Last updated: 7 September 2026

1. Who we are

Hapide is an online learning platform based in Albania and managed by Foundation “Yunus Social Business Fund Albania” (NIPT L31525452B), operating as Enterimpact Balkans. This legal entity acts as the data controller for personal data processed through Hapide unless a specific project notice identifies another controller or joint controller. In this Privacy Policy, “Enterimpact Balkans”, “we”, “us” and “our” refer to this legal entity.

Website: https://hapide.org
Privacy contact: hapide@enterimpact.com

This Privacy Policy explains how we collect and use personal data when you visit Hapide, create or receive an account, take part in open or project-specific courses, teach a course, or contact us. It is intended to comply with Albania’s Law no. 124/2024 “On Personal Data Protection”.

2. Personal data we collect

  • Account and profile data: name, username, email address, password in protected form, profile details and account role.
  • Project and access data: approved project, membership level, participation status, course entitlements and information supplied by authorised project staff or partners.
  • Learning data: enrolments, course progress, lesson completion, quiz attempts, assignments, discussions, questions, certificates and instructor feedback.
  • Technical and security data: IP address, device and browser information, login and activity logs, cookies, security events and diagnostic information.
  • Communications: messages, support requests, survey responses and other information you send to us.
  • Instructor and administrator data: role, course responsibilities, course content, learner interactions and activity needed to operate the platform.

3. Where the data comes from

We receive personal data directly from you, automatically from your use of Hapide, and from authorised Enterimpact Balkans staff, instructors, project coordinators or partners when they approve participation, create an account or assign project access.

4. How and why we use personal data

  • create, verify and manage learner, instructor and administrator accounts;
  • provide Open Courses and approved project-specific courses;
  • verify project eligibility and apply the correct course-access permissions;
  • record learning progress, assess work, issue certificates and provide support;
  • communicate service, course, security and project information;
  • protect accounts, prevent fraud and misuse, troubleshoot problems and maintain backups;
  • administer and evaluate learning projects and meet lawful reporting obligations; and
  • improve the usability, accessibility and effectiveness of Hapide.

5. Legal bases

Depending on the activity, we process personal data because it is necessary to provide a requested learning service or administer your participation; to comply with a legal obligation; for Enterimpact Balkans’ legitimate interests in operating, securing and improving Hapide and administering approved projects; or on the basis of consent where the law requires consent. We balance legitimate interests against the rights and freedoms of the people concerned.

Where processing is based on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

6. Learners under 16

Under Albanian law, consent-based processing for online goods or services is valid when the minor is at least 16. A person under 16 must not use public self-registration independently. The required consent must be given or authorised by a parent or legal guardian, or the account and processing must be arranged through an approved project process with an appropriate lawful basis and safeguards. If you believe a person under 16 has registered without the required authorisation, contact us promptly.

7. Who may receive personal data

Access is limited according to role and need. Authorised Enterimpact Balkans staff may administer accounts and projects. Instructors may access information about learners enrolled in courses they teach where needed for teaching, support and assessment. Authorised project coordinators or partners may receive information necessary for project administration, safeguarding, monitoring or lawful reporting.

We may use trusted service providers for hosting, learning-management and membership functions, email delivery, video or embedded content, security, backups and technical support. They may process personal data only for the agreed services and under appropriate obligations.

We do not sell personal data. For project reporting, we use aggregated or anonymised information whenever reasonably possible and disclose identifiable data only where necessary and lawful.

8. International data transfers

Some service providers or embedded services may process data outside Albania. Where personal data is transferred internationally, Enterimpact Balkans will use a lawful transfer mechanism and appropriate safeguards required by Albanian data-protection law.

9. Embedded content and external services

Courses may include embedded content such as YouTube videos. External services may receive technical information, place cookies or collect information about your interaction with their content under their own privacy terms. Opening an external link takes you to a service that Enterimpact Balkans does not control.

10. Cookies

Hapide uses cookies and similar technologies necessary for login, account security, session management and display preferences. If optional analytics or marketing technologies are introduced, we will provide the information and choices required by law.

11. How long we retain data

We retain personal data only for as long as needed to provide Hapide, administer the relevant learning project, preserve necessary learning and certificate records, resolve disputes, maintain security and meet legal, contractual or reporting obligations. Retention periods vary by project and record type. Data that is no longer needed is deleted or anonymised where appropriate.

12. Your rights

Subject to the conditions in Albanian law, you may request information about processing; access to your personal data; correction of inaccurate data; deletion; restriction of processing; a portable copy of data where applicable; or object to processing based on legitimate interests. You also have the right not to be subject to certain decisions based solely on automated processing and the right to withdraw consent where consent is the legal basis.

To exercise a right, contact hapide@enterimpact.com. We may need to verify your identity. We will respond in accordance with the time limits and conditions established by applicable law.

You may also lodge a complaint with Albania’s Information and Data Protection Commissioner.

13. Security

We use organisational and technical safeguards intended to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. No online system can guarantee absolute security. Please use a strong password, keep your login details confidential and notify us if you suspect unauthorised access.

14. Changes to this policy

We may update this Privacy Policy when Hapide’s services, projects, legal obligations or data practices change. The latest version and revision date will be published on this page. We will provide additional notice of material changes where appropriate.

15. Contact

Foundation “Yunus Social Business Fund Albania”
Operating as Enterimpact Balkans
NIPT: L31525452B
Rruga Isa Boletin, Pl. AK, H.1
Tirana 1001, Albania
Website: https://hapide.org
Email: hapide@enterimpact.com