Privacy Policy
Last updated: 30 January 2026
This Privacy Policy explains how Bujtina Polia (“we”, “us”) collects and uses personal data when you visit our website or make a reservation.
Controller (Data Owner): Bujtina Polia
Address: Logu i Kishes, 1, Theth, 4009 Shkodër, Albania
Email: booking@bujtinapolia.com | Tel: +355 69 301 6781 | Web: bujtinapolia.com
1) What data we collect
When you use our website and reservation page, we may collect:
-
Identity & contact details: name, email, phone number
-
Booking details: dates, number of guests, room type, special requests (e.g., dietary needs)
-
Payment status: confirmation that a payment/deposit was made (we do not need or store your full card details if a third-party processor is used)
-
Communications: messages you send us by email/phone
-
Technical data: IP address, device/browser info, pages visited, and cookies (see Cookies below)
2) Why we use your data
We use your data to:
-
Process and manage reservations and your stay
-
Send booking confirmations and important service messages
-
Provide customer support and respond to requests
-
Improve our website, security, and service quality
-
Meet legal/accounting obligations (where applicable)
3) Legal basis for processing
Depending on the situation, we process personal data based on:
-
Contract necessity (to handle your reservation and provide accommodation)
-
Legal obligations (e.g., accounting/tax or regulatory requirements)
-
Legitimate interests (service improvement, fraud prevention, website security)
-
Consent (where you choose to receive optional updates/marketing, or for certain cookies)
Albania has a dedicated supervisory authority for personal data protection (“the Commissioner”).
4) How we share your data
We may share data only when necessary, such as with:
-
Website/hosting and IT service providers
-
Reservation, email, and payment service providers (to run the booking flow)
-
Authorities, where required by law
We do not sell your personal data.
5) International transfers
If any of our service providers process data outside Albania (or outside Europe), we will take reasonable steps to ensure appropriate safeguards are in place (for example, contractual protections).
6) Data retention
We keep personal data only as long as needed to:
-
Manage your booking and provide the service
-
Maintain necessary records for legal/accounting purposes
-
Resolve disputes and enforce our terms
7) Your rights
You can request to:
-
Access, correct, or update your personal data
-
Delete your data (when legally possible)
-
Restrict or object to processing in certain cases
-
Withdraw consent at any time (where processing is based on consent)
To make a request, contact booking@bujtinapolia.com.
If you believe your rights are violated, you may complain to Albania’s Commissioner for the Right to Information and Protection of Personal Data.
8) Cookies
We may use cookies and similar technologies for essential site functionality, basic analytics, and improving user experience. You can control cookies through your browser settings, and (where implemented) our cookie banner/settings.
9) Visitors from the EU/EEA
If we offer services to people located in the EU/EEA, the GDPR may apply in addition to local rules (territorial scope).
10) Contact
For privacy questions or requests: booking@bujtinapolia.com