Ligjore
Politika e privatesise
Ky njoftim shpjegon kush e kontrollon faqen, cilat kategori të te dhenave personale perpunohen, pse perpunohen, kush i merr ato, sa kohe ruhen, si trajtohen mesazhet në platforme, perpunimi i pyetjeve të asistentit AI, telemetria e perdorimit, videot e mbrojtura të tutorialeve dhe ngarkimet e menaxhuara, si dhe si vizitoret dhe perdoruesit mund të ushtrojne të drejtat e tyre.
Përditësuar së fundi 2026-04-27
Qellimi i ketij njoftimi
Ky njoftim privatesie mbulon perpunimin e të dhenave personale që ndodh në faqen Dark Blue Cave Academy, sistemin e llogarive, rrjedhat e pranimit, operacionet mesimore, mesazhet dhe mbeshtetjen në platforme, perpunimin e pyetjeve të asistentit AI dhe telemetrine e perdorimit, videot e mbrojtura të tutorialeve, email-et transaksionale, publikimin publik, median opsionale dhe cdo rrjedhe blerjeje direkte aktive në faqe.
Eshte shkruar për të permbushur detyrimet e transparences sipas Ligjit Nr. 06/L-082 për Mbrojtjen e të Dhenave Personale dhe fokusit të AIP për transparence, njoftime privatesie dhe njoftime për cookies.
Kategorite e të dhenave personale që perpunohen në faqe
Ne varesi të faqes dhe rrjedhes, platforma mund të perpunoje adresa IP, identifikues online, detaje të pajisjes dhe shfletuesit, identitet llogarie, detaje pranimi, regjistra kursesh dhe certifikatash, mesazhe dhe mbeshtetje në platforme, permbajtje të pyetjeve për asistentin AI dhe metadata perdorimi, metadata të videos se tutorialeve, metadata të email-eve transaksionale, permbajtje publike të aprovuar, metadata pagesash dhe të dhena të nderveprimit me media opsionale.
Jo cdo vizitor perdor cdo funksion. Aktivitetet e perpunimit me poshte shpjegojne cilat kategori lidhen me secilen pjese të faqes.
Te drejtat e tua
Mund të ushtrosh të drejtat që jep ligji i zbatueshem për të dhenat personale, sipas fusheveprimit dhe kufijve të ligjit.
- Qasje: Kerko konfirmim nëse të dhenat e tua personale po perpunohen dhe kerko nje kopje kur ligji ta jep kete të drejte.
- Korrigjim: Kerko që të dhenat personale të pasakta ose të paplota të korrigjohen.
- Fshirje: Kerko fshirje kur bazat ligjore për perpunim të metejshem nuk vlejne me.
- Kufizim: Kerko që perpunimi të kufizohet derisa po shqyrtohen saktesia, ligjshmeria ose kundershtimet.
- Kundershtim: Kundershto perpunimin që mbeshtetet në interesa legjitime, sipas kufijve që lejon ligji.
- Bartje e të dhenave: Merr të dhenat që ke dhene në forme të strukturuar kur ligji ta jep kete të drejte.
- Terheqje e pelqimit: Ndrysho ose terhiq pelqimin për cookies opsionale në cdo kohe nga cilesimet e cookies në faqe.
- Ankese në AIP: Nëse beson se të drejtat e tua për të dhenat personale jane shkelur, mund të ankohesh të Agjencia për Informim dhe Privatesi.
Ankesat dhe transparenca
Nëse ke shqetesim për menyren si perpunohen të dhenat e tua personale, kontakto fillimisht kontrolluesin e faqes permes të dhenave të kontaktit të publikuara me poshte. Mund të ankohesh edhe direkt të Agjencia për Informim dhe Privatesi.
Sa here që faqja shton perpunues të rinj, kategori cookies ose fusha të reja të te dhenave personale, ky njoftim dhe njoftimi për cookies duhet të perditesohen para publikimit.
Controller and legal contact
Publish a monitored email, phone number, and location here so the privacy and cookie notices identify the site controller clearly.
- Kontrolluesi
- Dark Blue Cave Academy
- Email i kontrolluesit
- Lokacioni i kontrolluesit
- Prishtina, Kosovo
- Kontakt për mbrojtjen e të dhenave
- Nuk është publikuar kontakt i vecante. Perdor email-in e kontrolluesit me siper.
Processing activities on this site
The entries below describe the main operational processing activities currently active on the platform.
Site access, security, and server diagnostics
Deliver pages, keep the service available, prevent abuse, diagnose operational failures, and maintain evidence of security-relevant events.
Kategorite e të dhenave
- IP address
- browser and device details
- requested URLs and timestamps
- referrer and response diagnostics
- cookie-consent state
Baza ligjore
Legitimate interests in operating a secure public website and documenting security-relevant events.
Marresit dhe ruajtja
- Dark Blue Cave Academy admins and operators
- hosting, database, and infrastructure processors
Operational logs stay only as long as reasonably needed for security, uptime, debugging, backups, and recovery.
Account creation, Google sign-in, and session management
Create accounts, let users sign in, protect sessions, manage approval status, and route users through the requested auth flow safely.
Kategorite e të dhenave
- name
- email address
- profile image
- role and approval status
- account identifiers
- authentication and anti-forgery cookies
Baza ligjore
Steps requested by the user to access the service, performance of the account service, and legitimate interests in account security.
Marresit dhe ruajtja
- Google as authentication provider
- Dark Blue Cave Academy admins
- Vercel Blob as managed object-storage processor for custom profile images where uploads are used
- hosting, database, and session processors
Account records stay while the account is active and afterward only for legitimate operational, security, dispute, backup, or audit needs.
Applications, admissions, and direct contact follow-up
Review applications, evaluate fit, contact applicants, moderate admissions, and manage follow-up for courses, workshops, and related academy workflows.
Kategorite e të dhenave
- name
- email address
- phone number
- application answers
- selected program details
- review notes and timestamps
Baza ligjore
Steps taken at the user's request before entering a training relationship, plus legitimate interests in reviewing admissions and managing academy operations.
Marresit dhe ruajtja
- Dark Blue Cave Academy admins and reviewers
- hosting and database processors
Admissions records stay while the review, follow-up, support, dispute, and reasonable archive windows remain necessary.
Learning operations, certificates, and user-visible progress
Run courses and workshops, track participation and completion, issue certificates, and keep account dashboards and related admin records accurate.
Kategorite e të dhenave
- enrollment records
- lesson and progress data
- certificate metadata
- event and session participation
- role and access status
Baza ligjore
Performance of the learning service and legitimate interests in operating the academy, documenting completions, and resolving support issues.
Marresit dhe ruajtja
- Dark Blue Cave Academy admins and mentors where needed
- hosting and database processors
Learning records stay as long as needed to operate programs, document completions, support alumni requests, and maintain reasonable archive and backup copies.
In-platform messages, friends, and support conversations
Let approved users exchange permitted course messages, invite and accept friends for direct messaging, let students open support conversations, notify staff about support requests, and preserve conversation history for service continuity, moderation, support, and auditability.
Kategorite e të dhenave
- account identity and role
- friend invitation email addresses and friend request status
- conversation participants
- message and support conversation content
- read, archive, assignment, and status metadata
- related course, session, or operational record references
- notification metadata
Baza ligjore
Performance of the requested account, learning, and support service, plus legitimate interests in secure communication, moderation, operational continuity, and dispute resolution.
Marresit dhe ruajtja
- conversation participants according to platform permissions
- Dark Blue Cave Academy admins, managers, and mentors where their role permits access
- hosting and database processors
Conversation, friend request, invitation, and notification records stay while needed for the active account, course operations, support history, moderation, disputes, audits, backups, and reasonable archive windows.
AI assistant prompt processing and usage telemetry
Answer platform-related AI assistant questions through the configured AI provider, measure assistant usage, enforce lightweight rate limits, estimate operating cost, and diagnose blocked or failed assistant requests without storing full prompts or full responses in usage telemetry.
Kategorite e të dhenave
- assistant question content sent to the configured AI provider for response generation
- assistant answer content returned to the user
- account or anonymous session identifier where available
- hashed IP-derived limiter key where available
- route path where the assistant was used
- prompt and response lengths
- model name
- request status and short reason codes
- token counts and estimated cost metadata where available
- timestamps
Baza ligjore
Legitimate interests in controlling service cost, preventing abuse, and operating the assistant safely.
Marresit dhe ruajtja
- Dark Blue Cave Academy admins and operators
- hosting and database processors
- OpenAI as AI API provider when the assistant is used
Usage metadata stays only as long as reasonably needed for cost control, abuse prevention, operational diagnostics, backups, and aggregate reporting. Full prompts and full responses are not stored in usage telemetry; provider processing follows the configured AI provider account terms and operational retention.
Protected tutorial video playback for entitled users
Deliver tutorial lesson video through permission-checked routes, generate short-lived signed playback tokens, and let approved staff or enrolled students watch the protected tutorial content they are entitled to access.
