TRAVEL TEAM ALBANIA - PRIVACY POLICY 2025

Effective Date: June 16, 2023
Last Updated: June 16, 2025

This Privacy Policy describes how Travel Team Albania, located at Rr. Barikadave 8, Tirane, Albania, collects, uses, discloses, and protects the personal information of users who visit our website, contact us, or use our services. We comply with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Contact Details of the Data Controller

Travel Team Albania
📍 Address: Rr. Barikadave 8, Tirane, Albania
📞 Tel/WhatsApp: +355 69 776 6055
📧 Email: contact@travelteam.al

2. Scope of This Policy

This policy applies to:

• Visitors to our website

• Individuals who make bookings or inquiries

• Users who create an account via email, Google, or Facebook

• Clients receiving travel services from us

3. What Personal Data We Collect

We may collect the following categories of personal data, depending on how you interact with us:

A. Personal Identification Information

• Full name

• Date of birth

• Nationality

• Passport or ID details (only when necessary for bookings)

B. Contact Information

• Email address

• Phone number / WhatsApp

• Physical address (for invoicing or delivery of travel documents)

C. Account Information

• Login credentials (email, password encrypted with hashing)

• OAuth tokens and basic profile data via Google or Facebook login (name, profile image, email — never password)

D. Booking and Travel Data

• Trip dates, destinations, room preferences, activity preferences

• Number of travelers (including minors)

• Emergency contact details

E. Payment Information

• Billing address

• Payment status

• Note: We do not store full credit/debit card numbers. These are handled securely by third-party payment processors (e.g., Stripe, PayPal)

F. Technical Data

• IP address

• Device information

• Browser type and version

• Operating system

• Location data (if you consent)

G. Cookies and Tracking Data

• Session cookies

• Preference cookies

• Analytics cookies (Google Analytics, Meta Pixel)

4. How We Collect Your Data

We collect data in the following ways:

• When you fill out a contact or booking form

• When you register an account manually or through social login

• When you make a payment

• When you interact with our website and allow cookies

• When you contact us by email, phone, or WhatsApp

5. Why We Collect Your Data (Legal Basis – GDPR Article 6)

We process your data on the following legal grounds:

6. How We Use Your Personal Data

Your data may be used for:

• Booking trips and travel services on your behalf

• Registering and managing user accounts

• Sending booking confirmations and itinerary updates

• Providing support through email, WhatsApp, or phone

• Sending important service updates or legal notices

• Sending promotional offers (only if you gave consent)

• Improving our services and website functionality

• Preventing fraud and ensuring account security

7. How Long We Retain Your Data

We retain your data:

• As long as you have an active account or ongoing booking

• For 5 years after service completion (for invoicing/legal compliance)

• For marketing only if you remain subscribed or until you withdraw consent

When the retention period ends, your data is securely deleted or anonymized.

8. Who We Share Your Data With

We share your data only when necessary and only with:

• Hotels, airlines, guides, and tour operators (to complete your bookings)

• Payment processors (e.g., Stripe, PayPal)

• Email/SMS service providers (e.g., SendGrid, Twilio)

• Web hosting, CRM, and infrastructure partners

• Governmental authorities (only when legally required)

Bookings via Resellers or Third-Party Agencies:
If you booked a service through a third-party platform (e.g., Tripadvisor, GetYourGuide, TourRadar) or an external agency, your personal data may also be collected and processed under their respective Privacy Policies. In such cases, we advise you to review their privacy terms directly and contact them for any data access or deletion requests related to their platform.

Travel Team Albania does not control or assume responsibility for the data handling practices of external parties.

That said, if you contact us regarding any personal data processed by our company—even via resellers—we will fully consider and support your request in accordance with applicable GDPR rights.

We never sell, rent, or share your data for marketing purposes with any unrelated third parties.

9. Data Security Measures

We implement the following safeguards:

• Secure Socket Layer (SSL) encryption for data transmission

• OAuth2 secure login for Google and Facebook

• Password hashing and salting

• Role-based access control for internal staff

• Regular security audits and data backup

• Hosting on GDPR-compliant servers

In case of a data breach, we will notify affected users and the Albanian Information and Data Protection Commissioner within 72 hours.

10. Your Rights Under GDPR

You have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request deletion of your data (right to be forgotten)

• Restrict or object to certain types of processing

• Withdraw consent at any time

• Receive a copy of your data in portable format

• File a complaint with the Albanian Information and Data Protection Commissioner

To make a request, contact us at:
📧 contact@travelteam.al
We will respond within 30 days of receiving your verified request.

⚠️ Note for bookings made via third-party resellers or travel agencies:
While we will process your request regarding any data handled directly by Travel Team Albania, we encourage you to also contact the respective third party (e.g., reseller platform or external agency) to exercise your rights under their own privacy framework.

11. Children’s Privacy

We do not knowingly collect data from children under the age of 16 without parental consent. If you believe we have collected such data, please contact us for immediate removal.

12. Cookies and Tracking

Our website uses cookies to:

• Maintain user sessions and logins

• Track performance and page usage (Google Analytics)

• Offer personalized content

You can disable cookies through your browser settings. However, some site functions may not work properly without them.

We ask for your consent before placing non-essential cookies.

13. International Transfers

While most of our data processing occurs within the EEA, some service providers may be located outside. In such cases, we ensure:

• Standard Contractual Clauses (SCCs) are used, or

• The provider is in a country deemed “adequate” by the EU Commission

14. Third-Party Links

Our website may contain links to third-party websites or social platforms. Once you leave our site, we are not responsible for their privacy practices.

15. Updates to This Privacy Policy

We may update this policy to reflect legal changes or improvements in our services.
All updates will be posted on our website with the last updated date.

We encourage you to review this policy periodically.

16. Contact Us

If you have questions or concerns about this policy or your data, you can contact us:

Travel Team Albania
📍 Rr. Barikadave 8, Tirane, Albania
📞 Tel/WhatsApp: +355 69 776 6055
📧 Email: contact@travelteam.al
🕘 Monday–Friday: 09:00–18:00 CET