Privacy Policy

1. Data Controller

Albania Medical Tourism ("we", "our", "us") is the Data Controller responsible for your personal data.

2. Data We Collect

3. How We Collect Your Data

• Meta (Facebook/Instagram) Instant Forms
• Landing page forms on our website or partner pages
• Google Ads lead forms
• Direct contact via email, phone, or messaging apps
• Cookies and similar technologies on our website

4. Purposes of Processing

• Responding to inquiries and providing requested information
• Preparing customized offers and treatment plans
• Arranging travel, accommodation, and local transport (if requested)
• Sending relevant offers, updates, and recommendations (with consent)
• Improving our services and marketing effectiveness
• Complying with legal obligations

5. Legal Basis for Processing

• Consent – when you submit a form and agree to receive information or offers
• Contractual necessity – to deliver services you request
• Legal obligations – to comply with applicable laws
• Legitimate interests – to enhance services and communications

6. Data Sharing

We do not sell your data. We may share it only with:

• Licensed partner clinics and medical professionals (for treatment planning)
• Travel and accommodation providers (if you request assistance)
• IT and marketing service providers for secure processing and delivery
• Regulatory or legal authorities when required by law

All third parties are bound by confidentiality and GDPR‑compliant agreements.

7. Data Retention

We keep your data only as long as needed for the purposes described, or as required by law.

• Marketing data: up to 24 months after your last interaction
• Medical‑related data: up to 10 years (to meet healthcare regulations)

8. Your Rights Under GDPR

You may exercise the following rights at any time:

• Access, rectification, and erasure of your personal data
• Restriction or objection to processing
• Data portability (machine‑readable copy)
• Withdrawal of consent (where processing is based on consent)

To exercise your rights, contact us at info@albaniamedicaltourism.com.

9. International Data Transfers

If we transfer your data outside the EEA, we will use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or other GDPR‑approved mechanisms.

10. Cookies & Tracking

We use cookies and similar technologies to enhance site functionality, analyze traffic, and measure ad performance. You can manage preferences in your browser settings. See our Cookie Policy for details.

11. Data Security

We implement technical and organizational measures to protect your data, including encryption in transit, access controls, and secure servers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published here with a revised effective date.

13. Contact