Privacy Policy
This Privacy Policy explains how Iglisi Watch collects, uses, and protects information when you visit watch.al. We are committed to handling your data with transparency and respect.
1. Data Controller
Controller: Iglisi Watch (NIPT: L01306507A)
Address: Rruga Aleksander Goga, Durrës 2001, Albania
Email: iglisi@watch.al
Phone: +355 67 636 0510
As a small, family-owned business, we act as both data controller and data processor for this website. We do not employ a dedicated Data Protection Officer (DPO), but you may direct all data-related enquiries to the email above.
2. What Data We Collect
We collect only the minimum data necessary to operate this website. We do not operate a contact form, user account system, or newsletter. The data we may process is limited to the following:
Server Access Logs
Our web hosting infrastructure automatically records standard server access logs when you visit watch.al. These logs may contain:
- Your IP address (IPv4 or IPv6)
- The date and time of your request
- The URL you requested
- The HTTP status code returned
- Your browser user-agent string
- The referring URL (if you clicked a link from another site)
These logs are collected automatically by the server infrastructure and are used solely for security monitoring and technical diagnosis (e.g., detecting abuse or server errors). They are not used to build individual user profiles.
Analytics Data — Cloudflare Web Analytics
We use Cloudflare Web Analytics to understand how visitors interact with our website in aggregate. This service is specifically designed to be privacy-friendly:
- It does not use cookies or any form of persistent storage on your device.
- It does not track individual users across sessions or websites.
- It collects only aggregate, anonymised statistics such as page view counts, approximate country of origin, device types, and referrer sources.
- No personally identifiable information (PII) is stored or transmitted.
Google Maps — On Demand Only
Our website includes an interactive map showing our workshop location in Durrës. To protect your privacy, this map is not loaded automatically. It is displayed only when you actively click the "Click to load map" button. At that point, your browser makes a request to Google's servers to load the map, and Google's own privacy policy applies to any data processed during that interaction.
No Contact Form
We do not operate a contact form on this website. If you contact us by phone, WhatsApp, or email, any information you share will be used solely to respond to your enquiry and provide the requested service.
WhatsApp Watch Enquiries
If you contact us via WhatsApp to enquire about a watch listed on our website, your WhatsApp phone number and the content of your conversation will be processed by us solely to answer your enquiry and, if a sale proceeds, to facilitate the in-person purchase. WhatsApp messages are handled within WhatsApp's own infrastructure and are subject to WhatsApp's Privacy Policy. We do not store your WhatsApp messages in any external database. We do not process online payments — all watch purchases are completed in person at our workshop.
3. Purpose of Processing & Legal Basis
The table below summarises the personal data we process, the purposes for processing, the legal basis under Albanian Law No. 124/2024, and the applicable retention periods.
| Data Type | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Server access logs (IP address, user-agent, URLs) | Security monitoring, abuse prevention, technical diagnosis | Legitimate interest (Art. 6(1)(f) equivalent — security of information systems) | Maximum 30 days, then automatically deleted |
| Cloudflare Web Analytics beacon data | Aggregate website traffic statistics to improve the site | Legitimate interest (Art. 6(1)(f) equivalent — no cookies used, data is anonymised at source) | Aggregated data only; no identifiable data retained |
| Google Maps interaction data (if you click to load map) | Display interactive location map on demand | Consent (user-initiated action by clicking "load map" button) | Governed by Google's own retention policies |
4. Analytics: Cloudflare Web Analytics
Cloudflare Web Analytics is the analytics solution we have chosen specifically because it respects user privacy. It operates differently from conventional analytics tools:
- No cookies: Cloudflare Web Analytics does not set any cookies on your device. Your browser storage is not used for tracking.
- No cross-site tracking: It cannot follow you across different websites.
- No fingerprinting: It does not build a persistent identifier from your browser or device characteristics.
- Aggregate data only: We see only aggregated counts and trends — such as "200 page views from Albania this week" — never individual user sessions or profiles.
- Data processor: Cloudflare, Inc. processes this data as our data processor, bound by Cloudflare's Data Processing Addendum.
Because no cookies are used and the data is anonymised at source, we rely on legitimate interest as the legal basis for this processing. We have carried out a balancing test and concluded that our interest in understanding aggregate site performance does not override the interests or fundamental rights of visitors, given the privacy-by-design nature of this tool.
For more information, see Cloudflare's Privacy Policy.
