Prishtina REA

PRIVACY POLICY

Last updated: March 26, 2026

  1. Introduction

Prishtina REA (hereinafter “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information obtained through our website, in accordance with the Law on Protection of Personal Data of Kosovo (Law No. 06/L-082) and applicable European Union data protection regulations (GDPR).

 

  1. Data Controller

The data controller responsible for your personal data is:

  • Company: Prishtina REA
  • Registration No.: 5100981-9
  • Address: Zagrebi str. 23, second floor, 10000 Prishtina, Kosovo
  • Email: inf@prishtina-rea.net
  • Phone: +383 38 244 951

 

  1. What Data We Collect

We may collect and process the following categories of personal data:

  • Contact information: Name, email address, phone number, and message content when you submit a contact form or send us an email.
  • Technical data: IP address, browser type and version, operating system, referring URLs, pages visited, and time of visit — collected automatically via server logs and analytics tools.
  • Cookie data: Preferences and session data stored via cookies. See our Cookie Policy for details.
  • Newsletter / subscription data: Email address and name if you subscribe to our communications.

 

  1. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR): When you fill out a contact form, subscribe to newsletters, or accept non-essential cookies.
  • Legitimate interest (Art. 6(1)(f) GDPR): For website security, fraud prevention, and improving our services.
  • Legal obligation (Art. 6(1)(c) GDPR): Where processing is required by law.

 

  1. How We Use Your Data

We use the data we collect for the following purposes:

  • To respond to your inquiries and provide requested information.
  • To send newsletters or updates (only with your consent).
  • To analyse website usage and improve user experience.
  • To ensure the technical security and functionality of our website.
  • To comply with legal obligations.

 

  1. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share data with:

  • Service providers: Hosting providers, email service providers, and analytics tools acting as data processors under strict confidentiality agreements.
  • Authorities: Where required by law, regulation, or legal process.

All third-party service providers are contractually required to protect your data in accordance with applicable law.

 

  1. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy:

  • Contact form submissions: up to 2 years.
  • Newsletter subscriptions: until you unsubscribe.
  • Technical/log data: up to 12 months.
  • Data subject to legal retention obligations: as required by law.

 

  1. Your Rights

Under applicable data protection law, you have the following rights regarding your personal data:

  • Right of access — to obtain a copy of your personal data we hold.
  • Right to rectification — to correct inaccurate or incomplete data.
  • Right to erasure — to request deletion of your data (“right to be forgotten”).
  • Right to restriction — to limit how we process your data.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to object to processing based on legitimate interests.
  • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at inf@prishtina-rea.net. We will respond within 30 days.

 

  1. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include SSL/TLS encryption, access controls, and regular security reviews.

 

  1. International Transfers

Your data is primarily processed within Kosovo and the European Economic Area (EEA). If any transfer outside the EEA is required, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

 

  1. Cookies

Our website uses cookies. For full details on the types of cookies we use and how to manage them, please refer to our Cookie Policy.

 

  1. Links to Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies independently.

 

  1. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.

 

  1. Contact Us

For any questions, concerns, or requests related to this Privacy Policy, please contact us:

You also have the right to lodge a complaint with the Kosovo Information and Privacy Agency (IPA) at ipa.rks-gov.net.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.