PRIVACY POLICY  

LRC ALBANIA  

Tirane, Rruga "Pjeter Bogdani" 351, 4th Floor, Apt. 4/3,  

Cadastral Zone 8270, Property No. 2/446+1-24, Vol.45 Pg.137  

Last updated: 01.01.2025

------------------------------------------------------------------

1. INTRODUCTION

This Privacy Policy explains how LRC ALBANIA (hereinafter referred to as the "Company" or "we") collects, uses, processes, and protects your personal data when you use our services, contact us, or visit our website.

Protecting your privacy is of paramount importance, and we adhere to the applicable laws of the Republic of Albania and European data protection regulations (GDPR), where applicable, when processing personal data.

------------------------------------------------------------------

2. INFORMATION ABOUT THE DATA CONTROLLER

- Company Name: LRC ALBANIA  

- Registered Office Address: Tirane, Rruga "Pjeter Bogdani" 351, 4th Floor, Apt. 4/3, Cadastral Zone 8270, Property No. 2/446+1-24, Vol.45 Pg.137  

LRC ALBANIA acts as the data controller under the relevant data protection legislation. If you have any questions or requests regarding your personal data, please contact us at the email address or phone number provided above.

------------------------------------------------------------------

3. DATA WE COLLECT

We only collect the personal data necessary for providing our services, fulfilling legal obligations, or pursuing the Company’s legitimate interests. This may include:

1. Identification data: Name, surname, date of birth, ID or passport number, and similar data.  

2. Contact details: Address, email address, phone number.  

3. Financial information: Bank account number, payment method, billing, or transaction information.  

4. Technical data (collected when you visit our website): IP address, browser type and version, cookies (please refer to our separate cookie policy or relevant section), and related information.  

We reserve the right to collect additional personal data if required to fulfill contractual obligations, meet legal requirements, or based on your explicit consent.

------------------------------------------------------------------

4. HOW WE USE YOUR PERSONAL DATA

We use the collected data solely for the following purposes:

1. Provision of services  

   - Processing necessary to conclude and execute contracts, offers, or projects we participate in.  

2. Compliance with legal obligations  

   - Maintaining mandatory records, bookkeeping, reporting to competent authorities, and other activities as prescribed by the laws of the Republic of Albania and applicable EU legislation.  

3. Improving our services and operations  

   - Analyzing data to enhance the quality, security, and efficiency of our services.  

4. Communication with clients and users  

   - Sending relevant notices about our services, changes in operation, promotional activities, or important updates, if you have given your consent to receive such notices.  

5. Protecting legitimate interests and security of the Company  

   - Detecting and preventing potential misuse, fraud, or other unlawful activities.  

------------------------------------------------------------------

5. LEGAL BASIS FOR PROCESSING

In accordance with applicable laws, we process your personal data on the following grounds:

- **Contract performance**: where processing is necessary for the fulfillment of a contract concluded with you or to take steps at your request prior to concluding a contract.  

- **Legal obligation**: where we are legally required to retain or process your data (e.g., accounting regulations, anti-money laundering).  

- **Legitimate interest**: for the purpose of safeguarding our business interests, security, and efficiency, provided this does not infringe upon your rights and freedoms.  

- **Consent**: if processing is based on your explicit consent (e.g., receiving marketing messages). You have the right to withdraw your consent at any time.

------------------------------------------------------------------

6. DATA RETENTION PERIOD

We retain your personal data only for as long as is necessary:

- to fulfill the purpose for which it was collected,  

- to comply with legal or contractual obligations,  

- or based on your consent (until such consent is withdrawn).  

After the retention period has elapsed, the data will be deleted or anonymized, unless there is another legal basis or interest for further retention (e.g., active legal proceedings).

------------------------------------------------------------------

7. DATA PROTECTION AND SECURITY

We implement appropriate technical and organizational security measures to prevent unauthorized access, misuse, loss, or damage to your personal data. These measures include access controls, data encryption (where applicable), regular security checks, and staff training. Despite our best efforts, we cannot guarantee absolute security, but we continuously work on improvements and adherence to best practices.

------------------------------------------------------------------

8. YOUR RIGHTS

According to the laws on the protection of personal data in the Republic of Albania and the GDPR (where applicable), you have the right to:

1. **Access** – request confirmation as to whether your data is being processed, and if so, obtain access to that data and further information about its processing.  

2. **Rectification** – request that we correct or complete any inaccurate or incomplete personal data.  

3. **Erasure** (the right to be forgotten) – request the deletion of your data if there is no overriding legitimate reason for its continued processing.  

4. **Restriction of processing** – request a temporary halt to processing in specific circumstances (e.g., while your request for rectification or objection is being examined).  

5. **Objection** – object to processing based on our legitimate interests, if you believe that your rights and freedoms override our interests.  

6. **Data portability** – receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and have it transferred to another controller, where technically feasible.  

7. **Withdrawal of consent** – if processing is based on your consent, you can withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us via the email address or postal address indicated in Section 2. We will endeavor to respond within the legally prescribed timeframe. If you believe that your rights have been violated, you have the right to lodge a complaint with the competent data protection authority in the Republic of Albania.

------------------------------------------------------------------

9. SHARING PERSONAL DATA

We share your personal data only in compliance with legal requirements, contractual obligations, or based on your consent, and specifically with:

- Competent institutions (e.g., tax authorities, courts, police) when required