A controller or processor not established in Albania that offers goods or services to, or monitors, data subjects in Albania must appoint a representative located in Albania and notify the Commissioner in writing of the representative's identity, unless the processing is occasional, does not involve large-scale sensitive data or criminal records and is unlikely to create a risk, or the controller is a public authority. The representative must be mandated to be addressed, in addition to or instead of the controller or processor, by the Commissioner and data subjects on all processing issues; its designation does not shield the controller or processor from complaints.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.