Privacy Policy

Last Updated: October 23, 2025

Effective Date: October 23, 2025

1. Information We Collect

We collect several types of information to provide and improve our services:

1.1 Personal Information You Provide

When you make a booking or register for our services, we may collect:

• Contact Information: Name, email address, phone number, physical address
• Identification Information: Date of birth, driver's license number (for vehicle rentals), passport number (where required)
• Payment Information: Credit/debit card details, billing address (processed securely through our payment providers)
• Booking Details: Travel dates, preferences, special requirements, number of participants
• Communication: Messages, feedback, reviews, and customer service inquiries

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, referring websites
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking Technologies: See our Cookie Policy for details

1.3 Information from Third Parties

We may receive information from:

• Payment Processors: Transaction confirmation and payment status
• Social Media: If you connect through social login features
• Analytics Providers: Website usage statistics and performance data
• AviaCMS: Platform-level data for service delivery and support

2. How We Use Your Information

We use your personal data for the following purposes:

2.1 Service Delivery

• Process and confirm your bookings and reservations
• Provide the services you requested (Travel Marketplace, Car Rental, Tours & Activities, Transfers, Bike Rental)
• Send booking confirmations, receipts, and service updates
• Communicate with you about your bookings
• Manage customer support inquiries

2.2 Payment Processing

• Process payments and prevent fraud
• Issue refunds when applicable
• Maintain transaction records for accounting and tax purposes

2.3 Service Improvement

• Analyze website usage to improve our services
• Understand customer preferences and behavior
• Develop new features and offerings
• Test and optimize our website performance

2.4 Marketing and Communications

• Send promotional offers, newsletters, and updates (with your consent)
• Personalize marketing content based on your interests
• Request reviews and feedback on our services
• Inform you about special offers and seasonal promotions

You can opt-out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

2.5 Legal and Security

• Comply with legal obligations and regulations
• Protect against fraud, unauthorized transactions, and other liabilities
• Enforce our Terms of Use and other policies
• Respond to legal requests from authorities

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract Performance: Processing is necessary to fulfill our contract with you (booking services)
• Legitimate Interests: We have a legitimate interest in improving our services, preventing fraud, and ensuring security
• Consent: You have given us explicit consent for marketing communications or cookie usage
• Legal Obligation: We must process your data to comply with legal and regulatory requirements

4. How We Share Your Information

We do not sell your personal data. We may share your information with:

4.1 Service Providers

We work with trusted third-party service providers who assist us in:

• Payment Processing: AviaCMS secure payment system
• Email Communications: Email service providers for transactional and marketing emails
• Analytics: Google Analytics, Facebook Pixel, and similar tools
• Customer Support: CRM and helpdesk platforms
• Cloud Hosting: Server and database hosting providers

All service providers are contractually required to protect your data and use it only for the purposes we specify.

4.2 AviaCMS

As our website is powered by AviaCMS, certain information is shared with the platform for:

• Service delivery and technical support
• Platform analytics and performance monitoring
• Compliance with platform terms and conditions
• Payment processing and commission management

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Court orders or legal processes
• Requests from law enforcement or government authorities
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and your options regarding your data.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: All sensitive data (including payment information) is encrypted using SSL/TLS technology
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Servers: Data is stored on secure servers with firewall protection
• Regular Audits: We conduct security audits and vulnerability assessments
• PCI DSS Compliance: Our payment processing complies with Payment Card Industry Data Security Standards

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Booking Data: Retained for at least 7 years for tax and accounting purposes
• Marketing Data: Until you unsubscribe or request deletion
• Website Analytics: Typically retained for 12-36 months
• Support Communications: Retained for 3-5 years for quality assurance

After the retention period expires, we securely delete or anonymize your data.

7. Your Rights and Choices

You have the following rights regarding your personal data:

7.1 Access and Portability

• Right to Access: Request a copy of the personal data we hold about you
• Right to Portability: Receive your data in a structured, machine-readable format

7.2 Correction and Deletion

• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)

7.3 Restriction and Objection

• Right to Restriction: Request that we limit how we use your data
• Right to Object: Object to processing based on legitimate interests or for marketing purposes

7.4 Consent Withdrawal

• Right to Withdraw Consent: If we process your data based on consent, you can withdraw it at any time

7.5 How to Exercise Your Rights

To exercise any of these rights, please contact us at info@deti.al. We will respond to your request within 30 days.

If you are located in the EEA, you also have the right to lodge a complaint with your local data protection authority.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. For detailed information about our use of cookies, please see our Cookie Policy.

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.

9. Third-Party Websites

Our website may contain links to third-party websites (such as social media platforms or partner sites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will take steps to delete such information.

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside of . When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant data protection authorities

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice on our website
• Sending you an email notification (for significant changes)

We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: