Privacy Policy
This Privacy Policy explains how Havenbach (the representative office in Albania of Totsi Island Properties Group I.K.E., EU registered) collects, uses, stores, and protects your personal data when you use our website https://havenbach.al or our services. We are committed to safeguarding your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Albanian data protection laws.
1. Data Controller
The data controller responsible for processing your personal data is:
Totsi Island Properties Group I.K.E.
Registered Address: Kalives 730 03, Chania, Crete, European Union
Representative Office: Hysen Kertusha Str, 2000, Durrës, Albania
Phone (AL): +355 68 60 80 345
Email: [email protected]
2. Personal Data We Collect
We may collect the following categories of personal data:
Identification data: name, surname, nationality, date of birth
Contact details: phone number, email address, postal address
Service-related data: information you provide when requesting real estate consultancy, residency support, or company formation services
Financial data: where required for contractual or legal obligations such as payment details or invoices
Technical data: IP address, browser type, operating system, device information, and usage statistics collected through cookies and analytics tools
3. Purpose and Legal Basis of Processing
We process your personal data for the following purposes:
Service provision: to provide real estate consultancy, business formation, and residency services (Art. 6(1)(b) GDPR – performance of a contract)
Legal compliance: to meet obligations under Albanian, EU, and international law (Art. 6(1)(c) GDPR – legal obligation)
Communication: to respond to inquiries and provide customer support (Art. 6(1)(f) GDPR – legitimate interest)
Marketing (optional): to send you updates about services, news, or events, if you have provided consent (Art. 6(1)(a) GDPR – consent)
Website operation: to improve user experience, security, and performance (Art. 6(1)(f) GDPR – legitimate interest)
4. Data Sharing and Disclosure
We may share your personal data only when necessary:
With legal partners and professionals such as lawyers, notaries, or accountants who support residency and property services
With public authorities where legally required such as QKB, tax authorities, or immigration offices
With service providers including IT, hosting, and security providers who process data on our behalf
With banks and payment processors for financial transactions
We will never sell or rent your personal data to third parties.
5. Data Storage and Retention
Your personal data is stored securely within the EU and Albania. We retain personal data only as long as necessary to fulfill the purposes outlined above or as required by law. Client records are generally kept for up to 10 years to comply with legal obligations. Marketing data is kept until you withdraw your consent. Technical data is typically retained for 12 months.
6. Data Subject Rights
You have the following rights under GDPR and Albanian data protection law:
Right to access your personal data
Right to rectification of inaccurate or incomplete data
Right to erasure where legally applicable
Right to restriction of processing
Right to data portability
Right to object to processing for legitimate interests or direct marketing
Right to withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us at [email protected].
7. Cookies and Tracking
Our website uses cookies and similar technologies to ensure proper functioning, improve performance and security, analyze traffic, and support optional marketing features. You can manage or disable cookies through your browser settings. More details are available in our Cookie Policy.
8. Data Security
We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or loss. These include encryption, secure servers, access controls, and regular security checks.
9. International Data Transfers
Where data is transferred outside the EU, such transfers will only occur if adequate safeguards are in place, such as EU Standard Contractual Clauses or other recognized legal protections.
10. Liability and Disclaimer
Havenbach is not responsible for any unauthorized access, technical failures, or circumstances beyond our control that may affect data security. External links included on our website are provided for convenience. We are not responsible for the privacy practices or content of third-party websites.
11. Updates to Privacy Policy
This Privacy Policy may be updated to reflect changes in law, business operations, or data protection practices. The most recent version will always be available on our website.
12. Contact Information
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us:
Havenbach
Representative Office in Albania
Hysen Kertusha Str, 2000, Durrës, Albania
Phone: +355 68 60 80 345
Email: [email protected]