Privacy Policy

Last Updated: September 3, 2026

Penta Group Vlore respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how Penta Group Vlore collects, uses, stores, protects, and processes personal data when you visit or use our website, contact us, submit an enquiry, request information, make a booking, or otherwise interact with our online services.

We process personal data in accordance with applicable legislation of the Republic of Albania, including Law No. 124/2024 “On Personal Data Protection”, as well as applicable decisions, instructions, and requirements issued by the competent data-protection authority.

1. Data Controller

The entity responsible for processing your personal data through this website is:

Penta Group Vlore
Vlore, Albania

Website: https://penta.al/
Email: info@penta.al
Telephone: (+355) 69 405 2555
Address: Rruga Damian Humariti, Zona Industriale, Vlorë, Albania 9401

For questions concerning privacy or the processing of your personal data, you may contact us using the details above.

2. What Personal Data We May Collect

Depending on how you use our website, we may collect the following categories of information:

Information you provide directly

This may include:

  • Full name

  • Telephone number

  • Email address

  • Company or organization name

  • Address or location information

  • Booking, reservation, or appointment details

  • Information contained in your enquiry or message

  • Information you provide when requesting a quotation or service

  • Any other information you voluntarily provide to us

You are generally free to decide whether to provide personal information. However, certain information may be necessary for us to respond to your enquiry or provide a requested service.

Technical information

When you visit our website, certain technical information may be collected automatically, such as:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Website pages visited

  • Date and time of visits

  • Referring website

  • General usage and interaction information

  • Technical information required for website security and functionality

Where technical information constitutes personal data, it will be processed in accordance with applicable data-protection requirements.

3. How We Collect Your Data

We may collect personal data when you:

  • Visit our website

  • Complete a contact or enquiry form

  • Contact us by email or telephone

  • Request information about our services

  • Make or request a reservation or booking

  • Request a quotation

  • Subscribe to communications or newsletters, where available

  • Communicate with us through social-media platforms

  • Use other services or features available through our website

We may also receive limited information from service providers that support the operation of our website.

4. Why We Use Your Personal Data

We may process personal data for purposes including:

  • Responding to enquiries and requests

  • Providing requested information

  • Managing bookings, reservations, appointments, or service requests

  • Preparing quotations or proposals

  • Providing and managing our services

  • Communicating with customers and potential customers

  • Managing customer relationships

  • Improving our website and services

  • Maintaining website security

  • Detecting and preventing fraud, misuse, or unauthorized activity

  • Complying with legal and regulatory obligations

  • Establishing, exercising, or defending legal claims

  • Sending marketing communications where legally permitted and, where required, based on your consent

We will not use your personal data for purposes that are incompatible with the purposes for which it was originally collected unless permitted or required by applicable law.

5. Legal Basis for Processing

Depending on the circumstances, Penta Group Vlore may process your personal data on one or more legally permitted bases, including:

  • Your consent

  • The performance of a contract or steps taken at your request before entering into a contract

  • Compliance with a legal obligation

  • Protection of legitimate interests, where permitted by law

  • Other lawful grounds provided by applicable data-protection legislation

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Marketing Communications

If you have provided the necessary consent, or where otherwise legally permitted, we may use your contact information to send information about:

  • Services

  • Special offers

  • Promotions

  • Events

  • Company news

  • Other information that may be relevant to you

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

We will not use your personal data for direct marketing where such processing is prohibited by applicable law.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies may be used for purposes such as:

  • Essential website functionality

  • Security

  • Remembering preferences

  • Website performance

  • Traffic and usage analysis

  • Improving the user experience

  • Marketing or advertising, where applicable

Where consent is legally required for non-essential cookies, we will request your consent before placing or using those cookies.

You may also control cookies through your browser settings. Disabling certain cookies may affect some website functionality.

For additional information, please refer to our Cookie Policy.

8. Google Analytics and Other Analytics Services

If analytics services such as Google Analytics are used on our website, these services may collect information about how visitors interact with the website.

Depending on the configuration of the service, information may include device information, approximate location, browser information, pages visited, and interaction data.

Where required, appropriate consent mechanisms will be used before non-essential analytics technologies are activated.

9. Third-Party Service Providers

We may use trusted third-party service providers to help operate our website and business.

These may include providers of:

  • Website hosting

  • Website maintenance

  • Email services

  • Contact-form services

  • Booking or reservation systems

  • Payment processing

  • Analytics

  • Marketing services

  • IT and cybersecurity services

  • Customer-support services

Where these providers process personal data on our behalf, we take appropriate steps to ensure that processing is carried out in accordance with applicable legal requirements.

Third parties may only receive information that is necessary for the relevant service or purpose, subject to applicable law.

