1.Data controller
The controller of the personal data processed through this site is AZA Electronics sh.p.k., headquartered in Vlorë. For any question or request concerning your personal data, you can write to us at [email protected].
- Controller
- AZA Electronics sh.p.k.
- Registered office
- “Gjergj Kastrioti” Boulevard, opposite the Court of Appeal, Vlorë, Albania
- Privacy contact
- [email protected]
2.Scope and legal framework
This policy explains how we process the personal data of visitors to and customers of this site, including online purchases, in accordance with Law no. 124/2024 “On the protection of personal data” and its implementing regulations.
3.Data we collect
We collect only the data needed for the purposes described in this policy:
- Account data: first name, last name, email, phone number and password, which is stored only in encrypted form; for business customers, also the company name and NIPT or VAT number.
- Order data: the products purchased, amounts, delivery and billing address, phone number for the courier, any notes you add and the history of your orders, returns and warranty requests.
- Payment data: payments are processed by POK. We receive only the information needed to verify the payment, such as its status, amount and transaction reference; we never receive or store your full card number.
- Communications: the messages you send us through the contact form or by email, and the product reviews you choose to publish.
- Newsletter: your email address, if you subscribe.
- Google sign-in: if you choose to sign in with your Google account, we receive your name, email address and account identifier from Google.
- Technical data: IP address, browser and device type, date and time of requests, logged automatically by our servers for security and operational purposes, as well as technical cookies and browser local storage (see our Cookie Policy).
The data marked as mandatory at checkout are needed to process your order; without them we cannot fulfil it.
4.Purposes and legal bases
- Orders and performance of the contract: accepting the order, payment, delivery, returns, refunds, warranty and technical support. Legal basis: performance of the contract or steps taken at your request before entering into it.
- Account management: creating and managing your account, sign-in and order history. Legal basis: performance of the contract.
- Customer service: answering your questions, requests and complaints. Legal basis: performance of the contract or our legitimate interest in responding to you.
- Legal obligations: invoicing, accounting, tax obligations and those arising from consumer protection legislation, and responding to lawful requests from authorities. Legal basis: compliance with a legal obligation.
- Security and abuse prevention: protecting the site, accounts and payments against fraud and cyber attacks. Legal basis: our legitimate interest.
- Protecting our rights: in the event of disputes or claims. Legal basis: our legitimate interest.
- Product reviews: publishing the reviews you choose to write. Legal basis: your consent.
- Newsletter and offers: sending commercial communications by email. Legal basis: your consent, which you can withdraw at any time by writing to [email protected].
We do not use your data for advertising profiling, and we do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
5.Who we share your data with
We do not sell or rent your personal data. We share it only with the following parties, to the extent necessary for the purposes described:
- POK, the online payment provider, to process card payments;
- Partner couriers, who receive your name, address, phone number and parcel details to deliver your order;
- Vellaro, the provider of the e-commerce platform and hosting service, which operates the site and stores data on our behalf;
- The email delivery provider, for order confirmation and notification emails and, if you have subscribed, the newsletter;
- Google, only if you choose to sign in with your Google account;
- Public authorities, such as the tax administration, courts or law enforcement bodies, where required by law;
- Professional advisers, such as accountants and lawyers bound by confidentiality, where necessary.
Providers that process data on our behalf, such as the platform and the email service, act as processors, only on our instructions and under contractual obligations of confidentiality and security. Other parties, such as POK, the couriers and Google, may also process data as independent controllers under their own privacy policies.
6.Transfers of data outside Albania
Some of the providers listed above, such as the platform and hosting provider, the email service or Google, may process data on servers located outside Albania, in European Union countries or in other countries. In these cases, data are transferred only to countries that ensure an adequate level of protection or on the basis of the appropriate safeguards provided for by Law no. 124/2024, such as standard contractual clauses. For more information about these safeguards, write to us at [email protected].
7.How long we keep your data
We keep data only for as long as necessary for the purposes for which they were collected:
- Account: for as long as the account remains active; once it is deleted, the data are erased or anonymised, except for those we must keep by law.
- Orders, invoices and accounting records: for the period required by tax and accounting legislation.
- Returns, warranty and complaints: for the duration of the warranty and the limitation period of the related claims.
- Contact form requests: for the time needed to handle them and for a reasonable period afterwards.
- Newsletter: until you unsubscribe or withdraw your consent.
- Technical security data: for a limited period, unless they are needed to investigate an incident.
8.Your rights
Under Law no. 124/2024, you have the right to:
- obtain confirmation as to whether we process data about you and access them;
- request the rectification of inaccurate data or the completion of incomplete data;
- request the erasure of your data where there is no longer a legal reason to keep them;
- request the restriction of processing;
- receive the data you have provided to us in a structured, commonly used and machine-readable format, or ask us to transmit them to another controller (portability);
- object to processing based on our legitimate interest and, at any time, to processing for direct marketing purposes;
- withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before the withdrawal;
- not be subject to a decision based solely on automated processing that produces legal effects concerning you.
You can update much of your data yourself from your account. To exercise the rights above, write to us at [email protected] or through the Contact page. We may ask you for additional information to verify your identity. We will respond without undue delay and within the time limits set by law; as a rule, exercising your rights is free of charge.
9.Right to lodge a complaint
If you believe that your data are being processed unlawfully, you have the right to lodge a complaint with the Commissioner for the Right to Information and Personal Data Protection (www.idp.al). We encourage you to contact us first, so that we can try to resolve the matter directly.
10.Data security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or misuse, such as encrypted connections (HTTPS), access restricted to authorised persons only and payment processing by a specialised provider. No system is completely secure: please use a strong password and do not share it with anyone.
12.Changes to this policy
We may update this policy because of changes in the law, in technology or in our services. The version in force is always published on this page, with the date of the latest update. Where changes are significant, we will also inform you by other appropriate means.
