Privacy Policy.

1. Who we are

This website, sits.digital, is operated by SITS (Security Information Technology Service Solutions), based at Durana Tech Park, Durrës, Albania. SITS is the controller of the personal data described in this policy.

2. What this policy covers

This policy explains how we handle personal data when you:

• browse this website;
• contact us by email, phone, WhatsApp or the contact form;
• are a client, prospective client, supplier or partner of SITS;
• send us a job application or CV.

We process personal data in line with Albanian personal data protection law (Law No. 124/2024 “On Personal Data Protection”) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

3. Data we collect

Information you give us

When you contact us we receive what you choose to share, usually your name, company, email address, phone number, the service you’re interested in and your message. When you send the contact form, our website’s server forwards your details to our inbox by email. They are not stored in a database on the website.

Technical data

Like almost every website, our hosting server automatically records basic technical information for each request: IP address, browser type, the page requested, the date and time, and the referring page. We use this only to keep the website running, secure and free of abuse.

Cookies

We use one strictly necessary cookie to remember your cookie preferences. We don’t use analytics or advertising cookies. See our Cookie Policy for details.

Client and business data

If you work with us, we process business contact details, contract information, project communications and billing details needed to deliver the service and meet our legal obligations.

Job applications

If you send us a CV, we use it only to assess your application.

4. Why we use it and our legal basis

We don’t use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

5. Who we share it with

We never sell personal data. We share it only where necessary:

• Service providers who host our website and email and act on our instructions under confidentiality obligations.
• WhatsApp (Meta), if you choose to message us on WhatsApp. WhatsApp processes that conversation under its own privacy policy.
• Google, if you open our location in Google Maps. Google processes that visit under its own privacy policy.
• Professional advisers, such as accountants and lawyers, where needed.
• Public authorities, when required by law.

6. International transfers

Some of the providers above, such as email and messaging services, may process data outside Albania. When that happens we rely on appropriate safeguards recognised by applicable law, such as adequacy decisions or standard contractual clauses.

7. How long we keep it

• Enquiries that don’t lead to an engagement: up to 24 months, then deleted.
• Client records: for the duration of the relationship and afterwards for as long as Albanian accounting and tax law requires.
• Server logs: for a limited period, normally no longer than 12 months.
• Job applications: up to 12 months after the recruitment process, unless you ask us to delete them sooner.
• Cookie preference: 6 months after you make a choice, or 1 day if you haven’t chosen yet (see the Cookie Policy).

8. How we protect it

Security is our profession. We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls, least-privilege access and secure handling of client information. No method of transmission over the internet is completely secure, but we work to protect your data and to respond quickly to any incident.

9. Your rights

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing.

To use any of these rights, email ceo@sits.digital. We’ll reply within one month and may need to confirm your identity first.

If you’re unhappy with how we handle your data, you can complain to the Albanian supervisory authority, the Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale), at www.idp.al. If you live in the EU, you can also contact your local data protection authority.

10. Children

Our website and services are intended for businesses and are not directed at children under 16. We don’t knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. Significant changes will be highlighted on this website.

12. Contact us

Questions about this policy or your personal data: