Privacy

PRIVACY AND COOKIE NOTICE

www.instant.al

Effective date: 14/03/2026

Version: 1.4

1. Who we are

INSTANT AL SHPK

NIPT: L81506043D

Address: Ali Demi Street, opposite the Black Field, Tirana, Albania

Email: online@instant.al

Tel: (+355) 68 84 53 057

Data Protection Officer (DPO): Granit Gjana

Email: privatesia@instant.al

Tel: +355 67 201 0861

Data subjects may contact the DPO regarding any matter connected with the processing of their personal data, pursuant to Article 34(3) of Law no. 124/2024.

2. What data this website collects

The website www.instant.al is informational. It has no registration system or transactional functionality. Instant Al Shpk does not collect or store direct personal data, such as names, email addresses or telephone numbers, through informational browsing.

When you visit the website, certain data may nevertheless be collected automatically through cookies and third-party technologies described in section 3. These are primarily random numerical identifiers linked to browsing behaviour, not to your personal identity.

3. Cookies and trackers — complete list

What cookies are

Cookies are small text files stored on your device when you visit a website. They help the website work correctly or provide statistical information about its use.

3.1 Necessary technical cookies

These cookies are essential for secure operation. They are enabled automatically and do not require your consent, because they protect the infrastructure and the security of your visit.

Cookie / TrackerProviderPurposeRetention
cf_clearanceCloudflare, Inc. (USA)Security verification — distinguishes human visitors from automated bots. Without this cookie, the website may not load correctly.1 year

Legal basis: The controller's legitimate interest under Article 7(1)(dh) of Law no. 124/2024 — protecting the website against cyberattacks and unauthorised access. These cookies do not profile visitors or track browsing behaviour.

3.2 Analytics cookies

These cookies are enabled only if you provide consent through the cookie banner shown on your first visit. They help us understand how visitors navigate our website solely so that we can improve it.

Cookie / TrackerProviderPurposeRetention
_gaGoogle LLC (USA)Stores a unique visitor identifier (Client ID) to distinguish sessions and visitors.2 years
_gidGoogle LLC (USA)Identifies the current visit session.24 hours
_ga_G-ER013QW16SGoogle LLC (USA)Google Analytics 4 cookie — stores session state and counts visits for this website's analytics property.2 years

Legal basis: Your express consent under Article 7(1)(a) and Article 8 of Law no. 124/2024. You may withdraw it at any time using Manage Cookies or your browser settings.

Anonymity note: Google Analytics does not store names, email addresses or information that directly identifies you. Cookies store only random numerical identifiers linked to browsing behaviour. Instant Al Shpk cannot connect these identifiers to your physical identity.

Automated decision-making and profiling: Instant Al Shpk does not make automated decisions based on your profile and does not create individual visitor profiles under Article 20 of Law no. 124/2024. Google LLC may perform internal processing within its own platform; see Google's privacy policy.

3.3 Performance cookies and trackers

These also require your consent and are activated only after consent is provided.

Cookie / TrackerProviderPurposeRetention
Cloudflare Web AnalyticsCloudflare, Inc. (USA)Collects anonymous data about page-load performance, response time and technical errors to optimise speed.Session

Legal basis: Your express consent under Article 7(1)(a) and Article 8 of Law no. 124/2024. You may withdraw it at any time using Manage Cookies or your browser settings.

4. International transfer of data

Google LLC and Cloudflare, Inc. are established in the United States. Data collected through their cookies may therefore be transferred outside the Republic of Albania.

In the absence of an adequacy decision under Article 40 of Law no. 124/2024, transfers rely on Standard Contractual Clauses applied by Google and Cloudflare as global contractual safeguards under Article 41(1).

You may request information about the specific safeguards by contacting our DPO.

5. Who receives the data

Data collected through cookies is disclosed only to:

  • Google LLC — as the processor providing Google Analytics 4 under a data-processing agreement compliant with Article 26 of Law no. 124/2024.
  • Cloudflare, Inc. — as the processor providing security and performance analytics under a data-processing agreement compliant with Article 26 of Law no. 124/2024.

Data is not sold, given away or transferred to third parties for advertising, marketing or any other unrelated purpose.

6. Retention periods

In accordance with the storage-limitation principle in Article 6(5) of Law no. 124/2024, data is retained only for as long as necessary:

CategoryPeriod
Technical cookies (cf_clearance)Session or up to 1 day
GA4 analytics cookies (_ga, _ga_G-*)Up to 2 years
Session cookie (_gid)24 hours
Server logs (IP address, etc.)2 months

7. Your rights

Under Articles 12–20 of Law no. 124/2024, you have the following rights. The practical applicability to this website is noted for each one.

Right to information (Article 13)

Applicable — this notice provides proactive information on all aspects of the processing.

Right of access (Article 14)

Applicable with practical limitations — you may request confirmation and information about purpose, legal basis and retention. Because the website uses anonymous numerical cookie identifiers, we may not be able to identify you as a specific visitor.

Right to rectification (Article 15(1))

Not applicable to automatically generated numerical cookie identifiers, which contain no factual information that can be corrected.

Right to erasure (Article 15(2))

Applicable — you may request deletion when consent is withdrawn or processing is unlawful. You can also remove cookies immediately through your browser settings.

Right to be forgotten (Article 16)

Not applicable — INSTANT.AL does not publish visitors' personal data.

Right to restriction (Article 17)

Applicable with practical limitations — immediate restriction can be achieved by withdrawing analytics consent or blocking cookies in your browser.

Right to data portability (Article 18)

Not applicable — anonymous numerical cookie identifiers are not data actively supplied by the visitor for portability purposes.

Right to object (Article 19)

Applicable — you may object to legitimate-interest processing where justified and may object to analytics at any time by withdrawing consent.

Automated decisions and profiling (Article 20)

Not applicable — Instant Al Shpk does not make automated decisions from cookie data or create individual visitor profiles.

How to exercise your rights

Send a written request to our DPO at privatesia@instant.al. We respond within 30 days; this may be extended up to 60 days for complex cases with prior notice. The service is free of charge.

How to manage cookies directly in your browser

BrowserInstructions
Chromehttps://support.google.com/chrome/answer/95647
Firefoxhttps://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
Safarihttps://support.apple.com/guide/safari/manage-cookies-sfri11471
Edgehttps://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406

8. Right to lodge a complaint

If you believe your rights under Law no. 124/2024 have been infringed and you are not satisfied with our response, you may lodge a complaint with the competent supervisory authority under Article 86:

Commissioner for the Right to Information and Personal Data Protection

Web: www.idp.al

Email: info@idp.al

Tel: 0800 20 50

This does not affect your right to an effective judicial remedy before the competent administrative court under Article 87.

9. Changes to this notice

This notice may be updated when the technologies used, third-party cookies or applicable legislation change. The current date and version appear at the top of this document.

Material changes affecting your rights will be announced through a prominent website message before they take effect, in accordance with Article 13(4) of Law no. 124/2024.