Privacy Policy

1. Who we are

Kulla e Andrrave is operated by:

For the purposes of applicable personal data protection legislation, the operator of Kulla e Andrrave is responsible for the personal information processed through this website and the direct booking service.

2. Information we collect

Depending on how you use the website, we may collect information such as:

• your name and surname;
• email address;
• telephone number;
• check-in and check-out dates;
• number of guests and booking details;
• messages and requests you send to us;
• booking references and reservation status;
• payment status and payment transaction references;
• technical information necessary for the security and operation of the website.

3. Why we use your information

Personal information may be processed in order to:

• respond to enquiries;
• check accommodation availability;
• create and manage reservations;
• calculate and confirm the price of a stay;
• process and verify payments;
• send booking, payment, cancellation and other service-related notifications;
• provide customer service;
• meet applicable accounting, tax, legal and regulatory obligations;
• protect the website, our guests and our business against fraud, misuse or security incidents.

4. Legal basis for processing

We process personal information when it is necessary to take steps at your request before a booking, to perform a booking or accommodation agreement, to comply with legal obligations, or where we have a legitimate business interest that does not override your rights.

Where consent is required by applicable law, information will be processed on the basis of your consent.

5. Payments and card information

Secure online card payments may be processed through RaiAccept and the acquiring banking infrastructure made available to Kulla e Andrrave.

Card details are entered into the secure payment environment provided by the payment service provider. Kulla e Andrrave does not receive or store your complete payment card number or CVV.

We may retain information needed to identify and reconcile a payment, such as the booking reference, payment reference, amount, currency, payment status and transaction status.

6. Who may receive your information

Personal information is not sold to third parties.

Information may be shared only when reasonably necessary with:

• banks and payment service providers involved in processing or refunding a payment;
• hosting, email and technical service providers used to operate the website and booking service;
• professional advisers where necessary;
• public authorities where disclosure is required by applicable law.

7. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including the management of reservations, customer service, accounting, tax, dispute resolution and other legal obligations.

Information that is no longer required will be deleted, anonymised or otherwise securely disposed of where appropriate.

8. Security

We use reasonable organisational and technical measures to protect personal information against unauthorised access, loss, alteration, disclosure or destruction.

Payment card processing is performed through the designated secure payment provider rather than directly by the Kulla e Andrrave website.

9. Your privacy rights

Subject to applicable law, you may have the right to request:

• access to personal information concerning you;
• correction of inaccurate information;
• deletion of information where applicable;
• restriction of processing where applicable;
• objection to certain processing based on legitimate interests;
• portability of information where the legal requirements are met.

You may also have the right to lodge a complaint with the competent Albanian data protection authority.

10. Cookies and technical information

The website may use cookies or similar technical mechanisms that are necessary for security, session management and the correct operation of the website.

Server logs may also record technical information such as request time, browser information and network information for security and operational purposes.

11. International service providers

Some service providers involved in website hosting, communications or payment processing may operate internationally. Where personal information is transferred internationally, it will be handled in accordance with applicable data protection requirements.

12. Changes to this Privacy Policy

This Privacy Policy may be updated when our services, technology, payment arrangements or legal obligations change. The current version will always be published on this page.

13. Contact us

For privacy questions, customer service requests or requests concerning your personal information, please contact: