GR Albania Logo

Privacy Policy

Last updated: 8 July 2026

1. Who we are (Data Controller)

GR Albania is the data controller when you use our website and submit forms (for example: Contact, RFP and Careers).

Privacy contact: info@gralbania.com and +355(4) 5 629 742.

Head office address: Rr. Sami Frashëri, Nd. 19, H. 8, 1019, Tirana, Albania.

2. Personal data we collect

When you submit information through our forms, we may collect and process the personal data you provide.

2.1. Contact form

  • Name
  • Email
  • Company (optional)
  • Phone (optional)
  • Subject
  • Message
  • Service interest selection (optional)

We also receive your IP address and verify the request using Cloudflare Turnstile to prevent abuse.

2.2. RFP form (Request for Proposal)

  • Company name
  • Contact name
  • Email
  • Phone
  • Project title
  • Project type
  • Budget
  • Timeline
  • Project complexity
  • Description

We may also process additional fields (e.g., requirements, preferred start date, existing plans/drawings and whether permits are required) depending on what you provide.

We allow file uploads (e.g., PDF/DOC/DOCX and images). These documents are used to prepare and send your request via email to our team.

Again, we receive your IP address and verify the submission using Cloudflare Turnstile.

2.3. Careers application

  • Full name
  • Email
  • Phone
  • Position
  • Message
  • Experience (optional)

A CV upload may be provided (optional). The CV is used to evaluate your application.

We also process your IP address and use Cloudflare Turnstile for anti-bot verification.

3. Purposes and legal basis

We process your personal data for the following purposes:

  • To handle your requests and respond to you (contact, RFP, career application) and to proceed with pre-contract steps where applicable.
  • To protect our website and prevent abuse, spam and unwanted automation through rate limiting and Cloudflare Turnstile.

Under GDPR, this is typically based on lawful bases such as processing necessary for a request from you and/or legitimate interests for security and anti-abuse.

4. Cloudflare Turnstile (anti-bot)

We use Cloudflare Turnstile to verify that our forms are submitted by humans and to prevent undesirable automation.

This may involve technical signals from the visitor (including IP address and browser/device signals) and a verification token sent to our backend. Our backend validates the token with Cloudflare, including the visitor IP address via remoteip.

Cloudflare may act as a processor for providing the service, and in certain cases as a controller to improve bot-detection. Learn more: Cloudflare Turnstile Privacy Policy.

5. Recipients of personal data

We share data with:

  • GR Albania staff handling your inquiries
  • Hosting/server provider and email delivery service used to send your submission
  • Cloudflare (only for Turnstile)

6. International transfers

Since we use Cloudflare and third-party email/hosting services, your data may be transferred outside your country (and possibly outside the EEA).

We aim to use appropriate safeguards provided by our service providers.

7. Retention (how long we keep data)

We retain personal data only for as long as needed to process your request, manage correspondence, and comply with legal obligations.

For uploads (RFP/Career): our backend processes the files to generate the email submission (as attachments). Email and hosting systems may have their own retention policies.

8. Your rights

You have the right to request:

  • access to your personal data
  • rectification
  • erasure where applicable
  • restriction of processing
  • object to processing
  • data portability where applicable

You also have the right to lodge a complaint with the competent data protection authority.

To exercise your rights, contact us at info@gralbania.com.

9. Automated decision-making

Anti-bot verification (Turnstile) is an automated process used to protect our forms from abuse. We do not use it for automated marketing/profiling decisions.

10. Cookies and technologies

We use necessary security technologies for our forms (including Cloudflare Turnstile). We do not currently use marketing or analytics cookies for visitors.

If we add additional technologies in the future (e.g., analytics), we will update this policy.

11. Changes to this policy

We may update this Privacy Policy when our practices change or when required by law. The latest version will be published on this page.