Last updated: July 28, 2026
We say it on every page of this website: data privacy is a human right, and it belongs to you. This policy is where we prove we mean it. It explains, in plain language, what personal data we collect when you use itaka7.com, why we collect it, how long we keep it, and what we will never do with it.
If anything here is unclear, write to our Data Protection Officer at dpo@itaka7.com. A person reads that inbox, not a ticketing system.
The data controller is ITAKA7 Sh.p.k., Rruga Shyqyri Berxolli 14, Tiranë, Albania.
Data Protection Officer: dpo@itaka7.com · +355 69 208 2805
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Albanian law no. 124/2024 “On the protection of personal data”.
We collect data through four activities. Nothing else.
If you use our contact form or write to us directly, we receive your name, your email address and whatever you include in your message. We use it for one purpose: to answer you. The legal basis is taking steps at your request before entering into a contract, or your consent where no contract is contemplated.
Form submissions are transmitted to us by email and are not stored on this website’s servers. The correspondence is kept in our mailbox for as long as needed to handle your inquiry and any follow-up, after which it is deleted.
Our free Privacy Check asks you 10 questions about how your business handles personal data. When you complete it, your answers, your score and the language you used are stored in anonymized form, without your name, email, IP address or any other identifier. We use these statistics to understand how businesses are doing on data protection and to improve the tool. The legal basis is our legitimate interest in improving our services; the data cannot be traced back to you.
If you choose to receive your results by email, we additionally store your email address and the time of your consent. We use the address for exactly one thing: sending you your results. It is not added to any marketing list. The legal basis is your consent, which you give by ticking the box before sending. We keep the address and consent record for up to 12 months, then delete them. You can request deletion earlier at any time.
Your score is calculated automatically, but it is informational only. No decision producing legal or similar effects is made about you.
With your consent, we collect technical data such as pages visited, approximate location, browser and device type through analytics cookies (Google Analytics). This tells us which content is useful and which is not. The legal basis is your consent, given through the cookie banner, and you can withdraw it there at any time. Essential cookies needed for the site to function run on the basis of our legitimate interest in operating a secure website.
We collect company details, billing information and the data needed to deliver the engaged services. The legal bases are the performance of our contract and our legal obligations, including tax and accounting law. Client data is retained for the duration of the service agreement plus the retention periods required by law.
We do not sell, rent or trade personal data.
We share data only with service providers who help us run this website and deliver our services: our hosting provider, our email provider (Google Workspace) and our DNS and security provider (Cloudflare). Each is bound by a data processing agreement and processes data only on our instructions.
We disclose personal data to public authorities only where the law requires it or where disclosure is necessary to establish, exercise or defend legal claims.
We keep data in the European Economic Area wherever possible. Some of our providers may process data outside the EEA; where that happens, the transfer is protected by an adequacy decision of the European Commission or by standard contractual clauses, in accordance with the GDPR and law no. 124/2024.
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you have given, at any time and without affecting the lawfulness of processing before withdrawal.
To exercise any right, email dpo@itaka7.com. We respond within 30 days, free of charge.
You also have the right to lodge a complaint with the Commissioner for the Right to Information and Protection of Personal Data, or with any competent EU supervisory authority. We would appreciate the chance to resolve your concern first, but you are never required to give us one.
This site uses a consent banner (at the bottom of every page under “Manage consent”) where cookies are grouped by purpose: functional cookies that the site needs to work, and optional categories such as preferences and statistics that run only if you allow them. You can change or withdraw your choices at any time through the banner, and additionally through your browser settings.
Security is our profession, and we apply to ourselves what we recommend to clients: encrypted connections, multi-factor authentication, strict access controls, hardened infrastructure and regular review of our own measures. No system is perfectly secure, but minimizing what we collect in the first place, as this policy shows, is the strongest protection of all.
This website and our services are directed at businesses, not at children. We do not knowingly collect personal data from anyone under 18.
When we update this policy, we post the new version here with a new date. If a change materially affects how we handle your data, we will say so clearly rather than bury it.
Data Protection Officer ITAKA7 Sh.p.k. Rruga Shyqyri Berxolli 14, Tiranë, Albania dpo@itaka7.com · +355 69 208 2805
