Privacy Policy

1. Contact and Data Controller Information

The entity responsible for the processing of your personal data is:

• Data Controller: Kolaba - Albanian Software Development Agency
• Address: Rruga Pal Engjelli, Durres 2000, Albania
• Privacy Contact Email: kolabashpk(at)outlook.com

2. Personal Information We Collect

We collect information that falls into the following categories:

2.1. Information Provided Directly By You

When you fill out a contact form or send us an email, you provide the following data:

• Identifiers: Name, Email Address, Phone Number.
• Commercial Information: Details of services inquired about.
• Purpose: To respond to your requests and prepare service proposals.

2.2. Information Collected Automatically (via Google Analytics/Cookies)

When you visit our website, we automatically collect:

• Internet & Network Activity: IP address, browser type and version, pages viewed, time spent on pages, and referring website addresses.
• Inferences: Conclusions drawn from the above data to create a profile about your preferences (e.g., interest in certain software services).
• Purpose: Website analytics, performance monitoring, security, and fraud detection.

3. How We Use Your Personal Information (Legal Basis - GDPR)

We only use your Personal Information where we have a valid legal basis to do so, primarily:

• Contractual Necessity: To perform our services, respond to your inquiries, and fulfill our obligations under a potential contract.
• Legitimate Interest: For our necessary business interests, such as: improving our website, ensuring security, and detecting unauthorized access.
• Consent: Where required (e.g., for non-essential cookies/analytics or certain marketing activities). You have the right to withdraw this consent at any time.

4. Disclosure and Sharing of Personal Information

We do not Sell or Share Personal Information (as defined by CCPA/CPRA). We transfer data to the following service providers for essential business functions:

5. Your Data Protection Rights

5.1. Rights for EU/EEA and UK Residents (GDPR)

You can exercise your rights by emailing :

• **Access:** Request copies of your data.
• **Rectification:** Request correction of inaccurate data.
• **Erasure ('Right to be Forgotten'):** Request deletion of your data.
• **Restriction:** Request that we restrict processing of your data.
• **Portability:** Request that we transfer your data to another organization.
• **Objection:** Object to our processing of your data based on legitimate interests.

5.2. Rights for California Residents (CCPA/CPRA)

If you are a California resident, you can exercise your rights by emailing :

• **Right to Know:** Request disclosure of the specific pieces or categories of personal information collected about you in the preceding 12 months.
• **Right to Delete:** Request the deletion of your personal information, subject to exceptions.
• **Right to Opt-Out of Sale or Sharing:** Although we do not sell or share personal information, you still have this right.
• **Right to Non-Discrimination:** The right not to receive discriminatory treatment for exercising your CCPA rights.
• **Request Limit:** You may designate an authorized agent to make requests on your behalf.

6. International Data Transfers

Kolaba is based in Albania. Data may be transferred to countries outside the EEA, including the US, with legal mechanisms like SCCs to protect your data.

7. Data Retention

We retain your data only as long as necessary, e.g., contact form data for 6 months, analytics data in Google for 26 months, etc.

8. Security and Policy Changes

We implement security measures like SSL/TLS. Updates will be reflected with a new "Last Updated" date.