maintain the confidentiality of information provided to them for the exercise of their functions under the law and may only disclose it to legitimate authorities. The Agency provides guidance and training to its staff to enable them to understand and fulfill their responsibilities regarding security compliance. The Agency assesses their integrity before hiring them and monitors their compliance with security obligations.