Privacy Policy

1. Controller

The controller responsible for data processing on this website is: {{FIRM_LEGAL_NAME}} Sh.p.k., {{ADDRESS_TIRANA}}, 1001 Tirana, Albania, [PLACEHOLDER: email].

2. Principles of data processing

We process users’ personal data only to the extent necessary to provide a functioning website and our content and services, in accordance with the EU General Data Protection Regulation (GDPR).

3. Hosting

This website is hosted with Netlify, Inc. Visiting the site processes technically necessary server log files (IP address, date/time, page requested); the legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the site).

4. Analytics — Plausible

We use Plausible Analytics, a cookie-free, privacy-friendly analytics service that stores no personal data or device fingerprints and sets no cookies. No cross-site tracking of users takes place. The legal basis is our legitimate interest in anonymous traffic measurement (Art. 6(1)(f) GDPR); consent is generally not required for this, as no cookies or personal identifiers are used.

5. Appointment booking — Cal.com

For appointment booking we embed the Cal.com service via iframe. This embed loads only after your explicit consent via our consent banner (Art. 6(1)(a) GDPR). Loading the calendar transmits data to Cal.com; Cal.com’s own privacy policy applies.

6. Contact form

Our contact form runs on Netlify Forms. The data you enter (name, email, message) is processed to handle your inquiry and forwarded to our email address. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or (f) (legitimate interest in responding to your inquiry).

7. WhatsApp Business

If you contact us via WhatsApp, WhatsApp/Meta’s privacy terms apply. Use of this channel is voluntary; alternative contact methods (email, form) are always available.

8. Guide downloads

To receive free guides by email, we process your email address based on your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time with effect for the future.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection under Articles 15–21 GDPR, as well as the right to lodge a complaint with a supervisory authority.

10. Retention period

We retain personal data only as long as necessary for the stated purposes or as required by statutory retention obligations.