Shkolla Digjitale

PRIVACY

Privacy policy

This policy explains what personal data Shkolla Digjitale collects, why we collect it, and how you can control it.

Who we are

Shkolla Digjitale is a private school teaching programming and technology to children and teenagers aged 8 to 18. The legal entity responsible for your data is Shkolla Digjitale SH.P.K., unique identification number (NUI) 810856362, with its registered office at Rruga Pashko Vasa, Nr. 28, Pejton, 10000 Prishtinë. This policy covers the data we collect through our website shkolladigjitale.com, through online payments, through our Facebook Page and Instagram account, and through conversations with us on Messenger, Instagram and WhatsApp. Last updated: 15 October 2026.

What data we collect

We collect only what we need to answer your questions, enrol your child and take payment.
SourceWhat we collectWhy
Enrolment formStudent's name, surname and age; parent's phone and email; city; preferred format and schedule; page language and date sentTo contact you and arrange enrolment
Online paymentsPayer's name, amount, date and payment referenceTo record and confirm payment
Messenger, Instagram and WhatsAppYour name from your Messenger, Instagram or WhatsApp profile; an identifier for your conversation with us (on WhatsApp, your phone number); and the text of the messages you sendTo answer your questions (section 4)
CookiesTechnical session cookies and your cookie choice; analytics and advertising cookies only with your consentTo run the site (section 6)
Staff notesNotes added while following up your request, and its statusTo manage enrolment
Card payments are handled by Paysera. Card details are entered on Paysera's payment page. They never reach us, and we do not store them. We do not ask for ID documents, home addresses, school grades or health information, and we ask you not to send them.

Why we are allowed to use it

UseLegal basis
Answering enquiries and arranging enrolmentSteps you ask us to take before a contract
Processing paymentsPerforming our contract with you
Answering Messenger, Instagram and WhatsApp messagesOur legitimate interest in replying to people who contact us
Analytics and advertising cookiesYour consent, which you can withdraw at any time
Keeping payment recordsOur legal obligations, such as tax and accounting rules

Messenger, Instagram and WhatsApp

When you message our Facebook Page or our Instagram account, Meta passes us an identifier it creates for your conversation with us and the messages you send, with the time sent. This identifier is not your Facebook or Instagram account ID and works only with us. We also store your name from your Messenger or Instagram profile, so our staff know who they are talking to. We use this only to answer your question, help you enrol, and follow up on what you asked. We do not post your messages publicly, use them for advertising, or sell them. We cannot see your friends list, your posts, or anything on your profile you have not sent us. Meta runs Messenger and Instagram and processes these conversations under its own privacy policy at facebook.com/privacy/policy. When you message us on WhatsApp, we receive your phone number, your WhatsApp profile name and the messages you send us, with the time sent. We use them only for the same purposes as Messenger conversations. Meta runs WhatsApp and processes these conversations under its own privacy policy at whatsapp.com/legal/privacy-policy. We store only the text of your messages. Photos, voice messages and files sent without text are not saved. If you share your phone number or email in the chat so we can enrol your child, we treat it the same way as the enrolment form.

Automated replies and our AI assistant

Some messages to our Facebook Page, our Instagram account and our WhatsApp number are answered by an automated assistant that uses artificial intelligence. It answers common questions about our courses, locations and enrolment, and tells you at the start of the conversation that it is an automated assistant. To write a reply, the assistant sends the text of your message and the earlier messages in the same conversation to Groq, which runs the language model on our behalf. Groq's servers are mainly in the United States. So that the assistant can follow the conversation, we store recent messages on our own server in Germany. The assistant does not make decisions about you or your child. It does not accept or refuse enrolments, set prices, or make promises on our behalf. Our staff make those decisions. You can ask for a person at any time by writing "staf". Our team reads conversations the assistant cannot answer and takes them over.

Cookies and analytics

The site uses necessary cookies to work: session cookies that expire after 2 hours, and a cookie that remembers your cookie choice for 180 days. Google Analytics and Meta Pixel are not currently enabled on this website. The site is set up so that, if we enable them, they load only for visitors who accept them in the cookie bar: Google Analytics under analytics, and Meta Pixel under marketing. We will update this policy before enabling either. You can change your cookie choice at any time from the link in the footer.

