Politika e Privatësisë

Kamping is operated by [COMPANY NAME] sh.p.k., registered in Albania at [REGISTERED ADDRESS], Albania, company number [NIPT / COMPANY NUMBER] ("Kamping", "we", "us"). We are the data controller for the personal data described in this policy.

For anything in this policy, write to privacy@kamping.al. We answer data requests within 30 days.

This policy covers kamping.al and any subdomain of it. Kamping Manager, our product for accommodation businesses, and our mobile apps are not yet available; when they launch they will have their own notice or an update to this one, and we will tell account holders before that happens.

Kamping is an Albanian service and the places it lists are in Albania. We publish the site in Albanian, English, Italian and German so that visitors travelling here can read it in a language they understand. Wherever you happen to be when you read it, the rights set out below apply to you.

Information you give us when you create an account: your name or display name, email address, a password (stored only as a cryptographic hash, never as text we can read), your chosen language, and whether the account is a traveller account or a host account.

Content you choose to submit: places you add, reviews and ratings you write, photos you upload, corrections and reports you send, and messages you send us through our forms. This is stored together with the account that submitted it.

Technical information collected automatically: IP address, browser and device type, referring page, and the pages you visit. We use this for security, abuse prevention and to understand roughly how the site is used.

Approximate location, only if you press "Near me" and your browser or device asks you and you agree. We use those coordinates to centre the map on your screen. We do not store them on our servers and we do not build a location history.

We do not ask for your date of birth, your identity documents, or your payment details. The service is free and we do not process payments at all — see "Money" in our Terms.

We do not track you across other websites, we do not sell personal data, and we do not use advertising networks.

To run your account and provide the service you asked for — that is performance of our contract with you.

To publish the places, reviews and photos you submit — that is our legitimate interest in operating a community directory, and yours in contributing to it. You choose what to submit and you can delete it.

To keep the service secure, prevent spam and abuse, and understand aggregate usage — our legitimate interest in a working, safe service.

To use your device location — your consent, given at the moment you press the button, and withdrawable at any time in your browser or device settings.

To send you a service email you asked for, such as a password reset — performance of our contract. We will not add you to a marketing list without asking separately.

Anything you publish — a place, a review, a photo, your display name — is public. Treat it as public. Your email address is never published.

We use service providers who process data on our instructions and under contract. Today those are: [HOSTING PROVIDER] for running the website, [DATABASE PROVIDER] for the database, accounts and uploaded photos, [EMAIL PROVIDER] for sending service emails, and [MAP PROVIDER] for map tiles. A current list is kept at kamping.al/legal/subprocessors.

We may disclose data if we are legally required to, or where it is necessary to establish, exercise or defend a legal claim. If we receive such a request we will tell you unless we are legally prohibited from doing so.

If the business is ever sold or merged, personal data may transfer to the buyer. We will tell account holders before that happens and you will be able to delete your account first.

We are established in Albania and your data is processed there and by our service providers, which are established elsewhere — including in the United States and in the European Union. Your personal data is therefore transferred internationally. We rely on our providers’ standard contractual clauses and published transfer safeguards.

Many of our users are travellers visiting Albania from elsewhere. If you are in the European Economic Area and you are unhappy with how your data has been handled, you can raise it with us or with your national supervisory authority, as well as with the Albanian authority named below.

Account data: for as long as your account exists, and for up to 12 months after you delete it, so that we can deal with disputes and prevent a banned account being immediately recreated.

Content you published: reviews and places stay in the directory after you delete your account, but are detached from you and shown without your name. If you want a specific contribution removed rather than anonymised, ask us and we will remove it.

Technical logs: a short, fixed period of no more than 90 days, then deleted.

Messages sent through our contact forms: up to 24 months, so we have a record of what was asked and answered.

You can ask us for a copy of your data, correct it, delete it, get it in a portable format, restrict what we do with it, or object to processing we base on legitimate interest. Where we rely on consent you can withdraw it at any time, which does not affect anything done before you withdrew it.

Most of this you can do yourself from your account. For anything else, write to privacy@kamping.al.

If you think we have handled your data badly, please tell us first — but you are entitled to complain directly to the Information and Data Protection Commissioner in Albania, or, if you are in the EEA, to your national data protection authority.

The site is served over HTTPS only. Passwords are hashed. Access to production data is limited to people who need it. No service is perfectly secure, and we do not claim otherwise.

If a breach occurs that is likely to put you at risk, we will notify the supervisory authority and affected users without undue delay.

Kamping is not intended for children under 16 and accounts are not knowingly created for them. If you believe a child has an account, tell us and we will delete it.

We will update the date at the top when this policy changes. If a change materially affects your rights we will tell account holders by email before it takes effect.