Privacy Policy
Last updated:
⚠ This document is not final. The company registration details it relies on have not been filled in yet, so it is excluded from search engines and must not be relied upon.
This policy explains how 4CScollects and uses personal data through this website. It is written to meet the transparency requirements of Law no. 124/2024 “On Personal Data Protection”, which has applied in Albania since February 2025 and is aligned with the EU General Data Protection Regulation.
1. Who is responsible for your data
The data controller is [[REGISTERED LEGAL NAME]] (NIPT [[NIPT]]), [[REGISTERED STREET ADDRESS]], Tirana, Albania.
For any question about this policy, or to exercise the rights in section 7, contact hello@4cs.al or telephone [[PUBLIC PHONE NUMBER]].
2. What we collect, why, and on what basis
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, surname, email address or telephone number, and the content of your message — submitted through the contact form | To read your enquiry and reply to it | Steps taken at your request prior to entering into a contract; our legitimate interest in responding to business enquiries |
| Your cookie choice (stored locally in your browser, not on our servers) | To remember whether you accepted or declined tracking | Strictly necessary — without it we would have to ask you on every visit |
| Analytics and advertising identifiers, including cookies set by Google Tag Manager and the Meta Pixel, and your IP address as seen by those services | To measure how the site is found and used, and to measure advertising performance | Your consent only. Nothing in this row is collected unless you accept in the cookie banner, and you may withdraw at any time |
We do not ask for special categories of data, we do not use the site for automated decision-making or profiling that produces legal effects, and we do not knowingly collect data from children.
3. If you submit the contact form
The form sends its contents to our inbox by email. It also includes a hidden anti-spam field which is never shown to you and is used only to discard automated submissions. If you have accepted advertising cookies, a conversion event is recorded with Meta indicating that an enquiry was submitted; the content of your message is not sent to Meta by us.
4. Who else receives your data
We do not sell personal data. We share it only with the service providers below, each acting on our behalf:
| Provider | Role | Location |
|---|---|---|
| Resend | Delivers contact-form submissions to our inbox | United States |
| Google (Google Tag Manager) | Loads and manages analytics tags, only after consent | United States |
| Meta Platforms (Meta Pixel) | Measures advertising performance, only after consent | United States |
We may also disclose data where we are required to by law or by a competent authority.
5. Transfers outside Albania
The providers above are established in the United States, so using them involves an international transfer. Articles 39 to 42 of Law no. 124/2024 permit such transfers only where an adequate level of protection or appropriate safeguards exist. We rely on the standard contractual terms offered by each provider in its data processing agreement. You may request further detail using the contact details in section 1.
6. How long we keep it
- Contact enquiries: kept while we are in correspondence and for up to 24 months afterwards, so we can follow up on a prior conversation. Removed sooner on request.
- Cookie choice: stored in your browser until you clear it or withdraw consent.
- Analytics and advertising data: retained by Google and Meta according to their own published retention periods.
7. Your rights
Under Law no. 124/2024 you have the right to:
- be informed about how your data is processed — this document;
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing carried out before withdrawal.
Write to hello@4cs.al and we will respond within 30 days. Where the data was collected in the context of online services, erasure requests are actioned within the same period.
To withdraw cookie consent, use the control on the Cookie Policy page.
8. Complaints
If you believe your data has been handled unlawfully you may complain to the Information and Data Protection Commissioner (IDP), the supervisory authority in Albania: https://idp.al. We would appreciate the chance to address it first.
9. Security
The site is served over HTTPS and enquiry data is transmitted encrypted. We keep access to enquiries limited to the people who need it. No system is perfectly secure, but we will notify the Commissioner within 72 hours of a qualifying personal data breach, and notify you directly where the breach is likely to present a high risk to your rights.
10. Changes
We may update this policy as the site or the law changes. The date at the top of this page always reflects the current version.