Children's data and the parent's role

We teach children and teenagers aged 8 to 18. The enrolment form must be completed by a parent or legal guardian, not by the child. Facebook, Instagram, Messenger and WhatsApp are only for people aged 13 and over. Questions about enrolling a younger child should come from a parent or guardian. If we learn that a child under 13 has messaged us, we end the conversation and delete it. If someone tells the assistant they are under 18, we note their age so the assistant asks for a parent or guardian. Teenagers who message us are asked to involve a parent or guardian before any enrolment. We do not collect enrolment details from a minor without one. The AI assistant gives only course and enrolment information, does not ask children for personal details, and hands sensitive conversations to staff.

Who else sees the data

Only our authorised staff read enrolment requests and Messenger, Instagram and WhatsApp conversations. We do not sell personal data or share it with others for their own marketing. These services process data on our behalf:
ServiceWhat it doesWhat it sees
HetznerHosts our website serverData stored on the website
CloudflareProtects our website and speeds it upIP addresses and technical request data
PayseraProcesses online card paymentsPayment details
Meta PlatformsRuns Facebook, Instagram, Messenger, Instagram and WhatsAppYour Messenger, Instagram and WhatsApp conversations with us
GroqRuns the language model behind the assistantThe text of your Messenger, Instagram or WhatsApp conversation
BrevoSends our emailsRecipient and content of the email

Transfers outside Kosovo

Some of these services process data outside Kosovo. Our website server, and the server storing the assistant's conversation memory, are in Germany, inside the European Union. Cloudflare and Meta process data on servers in several countries, including the United States. Groq processes message text mainly in the United States. Brevo processes email data in the European Union (France, Germany and Belgium). Each provider applies its own safeguards to the data it processes.

How long we keep data

DataHow long
Enrolment requests that do not lead to enrolment24 months after last contact
Messenger, Instagram and WhatsApp conversations12 months after the last message
Technical logs of messages the assistant processed14 days, then deleted automatically
Payment recordsFor as long as Kosovo tax and accounting law requires
Cookie choice180 days
Session cookies2 hours
If a conversation leads to enrolment, the enrolment details are kept as for enrolled students. Meta keeps its own copy of Messenger, Instagram and WhatsApp conversations under its own rules. You do not have to wait for these periods to end: if you ask us to delete your data, we do, unless the law requires us to keep it.

Your rights and deleting your data

You can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict or object to its use, or to receive it in a machine-readable form. To make a request, email [email protected] with "personal data" in the subject. Tell us whether you contacted us through the website, Messenger, Instagram or WhatsApp. For Messenger, include the name shown on your Facebook profile; for Instagram, your Instagram username; for WhatsApp, the phone number you messaged us from, so we can find the conversation. We answer within one month. Deleting your Messenger or Instagram data: email [email protected] with the name on your Facebook profile or your Instagram username and ask us to delete your conversations. We delete everything we hold from them within 30 days and confirm by email. To remove the conversation from Messenger itself, open it in the Messenger app and choose Delete. Deleting your WhatsApp data: email [email protected] from any address with the phone number you messaged us from, and ask us to delete your conversations. We delete them within 30 days and confirm by email. To remove the chat from WhatsApp itself, open it and choose Delete chat. These are our instructions for deleting data you shared with us through Facebook, Instagram and WhatsApp.

Withdrawing consent

Withdrawing consent is as easy as giving it and has no effect on your enquiry or your child's enrolment. Change your cookie choice from the link in the footer, or write to us.

Contact and complaints

For any privacy question, email [email protected] or write to Rruga Pashko Vasa, Nr. 28, Pejton, 10000 Prishtinë. If you are not satisfied with our answer, you can complain to the Information and Privacy Agency (Agjencia për Informim dhe Privatësi) at [email protected] or aip.rks-gov.net.

Changes to this policy

We update this policy when the way we work changes, for example when we add or remove a service. The version in force is the one published here, with the date shown in section 1.

YOUR DATA

Request your data

You can request a copy of the data we hold about you, or delete it. Enter the email address you used when you contacted us and we'll send you a link to confirm the address is yours.

If the data belongs to your child, you can make the request as a parent or guardian. We may ask for additional information if we are not sure who is making the request.

What do you want to do?