Privacy Policy
Updated: 30 July 2026
This policy explains clearly what personal data Bizneset.al collects, why, how we use it, where we store it, and what your rights are. We wrote it to be understood, not to hide behind legal language.
1. Who is responsible for your data
The data controller is:
Ermald Billa, natural person, Albania
Email: privacy@bizneset.al
Bizneset.al is not registered as a company — it is run as an individual project by Ermald Billa, who holds full responsibility for the handling of your data.
2. Which legal framework applies
Data processing is governed mainly by Albanian Law No. 9887/2008 on Personal Data Protection, as amended. In addition, Bizneset.al voluntarily applies the principles of the GDPR (EU 2016/679) as an extra safeguard, even though the platform is not registered in the EU. This means we handle your data with the same level of care required by European law.
3. What data we collect
We collect only the data genuinely necessary for the platform to function. No data is collected "just in case" or for unknown purposes.
3.1 Business data from the public registry
Most businesses in the directory come from the public business registry: name, tax ID, address, activity and other financial/corporate data that are public by law. These are not private data collected by us, but already-public information structured to be found more easily.
3.2 When you register
Name, email, phone (optional), country, and password (stored encrypted, never in plain text).
3.3 When you claim a business
Contact details and a proof document (PDF or image) showing your connection to the business. The document is used only for verification by the administrator.
3.4 When you leave a review or activate a signal
The review text and star rating, or the signal title and description (hiring, offer, export, import, partnership) — linked to your account.
3.5 When you contact a business
The name, email and message you write are sent directly to the business, to the email address it has registered.
3.6 Technical data collected automatically
IP address — for security (spam and abuse prevention) and in standard server logs. Browser and device type — the same technical logs. Logs are kept for a limited period and then deleted automatically.
4. What we do NOT collect
For full transparency, this list is as important as the one above:
- We do not use tracking cookies of any kind.
- We do not use Google Analytics or other third-party analytics.
- We do not show ads and do not share data with ad networks.
- We do not sell, rent or transfer your data to any third party for marketing.
- We do not build behavioral profiles of visitors.
5. How we use your data
| Purpose | Legal basis |
|---|---|
| Displaying businesses from the public registry | Legitimate interest / already-public data |
| Creating and managing your account | Performance of the requested service |
| Verifying a business claim | Performance of your request |
| Publicly displaying reviews and signals | Your consent at the time of submission |
| Sending your message to a business | Performance of your request |
| Verification, reset and notification emails | Performance of the requested service |
| Preventing spam and abuse | Legitimate security interest |
6. Who we share data with
We share data only with the minimal technical services needed for the site to work:
- Hetzner Online GmbH (Germany) — the server provider hosting the platform and storing images (logos, photos). Servers are in Germany, within the EU.
- Brevo (Sendinblue SAS, France) — the email provider for sending automated notifications (SMTP). Within the EU.
- OpenStreetMap Foundation — when an address is given, it is sent to their service (Nominatim) only to convert it into map coordinates. No other personal data is transmitted.
None of these providers may use your data for any purpose other than providing the technical service.
7. How long we keep your data
We do not set an automatic deletion deadline — your data remains stored until you request its deletion. You can request deletion at any time, without giving a reason, and we will carry it out as quickly as possible.
8. Your rights
You have the right to access, correct, delete ("right to be forgotten"), restrict, transfer your data, object to processing, and withdraw consent at any time. To exercise these rights, write to privacy@bizneset.al. We will respond within 30 days.
9. Data security
- Passwords are stored hashed, never in plain text.
- The connection to the site is encrypted via HTTPS/SSL.
- Forms are protected with rate-limiting against spam.
- Access to the admin panel is restricted and protected with an encrypted password.
- Servers are located in the European Union.
10. Cookies
We use only a technically necessary session cookie, needed for basic functioning (keeping your login session). For details, see the Cookie Policy.
11. Minors
Bizneset.al is intended for users over 18 and for legally recognized businesses. We do not knowingly collect data from anyone below this age. If you believe a minor has provided us data, contact us immediately to delete it.
12. Changes to this policy
If we change how we handle data, we will update this page and mark the new date at the top. Significant changes will be announced visibly.
13. Contact
Ermald Billa
Email: privacy@bizneset.al