Introduction
We (“PwC”, “us”, or “our”) are strongly committed to protecting personal data in compliance with Albanian Law No. 124/2024 “On the Protection of Personal Data” and all other relevant and applicable legislation. This transparency notice describes why and how we collect and use personal data and provides information about individuals’ rights. We may use personal data provided to us for any of the purposes described in this transparency notice or as otherwise stated at the point of collection.
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
PwC processes personal data for numerous purposes, and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose may differ depending on the purpose.
When collecting and using personal data, our policy is to be transparent about why and how we process personal data.
Security
We take the security of all the data we hold very seriously. We adhere to internationally recognized security standards and our information security management system relating to client confidential data is independently certified as complying with the requirements of ISO/IEC 27001: 2013. We have a framework of policies, procedures and training in place covering data protection, confidentiality and security and regularly review the appropriateness of the measures we have in place to keep the data we hold secure
Our processing activities
To find out more please go to the sections of this statement that are relevant to you.
Legal basis for processing
Legal bases for each processing activity are specified in the relevant sections above. When we process personal information for our legitimate interests, we make sure to consider and balance any potential impact on a data subject (both positive and negative), and the data subject’s rights under data protection laws. Our legitimate business interests do not automatically override interests of the data subjects - we will not process personal data for activities where our interests are overridden by the impact on the data subject (unless we have the consent or are otherwise required or permitted to by law).
Changes to this privacy statement
We recognise that transparency is an ongoing responsibility; we will review and update this privacy statement to reflect changes in our processing activities or the law. We will indicate the “Last updated” date and, where changes are material or required by Law No. 124/2024, we will notify you through appropriate channels (e.g., our website or email).
This privacy statement was last updated on 06.10.2025.
Data controller and contact information
For the purposes of this privacy notice, your data controller will be one of the following legal entities: PricewaterhouseCoopers Consulting SHPK (PwC Consulting) or PricewaterhouseCoopers Assurance Services SHPK (PwC Assurance), identified in your direct contractual agreement or engagement letter with PwC, or the specific PwC entity you have directly contacted for services.
If you have any questions about this privacy statement or how and why we process personal data, please contact us at:
Municipal Unit No. 5, Ibrahim Rugova Street, Sky Tower, 9th Floor, Office 91
Email: al_pwc_albania@pwc.com
Phone: +(355) 42 242 254
Or contact our Data Protection Officer (DPO) at:
PwC Consulting: al_pwc_consulting_dpo@pwc.com I +(355) 42 242 254
PwC Assurance: al_pwc_assurance_dpo@pwc.com I +(355) 42 242 254
