Privacy Policy

IT Arena sh.p.k., VAT M11905015A, Rr. Loni Ligori, Astir, Tirana, Albania (“IT Arena”, “we”). Email: privacy@itarena.al.

• Identity: name, email, phone, company, VAT ID (where applicable)
• Contract & billing: address, payment data, order history
• Client portal: credentials, tickets, uploaded documents
• Public forms: contact, quote requests, subscriptions
• Technical: IP, server logs, device/browser (cookies per cookie policy)

• Contract / quote — performance of contract (GDPR Art. 6(1)(b))
• IT support — legitimate interest in service and security
• Marketing — explicit consent (newsletter, withdraw anytime)
• Legal obligations — invoicing, accounting, authorities
• Web analytics — consent only (see cookie policy)

We use processors (hosting, SMTP email, payments, CRM) under data processing agreements. We do not sell personal data. Transfers outside the EU only with appropriate safeguards (SCCs, adequacy decisions, etc.).

We keep data as long as needed for the purpose: contracts up to 10 years after end (tax law), tickets up to 3 years, marketing until consent withdrawal, technical logs up to 12 months (depending on security needs).

Technical and organizational measures aligned with ISO 27001: access control, encryption in transit, backups, staff training, incident management. We notify the authority and you within 72 hours when a breach risks your rights.

Access, rectification, erasure, restriction, portability, objection, withdraw consent. Requests to privacy@itarena.al. Response within 30 days. Complaint to the Albanian Data Protection Commissioner.

We use essential cookies and, with consent, analytics. Details in our Cookie Policy. Manage preferences via the banner or site footer.

We may update this policy; the latest date is shown at the top. Material changes are announced on the site or by email to active clients.