Privacy Policy

Version:1.0  | Last updated: May 4, 2026

1. Data Controller

The controller of personal data processed through this website is:

2. Legal Basis

Processing of your personal data is carried out in accordance with:

• Law No. 06/L-082 of the Republic of Kosovo on the Protection of Personal Data
• EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679
• ePrivacy Directive 2002/58/EC for cookies and electronic communications

3. What Data We Collect

We collect the following data when you interact with our website:

• Identification data: first name, last name, company (when you provide it)
• Contact data: email, phone number, address
• Message content: text you write in the contact form
• Technical data: IP address, browser type, operating system, pages visited
• Cookie data: see Cookies Policy

4. Why We Collect (Processing Purposes)

• To respond to your questions and quote requests
• To provide customer service and technical support
• To send quotes, invoices, and contractual information
• To meet legal obligations (accounting, taxes)
• To analyze website traffic and improve services
• For marketing purposes — only with your explicit consent

5. How We Store It (Security)

We apply technical and organizational measures to protect your data: SSL/TLS encryption, controlled employee access, secure servers, periodic backups, and employee training on data protection.

6. How Long We Keep It

Your data is kept only as long as necessary for the purposes for which it was collected, or as required by law:

• Contact requests without contract: 12 months
• Contracts and invoices: 10 years (per fiscal legislation)
• Marketing data: until consent is withdrawn
• Log/server data: 6 months

7. Sharing with Third Parties

Your data is NEVER sold. We may share it only with:

• Technical service providers (hosting, email, analytics) — under confidentiality agreements
• Government authorities when required by law
• Business partners when necessary for contract fulfillment

8. Your Rights

Under Law No. 06/L-082 and GDPR, you have the following rights:

• Right of access — to know what data we hold about you
• Right of rectification — to request correction of inaccurate data
• Right of erasure ("right to be forgotten")
• Right to restrict processing
• Right of portability — to receive your data in a readable format
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with the Information and Privacy Agency (AIP) of Kosovo

To exercise your rights, contact us at info@shkodra-group.com. We will respond within 30 days.

9. International Transfers

Some of the services we use (e.g., analytics, hosting) may have servers in EU countries or third countries that provide an adequate level of protection per European Commission decisions.

10. Policy Changes

We may update this policy periodically. The updated version will be published on this page with the new date. We recommend checking it regularly.

11. Contact

For any privacy questions: