Privacy Policy

Last updated: June 16, 2026

Bizneset.al respects your privacy. This policy explains what data we process, on what legal basis, and your rights under GDPR.

1. Who we are (Data Controller)

Bizneset.al is the data controller. Privacy contact: privacy@bizneset.al

[Ermald Billa]

2. Business data (from public registry)

The directory contains business data sourced from public registries (e.g. QKB / opencorporates.al): name, tax ID, legal form, address, activity, administrators, public financial data. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) to provide a public-interest business directory.

If you represent a business and want correction or removal, write to privacy@bizneset.al. We will assess the request per GDPR.

3. Account data (users)

When you register we collect: email, name, phone (optional), country (optional). Legal basis: contract performance (providing the service) and consent. Passwords are hashed with argon2.

4. Where data is stored

All data is stored in the European Union, on Hetzner Online GmbH servers (Germany). Images are stored in self-hosted MinIO on the same infrastructure. We do not transfer data outside the EU.

5. Cookies and analytics

We use only necessary cookies (login session, language). We do NOT use Google Analytics, Facebook Pixel or third-party trackers.

6. Data retention

Account data is kept while the account is active. Claim requests are kept for 24 months for audit. Public-registry business data is kept while publicly relevant.

7. Your rights (GDPR)

You have the right to: access, rectify, erase, restrict processing, object, and request portability. To exercise: privacy@bizneset.al. You also have the right to lodge a complaint with the data protection supervisory authority.

8. Contact

privacy@bizneset.al