10. Payments

If the website provides online payment functionality, payment information may be processed directly by a third-party payment provider.

Penta Group Vlore does not intend to collect or store complete payment-card details through its website unless expressly stated otherwise.

Payment providers may process your information according to their own privacy policies and terms.

11. Social Media

Our website may contain links or integrations with social-media platforms.

If you interact with social-media features or visit external social-media platforms, those platforms may collect and process personal information according to their own privacy policies.

Penta Group Vlore is not responsible for the privacy practices of third-party social-media platforms.

12. Data Sharing

We do not sell your personal data.

We may disclose personal data where necessary to:

  • Service providers acting on our behalf

  • Professional advisers

  • IT and technology providers

  • Payment providers

  • Booking or reservation providers

  • Government authorities or regulatory bodies where legally required

  • Courts, law-enforcement authorities, or other competent authorities where required by law

  • Other parties where disclosure is necessary to establish, exercise, or defend legal rights

We only disclose information to the extent reasonably necessary and permitted by applicable law.

13. International Transfers

Some third-party service providers may process personal data outside Albania.

Where personal data is transferred internationally, Penta Group Vlore will take appropriate measures required by applicable law to ensure that the transfer and subsequent processing are adequately protected.

Albania’s Law No. 124/2024 includes provisions concerning international transfers of personal data and gives the Commissioner supervisory responsibilities in this area.

14. How Long We Keep Your Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The retention period may depend on:

  • The nature of the information

  • The purpose for which it was collected

  • Whether there is an ongoing business relationship

  • Legal, accounting, tax, or regulatory requirements

  • The establishment, exercise, or defence of legal claims

When personal data is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it.

15. Data Security

We take reasonable technical and organizational measures designed to protect personal data against:

  • Unauthorized access

  • Unauthorized disclosure

  • Accidental loss

  • Destruction

  • Alteration

  • Misuse

  • Other unlawful processing

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

16. Your Data Protection Rights

Subject to applicable legal requirements and limitations, you may have rights concerning your personal data, including the right to:

  • Obtain information about how your personal data is processed

  • Request access to your personal data

  • Request correction of inaccurate or incomplete personal data

  • Request deletion of personal data where legally applicable

  • Request restriction of processing where legally applicable

  • Object to certain processing activities

  • Withdraw consent where processing is based on consent

  • Request portability of personal data where applicable

  • Lodge a complaint with the competent data-protection authority

The exact scope of these rights depends on the circumstances and the applicable provisions of Law No. 124/2024.

The Albanian Commissioner confirms that data subjects may lodge complaints concerning processing that they believe violates the law.

17. How to Exercise Your Rights

To exercise your privacy rights, please contact us using:

Email: [Insert Privacy Email]
Telephone: [Insert Telephone Number]
Address: [Insert Business Address]

Please clearly describe your request so that we can process it efficiently.

For security reasons, we may need to verify your identity before providing access to personal data or carrying out certain requests.

We will respond to valid requests within the period required by applicable law.

18. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully or that your privacy rights have not been respected, you may first contact Penta Group Vlore so that we can investigate the matter.

You also have the right, where applicable, to lodge a complaint with the Commissioner for the Right to Information and Protection of Personal Data of Albania.

The Commissioner is the competent supervisory authority for personal-data protection in Albania under Law No. 124/2024.

Commissioner for the Right to Information and Protection of Personal Data

Rr. “Abdi Toptani”, Nd. 5
Tirana, Albania

Telephone: +355 42 23 7200
Email: info@idp.al
Website: www.idp.al

19. Children’s Privacy

Our website is not intentionally designed to collect personal data from children.

We do not knowingly collect personal data from children where such collection is not legally permitted.

If you believe that a child has provided personal information to us improperly, please contact us so that we can take appropriate action.

20. Third-Party Websites

Our website may contain links to websites operated by third parties.

This Privacy Policy applies only to the Penta Group Vlore website.

We are not responsible for the privacy policies, security, content, or practices of third-party websites. We recommend reviewing the privacy policy of any external website before providing personal information.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services

  • Changes to our website

  • Changes in technology

  • Changes in applicable legislation

  • Changes in our data-processing practices

The latest version will always be published on this page with the updated date.

If significant changes are made, we may provide additional notice where required by law.

22. Contact Us

If you have any questions about this Privacy Policy or how Penta Group Vlore processes personal data, please contact us.

Penta Group Vlore
Vlore, Albania

Website: https://penta.al/
Email: info@penta.al
Telephone: (+355) 69 405 2555
Address: Rruga Damian Humariti, Zona Industriale, Vlorë, Albania 9401


Last Updated: September 3, 2026