Privacy policy
Draft: this page has fields to fill in (marked in yellow) and should be reviewed by a lawyer before it goes live.
1. Who we are
This website (dukuonline.com) is run by DUKU Online, a marketing agency for local businesses. We are the controller of the personal data processed through this site.
- Legal entity: [FILL IN: registered business name]
- NIPT (tax ID): [FILL IN: NIPT]
- Address: [FILL IN: registered address]
- Email: [email protected]
2. What we collect
- When you contact us on WhatsApp, email, Instagram or by phone: your name, phone number, email address, business name and what you write to us.
- Technical data: IP address, browser type and time of visit, which our hosting provider logs to keep the site secure and working.
The site has no forms, no user accounts, no advertising cookies and no analytics that track you. Your browser stores only two functional choices: the page language and whether you closed the offer banner. These are not sent to us.
3. Why we use it, and on what legal basis
- To answer your request and prepare an offer: steps before a contract, at your request.
- To deliver the service and invoice it: performance of a contract and legal obligation.
- To keep the site secure: our legitimate interest.
- To send marketing messages: only with your consent, which you can withdraw at any time.
4. Who we share it with
We do not sell your data. We share it only with providers that help us operate:
- our website host (Cloudflare);
- Google Fonts, which loads the site's typefaces and receives your IP address to do so;
- WhatsApp and Instagram (Meta), when you choose to message us there;
- our email provider: [FILL IN: Zoho or Google].
5. Transfers outside Albania
Some of these providers process data in the European Union or the United States. In those cases we rely on the safeguards the law provides, such as the providers' standard contractual clauses.
6. How long we keep it
- Messages that don't lead to a contract: up to 12 months after the last contact. [FILL IN: confirm the period]
- Client data: for the length of the contract, then as long as tax and accounting law requires.
7. Your rights
You can ask for access, correction, deletion or restriction, ask for your data in a portable format, object to processing and withdraw consent. Write to [email protected] and we will answer within 30 days.
You can also complain to Albania's Commissioner for the Right to Information and Personal Data Protection (idp.al).
8. Children
This site is aimed at business owners. We do not knowingly collect data from anyone under 18.
9. Security
The site is served only over an encrypted connection (HTTPS). Access to messages and accounts is restricted and protected with two-step verification.
10. Law and changes
This policy is based on Albanian Law No. 124/2024 "On Personal Data Protection". For visitors from Kosovo, Law No. 06/L-082 also applies; for visitors from the European Union, Regulation (EU) 2016/679 (GDPR). If we change this policy, we publish the new version here with a new date.