5. Google Maps
Our website includes an embedded Google Maps widget that shows the location of our workshop at Rruga Aleksander Goga, Durrës. To prevent Google from receiving data about your visit without your awareness, the map is loaded only on explicit user request.
When you click the "Click to load map" button:
- Your browser establishes a connection to Google LLC's servers to render the interactive map.
- Google may collect data in accordance with its own privacy policy, including your IP address and interaction data.
- Google may set cookies or use other tracking mechanisms as described in its privacy policy.
- We are not responsible for the data processing carried out by Google once the map is loaded.
Google's privacy policy is available at: policies.google.com/privacy. The legal basis for this processing on our side is your consent, provided by your deliberate action in clicking the load button.
6. Cookies
Our use of cookies is minimal. We store your cookie consent preference in localStorage (a browser-side storage mechanism) under the key iglisi_consent. This is a functional necessity — not a tracking cookie — and does not transmit any data to our servers.
Cloudflare Web Analytics does not use cookies. Google Maps may use cookies if and when you choose to load it.
For a complete overview of all cookies and storage items used on this site, please see our Cookie Policy.
7. Data Sharing & Recipients
We do not sell, rent, or trade your personal data to any third party. We share data only to the extent necessary to operate this website:
- Cloudflare, Inc. — acts as our data processor for web analytics and CDN/hosting services. Cloudflare processes anonymised, aggregate analytics data under a Data Processing Agreement. Cloudflare is also our DNS and CDN provider and processes server requests on our behalf.
- Google LLC — if you choose to load the Google Maps embed, Google processes data as an independent controller in accordance with its own privacy policy.
- No other recipients: We do not share data with advertising networks, data brokers, or any other third parties.
8. International Transfers
Albania is not a member of the European Union; however, Albanian Law No. 124/2024 aligns closely with the EU General Data Protection Regulation (GDPR) and provides equivalent protections.
Cloudflare, Inc. is headquartered in the United States. Data processed by Cloudflare may be transferred to and processed in the United States and other countries outside Albania. Cloudflare relies on Standard Contractual Clauses (SCCs) approved by the European Commission and equivalent safeguards under Albanian law to legitimise such transfers.
Google LLC similarly processes data internationally. Google relies on SCCs and its Binding Corporate Rules for international data transfers. Details are available in Google's privacy policy.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy:
- Server access logs: Retained for a maximum of 30 days, after which they are automatically deleted or anonymised by our hosting infrastructure.
- Cloudflare Web Analytics: Cloudflare collects only aggregate, anonymised data. No identifiable personal data is retained in analytics reports. Cloudflare's own retention schedules apply to operational data.
- Google Maps interaction data: Governed by Google's own retention policies. We do not receive or store this data.
- Enquiry communications (phone/email/WhatsApp): If you contact us directly, we retain your contact information only for as long as necessary to handle your enquiry and any follow-up service, typically not exceeding 12 months unless a longer retention is legally required.
10. Your Rights
Under Albanian Law No. 124/2024 "On Personal Data Protection", you have the following rights with respect to your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate or incomplete personal data.
- Right to erasure ("right to be forgotten"): You may ask us to delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent.
- Right to restriction of processing: You may ask us to restrict processing of your data in certain circumstances.
- Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a portable format.
- Right to object: You may object to processing based on legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds.
- Right to withdraw consent: Where processing is based on your consent (e.g., loading Google Maps), you may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at iglisi@watch.al. We will respond within 30 days of receiving your request. In complex cases, this period may be extended by a further 60 days, in which case we will inform you of the extension and the reasons for it.
We will not charge a fee for handling your request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act.
11. Right to Complain to the IDPC
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Albanian data protection supervisory authority:
IDPC — Inspektori i Mbrojtjes së të Dhënave Personale
(Commissioner for the Protection of Personal Data)
Website: www.idp.al
Address: Rr. "Abdi Toptani", Nr. 5, Tiranë 1001, Albania
We would, however, appreciate the opportunity to address your concerns directly before you approach the IDPC. Please contact us first at iglisi@watch.al.
12. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page.
We encourage you to review this policy periodically. Your continued use of watch.al after any changes constitutes your acceptance of the updated policy.
13. Contact
For any questions, requests, or concerns about this Privacy Policy or the handling of your personal data, please contact us:
- Email: iglisi@watch.al
- Phone: +355 67 636 0510
- Address: Rruga Aleksander Goga, Durrës 2001, Albania