Privacy Policy
Last updated: 15 October 2026
1. Who we are
Park Studios (“we”, “us”) is a branding and digital agency in Tirana, offering web development, digital marketing, SEO, branding and design, communication strategy, advertising and full-service production. For the personal data processed through this website (parkstudios.al) and in our own business relationships, we are the controller.
- Address: Ambasador 3, Tirana, Albania
- Email: info@parkstudios.al
- Phone: +355 69 404 0557
2. Legal framework
We process personal data in line with Law No. 124/2024 “On the protection of personal data” of the Republic of Albania and the guidance of the Information and Data Protection Commissioner. This policy explains what data we collect, why we collect it, how long we keep it and what rights you have.
3. What data we collect
| Category | What it includes | How we get it |
|---|---|---|
| Enquiry data | Name, company, email, phone number and the content of your message | When you contact us by email, phone, Instagram or LinkedIn |
| Client and project data | Contact persons, company name, NIPT, address, project briefs, materials you send us (texts, photos, logos), contracts, invoices and payments | When we prepare an offer and work together on a project |
| Job and internship applications | Name, contact details, CV, portfolio | When you send us your application by email |
| Technical data | IP address, browser and device type, pages visited, date and time of visit | Automatically, through server logs and our security protection |
4. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering enquiries and preparing offers | Steps taken at your request before a contract / legitimate interest |
| Carrying out projects and providing our services | Performance of a contract |
| Showing completed work in our portfolio (“Works”) | Legitimate interest and agreement with the client |
| Evaluating job and internship applications | Steps taken at your request before an employment contract |
| Issuing invoices and keeping accounting records | Legal obligation |
| Protecting the website from spam, bots and attacks | Legitimate interest |
5. When we work on behalf of our clients
When we build, host or manage websites, online shops, social media or advertising campaigns for our clients, we may have access to personal data of their customers or visitors. In those cases our client is the controller and we act as a processor. We process that data only on the client’s documented instructions and for the purpose of the service, keep it confidential, and protect it with appropriate security measures. Each client’s own privacy policy explains how that data is used.
6. Cookies and third-party services
Our website uses only necessary cookies, which it needs to work correctly and securely (including a technical cookie from our hosting provider’s bot protection). We do not use analytics or advertising cookies.
Our Instagram (Meta Platforms Ireland Ltd.) and LinkedIn (LinkedIn Ireland Unlimited Company) pages are linked from the website. These platforms process your data under their own privacy policies only when you click through to them or message us there.
7. Who we share your data with
We do not sell your personal data. We share it only when needed with:
- our website hosting and IT providers;
- subcontractors working on a project (e.g. photographers, printers), only the data they need;
- our accountants and the tax authorities, as required by law;
- courts or other authorities, when the law requires us to.
8. International transfers
Some of the tools and providers we use may process data outside Albania, including in the European Union and the United States. In those cases, the transfer is protected by appropriate safeguards, such as European Commission adequacy decisions (including the EU–US Data Privacy Framework) or standard contractual clauses.
9. How long we keep your data
| Data | Retention period |
|---|---|
| Enquiries that do not lead to a project | 1 year |
| Project files and correspondence | As long as the cooperation lasts, plus 5 years |
| Contracts, invoices and accounting records | 10 years, as required by law |
| Job and internship applications | 6 months after the recruitment ends, or 1 year if you agree we can keep them for future positions |
| Server logs | 6 months |
10. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), protection against bots and attacks, and access only for authorised staff. If a data breach is likely to put your rights at risk, we will notify the Commissioner within 72 hours and inform you when the law requires it.
11. Your rights
Under Law No. 124/2024 you have the right to:
- access the data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where there is no legal reason for us to keep it;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw any consent you have given, at any time.
To use any of these rights, write to info@parkstudios.al. We will reply within 30 days. If your request concerns data we process for one of our clients, we will forward it to that client.
12. Children
Our website and services are not aimed at children under 16, and we do not knowingly collect their data.
13. Complaints and changes
If you think we have not handled your data correctly, you can complain to the Information and Data Protection Commissioner: Rr. “Abdi Toptani”, Nd. 5, Tirana; www.idp.al; info@idp.al.
We may update this policy. The current version is always published on this page, with its date at the top.