Privacy policy
This policy explains how IDRA DiGIS, the IT and data department of IDRA Research & Consulting, handles personal data when you visit www.idradigis.al (the "website") or contact us through it. We process personal data in line with Law No. 124/2024 "On Personal Data Protection" of the Republic of Albania.
1. Who is responsible
The controller is IDRA Shpk (IDRA Research & Consulting), Siri Kodra str., Build. 94/5, Apt. 49, P.O. Box 1730, Tirana, Albania.
Email: idra@idracompany.com · Phone: +355 69 984 6258
Data Protection Officer: Enkelejda Pashaj.
2. What this policy covers
This policy covers this website only. Our surveys, panels (such as IDRApoll), client platforms and mobile apps have their own privacy notices. The website has no user accounts, no registration, no contact form and no comments. You reach us by email or phone.
3. Personal data we process
- Messages you send us. If you write or call us, we receive your name, email address or phone number and whatever you tell us. We use it to answer you.
- Technical data. Our web server records your IP address, browser type, device, the pages requested, and the date and time. This is used for security and to keep the site running.
- Analytics data, only if you accept cookies. Google Analytics records pages viewed, approximate location, device, browser and how you arrived, linked to a random identifier in a cookie.
- Your cookie choice. Stored in your own browser (local storage). It is not sent to us.
We do not ask for sensitive data through the website, we do not sell personal data, and we do not use it for automated decisions or profiling.
4. Why we use it, and the legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Answer your enquiries and discuss possible work with you | Messages you send us | Steps taken at your request before a contract; our legitimate interest in running our business |
| Keep the website secure and working | Technical data | Our legitimate interest |
| Understand how the website is used and improve it | Analytics data | Your consent |
| Meet legal obligations | Any of the above | Legal obligation |
5. Cookies
The website sets no cookies of its own. The only cookies come from Google Analytics, and only after you press "Accept" in the cookie banner.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Tells visitors apart to produce statistics | Up to 2 years |
_ga_KG5ENFV5HX | Google Analytics | Keeps session state | Up to 2 years |
You can change your choice at any time with the "Cookie settings" link at the bottom of every page. Rejecting cookies does not limit what you can do on the website.
6. Who receives your data
- Google: Google Analytics (only with your consent) and Google Fonts.
- jsDelivr: a content delivery network that serves the Bootstrap code used by the website.
- Our hosting provider and email provider, who process data on our behalf.
- Public authorities, where the law requires it.
When a page loads, your browser fetches fonts and code from Google and jsDelivr, so these providers receive your IP address and browser details. Some of these providers are located outside Albania, including in the United States. Where data is transferred abroad, we rely on the safeguards the law requires, such as an adequacy decision or standard contractual clauses.
7. How long we keep it
- Messages you send us: 24 months after our last contact, or longer if a contract or a legal duty requires it.
- Server logs: 90 days.
- Analytics data: 14 months.
- Your cookie choice: until you clear your browser data or change it.
8. Your rights
You have the right to: access your data; have it corrected; have it erased; restrict its use; receive it in a portable format; object to processing based on our legitimate interest; and withdraw consent at any time, without affecting the lawfulness of what happened before. You will not be subject to decisions based solely on automated processing.
To use these rights, write to idra@idracompany.com. We reply within the deadline set by law (normally 30 days) and may ask you to confirm your identity first.
9. Complaints
If you think we have handled your data unlawfully, please tell us first so we can put it right. You may also complain to the Albanian data protection authority, the Commissioner for the Right to Information and Protection of Personal Data (www.idp.al).
10. Security
The website is served over HTTPS, and access to personal data we receive by email is limited to staff who need it to respond to you.
11. Children
The website is not directed at children, and we do not knowingly collect their personal data.
12. Links to other websites
The website links to other sites, including client projects and our pages on Facebook, Instagram and LinkedIn. They have their own privacy policies, and we are not responsible for them.
13. Changes to this policy
We will publish any change on this page and update the date at the top.