Privacy notice
How we handle personal data on this website. Last updated 24 September 2026.
Home / Privacy notice
This notice explains what happens to personal data when you usebarbarossa.al. It is written underLaw no. 124/2024 “On the Protection of Personal Data”, which has applied in Albania since 1 February 2025. Where we process data about people in the European Union in a way that engages Article 3(2) of the GDPR, that regulation applies as well and we meet the higher of the two standards.
Who is responsible
The controller is Barbarossa Consulting and Services, Tirana, Albania. You can reach us at[email protected] for anything in this notice, including to exercise your rights.
What we collect, and why
There are only two ways this site collects anything about you.
1. If you use the contact form
We receive the name, email address and message you type in. We use them to read and answer your enquiry, and for nothing else. We do not add you to a mailing list — there isn’t one.
Our legal basis is our legitimate interest in responding to people who approach us (Article 7(1)(dh)), and where your enquiry concerns engaging us, the steps taken at your request before entering a contract (Article 7(1)(b)).
How long we keep it: enquiries that do not lead to work are deleted within 24 months of our last exchange. If you become a client, correspondence is kept for as long as we act for you and then for the period our professional and tax obligations require.
2. Server logs
Our hosting and security providers record technical information for every visit, including your IP address, the page requested, the time, and your browser type. This is ordinary infrastructure logging used to deliver the site and defend it against attack, on the basis of our legitimate interest in keeping the site available and secure (Article 7(1)(dh)). We do not use it to identify or profile visitors.
What we do not do
This is short, and we would rather state it plainly than bury it:
- No cookies. This site sets none.
- No analytics. No Google Analytics, no pixels, no tag manager, no heatmaps.
- No advertising or tracking of any kind, and no profiling.
- No automated decision-making about you (Article 20).
- The salary calculator sends nothing anywhere. Everything you type intoit is calculated inside your own browser. We never see it.
Because we set no cookies and run no tracking, there is no consent banner on this site. That is deliberate.
Who else receives data
We use a small number of providers to run the site. Loading a page causes your browser to connect to them, which means they receive your IP address. We have listed every one.
| Provider | What it does | What it receives |
|---|---|---|
| Vercel | Hosting | Server log data for every request |
| Cloudflare | DNS, CDN and protection | Server log data for every request |
| Web3Forms | Delivers contact form submissions to our inbox | Only what you type into the form |
| Google Fonts | Typefaces used across the site | IP address when fonts load |
| Unsplash | Photographs on the site | IP address when images load |
| Esri (ArcGIS) | Map tiles on the home and contact pages | IP address when the map loads |
Some of these providers are outside Albania, so using this site involves transfers abroad. Those transfers rely on the mechanisms in Articles 39–42 of Law 124/2024. We do not sell personal data, and we do not share it for anyone else’s marketing.
Your rights
Under Articles 13 to 20 of Law 124/2024 you can ask us to:
- tell you what we hold about you and give you a copy (Article 14)
- correct anything inaccurate, or erase data (Article 15)
- erase data where the right to be forgotten applies (Article 16)
- restrict how we use it (Article 17)
- provide it in a portable format (Article 18)
- stop processing you object to, including any direct marketing (Articles 19 and 46)
Email [email protected] and we will answerwithin 30 days. If a request is complex we may extend that to a maximum of 60 days in total, and we will tell you why within the first 30 days (Article 12(4)). There is no charge.
Complaints
If something here concerns you, please tell us first — we would rather fix it. You also have the right to complain to the Commissioner for the Right to Information and Protection of Personal Data, and to bring a claim in court (Articles 86 and 88). If the GDPR applies to the processing in question, you may instead complain to the supervisory authority in your own EU country.
Changes
We review this notice at least once a year and whenever the site changes in a way that affects it. The date at the top tells you the current version.
Writing privacy notices is part of what we do. If yours does not say as much as this one,talk to us.