Kategorite e të dhenave
- account and entitlement status
- requested tutorial and lesson identifiers
- IP address
- browser and device details
- short-lived playback-token request metadata and delivery diagnostics
Baza ligjore
Performance of the requested learning service and legitimate interests in secure access control, protected media delivery, and operational troubleshooting.
Marresit dhe ruajtja
- Cloudflare Stream as protected video hosting and delivery processor
- Dark Blue Cave Academy admins and operators where needed for support
- hosting and database processors
Short-lived playback tokens are generated on demand and expire quickly. Operational delivery and support diagnostics stay only as long as reasonably needed for troubleshooting, security, and backup or recovery needs.
Transactional email delivery from the notification outbox
Send queued operational email about access decisions, application outcomes, certificates, schedule changes, friend invitations, and important platform messages, support updates, announcements, or learning notifications, and keep delivery-attempt records for support and launch operations.
Kategorite e të dhenave
- name
- email address
- notification subject and transactional message content
- delivery state, timestamps, and failure diagnostics
Baza ligjore
Performance of the requested service where the email is part of account or learning operations, plus legitimate interests in reliable operational communication, support, and auditability.
Marresit dhe ruajtja
- configured SMTP or email-delivery processor
- Dark Blue Cave Academy admins
- hosting and database processors
Queued notification records and delivery metadata stay as long as reasonably needed for support, operational troubleshooting, audits, and backup or recovery needs.
Managed image uploads for profile, editorial, and catalog assets
Store profile photos and academy-managed thumbnails, covers, and gallery assets uploaded from internal editors so the site can avoid fragile hotlinks and keep public media stable.
Kategorite e të dhenave
- uploaded image files
- file names and content-type metadata
- related user or content-record references
- browser IP address and upload diagnostics handled by the storage processor
Baza ligjore
Performance of the requested service for profile and editorial updates, plus legitimate interests in reliable media hosting and safer public asset delivery.
Marresit dhe ruajtja
- Vercel Blob as managed object-storage processor
- Dark Blue Cave Academy admins and mentors where needed
- hosting and database processors
Managed uploads stay until replaced or removed from the relevant record, with reasonable backup and recovery windows retained only as operationally necessary.
Public publishing of approved content
Publish approved courses, tutorials, portfolio items, associates, podcast pages, and selected public proof that the academy intentionally makes visible.
Kategorite e të dhenave
- public titles and summaries
- approved profile or portfolio content
- public image and media assets
- publication timestamps and slugs
- visitor IP address and browser details when externally hosted media assets are loaded
Baza ligjore
Legitimate interests in publishing the academy's public content and, where applicable, fulfilling public-profile or portfolio visibility requested by the user.
Marresit dhe ruajtja
- site visitors
- search engines and public web crawlers
- hosting, CDN, and managed object-storage processors where used
- external asset hosts when admins intentionally configure remote media URLs
Public content stays live until removed, archived, or replaced, with backups and operational archives retained as reasonably necessary.
Optional YouTube embedded playback
Play podcast video and public tutorial preview video inside the site only after the visitor accepts optional media cookies.
Kategorite e të dhenave
- IP address
- browser and device details
- player interaction data
- cookies or online identifiers set by YouTube or Google
Baza ligjore
Consent.
Marresit dhe ruajtja
- YouTube / Google
- Dark Blue Cave Academy only for the local consent record
Consent preference is stored for 180 days. Any third-party retention applied by YouTube or Google is governed by their own policies.
Course checkout and payment reconciliation when direct purchase is enabled
Initiate checkout, reconcile callbacks, confirm payment status, display Paysera's browser-side Trust Badge where the public site signals Paysera payment availability, and connect verified purchases to course-access operations.
Kategorite e të dhenave
- account identity and email
- order reference
- course identifier
- amount and currency
- payment callback metadata
- purchase status and timestamps
- visitor IP address, browser, and device details when the Paysera Trust Badge script loads
Baza ligjore
Steps requested by the user to buy a course, performance of the purchase flow, and legitimate interests in fraud prevention, support, accounting, and reconciliation.
Marresit dhe ruajtja
- Paysera as payment processor
- Dark Blue Cave Academy admins
- hosting and database processors
Payment and reconciliation records stay as long as reasonably required for accounting, support, fraud prevention, and audit obligations. Browser-side Trust Badge diagnostics are handled by Paysera according to its own service and privacy terms.
Referencat ligjore dhe ankesat
Standardi i privatesise dhe transparences në kete faqe ndjek ligjin e Kosoves për të dhenat personale dhe rrugen e ankesave në AIP.