1. Who we are
ATV Tirana operates guided adventure tours, self-guided routes, self-drive rentals, and camping gear rentals from Rruga Zall-Herr, 1048 Tirane, Albania. For privacy questions, contact us at [email protected] or +355696600100.
2. Information we collect
- Contact details, such as name, email address, phone number, WhatsApp details, and preferred language.
- Booking details, such as selected tour, date, start time, group size, passenger details, pickup needs, special requests, and add-ons.
- Eligibility and safety information needed for the activity, such as age confirmation, driving licence status, relevant medical or mobility information you choose to tell us, emergency contact details, waiver signatures, and rental agreement records.
- Payment and deposit records, including whether you paid by payment link, card, or cash. We do not collect card details directly through this website.
- Website and device information, such as IP address, browser type, pages viewed, referring page, approximate location, and cookie preferences.
- Messages, reviews, photos, or feedback you send to us.
3. How we collect information
We collect information when you use the website, submit a contact or booking form, message us by email, phone, WhatsApp, social media, or booking platform, sign documents at base, make payment, or take part in an activity. We may also receive booking details from travel agents, booking platforms, payment providers, transfer providers, and other partners where you asked them to arrange a service with us.
4. How we use information
- To answer enquiries and recommend a suitable route or product.
- To create, confirm, change, or cancel bookings.
- To check age, licence, deposit, safety, and suitability requirements.
- To provide route briefings, emergency support, guest communication, and weather updates.
- To process payments, refunds, deposits, invoices, receipts, and accounting records.
- To manage waivers, rental agreements, vehicle condition reports, damage claims, and incident reports.
- To improve the website, understand demand, protect the site from misuse, and measure marketing performance.
- To send marketing only where we have permission or another lawful basis, and to stop when you opt out.
- To comply with legal, tax, insurance, safety, and dispute-resolution obligations.
5. Legal basis for processing
Depending on the situation, we process information because it is needed to perform a booking or rental contract, because we have a legitimate interest in operating and protecting our business, because we need to comply with legal duties, because you consented, or because we need to protect a person's vital interests in an emergency.
6. Who we share information with
We share information only where needed with booking and CRM providers, payment providers, banks, accounting providers, website hosting and analytics providers, email and communication providers, transport partners, guides, insurance advisers, legal advisers, public authorities, emergency services, and booking partners who introduced your reservation. We do not sell guest personal data.
7. International transfers
Some service providers may process information outside Albania or the European Economic Area. Where this happens, we use available safeguards such as provider terms, data protection agreements, and transfer mechanisms offered by those providers.
8. How long we keep information
- Enquiries that do not become bookings: usually up to 24 months.
- Booking, payment, invoice, and accounting records: usually 5 to 10 years where required for tax, accounting, and business records.
- Waivers, rental agreements, incident records, damage records, and insurance-related records: usually up to 10 years, or longer if a claim or dispute is active.
- Marketing preferences: until you unsubscribe or ask us to delete them, subject to suppression lists needed to respect your opt-out.
- Cookie and analytics records: see our Cookie Policy.
9. Your rights
Depending on the law that applies to your request, you may have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. You may also withdraw consent where processing is based on consent. To make a request, contact [email protected]. We may need to verify your identity before acting on a request.
10. Complaints
If you are not satisfied with our response, you can contact the Albanian Commissioner for the Right to Information and Protection of Personal Data at idp.al. EU or EEA residents may also contact their local data protection authority.
11. Security
We use reasonable technical and organisational measures to protect personal data, including limiting access to staff and providers who need the information. No website, email, messaging app, or payment system is completely secure, so please avoid sending sensitive medical or payment information unless we request it through an appropriate channel.
12. Changes to this policy
We may update this policy when our services, website, providers, or legal requirements change. The latest version will be posted on this page with the update date above.