Privacy Notice

Last updated: October 2026

This Privacy Notice explains how Greecon Sh.p.k. (NUIS/NIPT M61525505A) (“Greecon,” “we,” “us,” or “our”), a company registered with the National Business Center of Albania with its registered office in Shijak, Durrës County, Albania, collects and uses personal data when you visit greecon.earth or the Greecon Blog at blog.greecon.earth (together, the “Site”) or contact us through it. Greecon is the data controller for the personal data described below.

We handle personal data in line with Albania’s Law No. 124/2024 “On the Protection of Personal Data,” which is aligned with the EU General Data Protection Regulation (GDPR), and we apply the same standard to all visitors regardless of location.

1. What Data We Collect

We collect only what is necessary to run the Site and respond to you:

• Contact data you provide directly — such as your name, email address, and the content of any message — when you use a contact channel or email address on the Site.
• Technical data collected automatically by our hosting providers to operate and secure the Site, such as IP address, browser type, device information, and access timestamps, typically retained only in standard server and security logs.

We do not collect sensitive categories of data (such as health, financial, or biometric information) through the Site, and we ask that you not include such information in any message you send us.

2. Cookies and Similar Technologies

The Site does not use advertising or cross-site tracking cookies. It may rely on strictly necessary, session-level technical mechanisms needed to load pages and keep the Site secure; these do not identify you personally. If this changes — for example, if we add analytics in the future — we will update this notice and request consent where required.

3. How We Use Your Data and Our Legal Basis

• To respond to inquiries you send us, based on our legitimate interest in communicating with prospective partners, clients, and investors, or to take steps at your request before entering into a contract.
• To maintain and secure the Site, based on our legitimate interest in keeping our systems reliable and protected from misuse.
• To comply with legal obligations, such as responding to a lawful request from a competent authority.

4. Who We Share Data With

We do not sell personal data. We share it only with service providers who process it on our behalf and under instruction — for example, the hosting and infrastructure providers that serve the Site (currently GitHub Pages and, where applicable, Railway) and the email provider we use to receive and respond to messages — and, where legally required, with public authorities.

5. International Transfers

Because our service providers may process data outside Albania, including within the European Economic Area, your data may be transferred internationally. Where this happens, we rely on providers that apply appropriate safeguards, such as standard contractual clauses or an equivalent legal basis for the transfer.

6. Data Retention

We retain contact data for as long as needed to respond to your inquiry, maintain our business relationship, or until you ask us to delete it, whichever comes first, subject to any longer retention period required by law. Standard technical and security logs are typically retained for a limited period by our hosting providers and then rotated out automatically.

7. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data;
• Restrict or object to certain processing;
• Request a portable copy of data you provided to us;
• Withdraw consent at any time, without affecting processing carried out before the withdrawal; and
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, email privacy@greecon.earth. In Albania, you may also lodge a complaint with the Office of the Information and Data Protection Commissioner (IDP) at idp.al.

8. Children’s Privacy

The Site is directed at businesses, municipalities, and investors, and is not intended for children. We do not knowingly collect personal data from children.

9. Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. The “Last updated” date above indicates when it was last revised.

11. Contact

For any question about this notice or how we handle your data, contact privacy@greecon.earth or Greecon Sh.p.k., Durana Tech Park, Rruga Ahmet Zogu, Xhafzotaj, Shijak, Durrës 2013, Albania.