Vodafone Albania sh.a. respects your privacy and is committed to protecting your personal data. This Visitor Privacy Notice explains how personal data relating to visitors to our premises is processed.

Who are we
We are Vodafone Albania sh.a., part of the Vodafone Group. Further information about our company can be found within the Vodafone Albania section of the Vodafone Group.

In certain circumstances, Vodafone Group Services Limited (“VGSL”) jointly controls some processing activities relating to your personal data together with us. VGSL is headquartered at Vodafone House, The Connection, Newbury, Berkshire RG14 2FN, United Kingdom, and is registered in the UK under company number 03802001.

Unless otherwise specified in a separate privacy notice, the processing of your personal data will be carried out in accordance with the terms of this Visitor Privacy Notice.

Our registered office is located at Autostrada Tiranë–Durrës, Rruga Pavarësia, No. 61, Kashar, Tiranë, Albania. We are registered with the National Business Center under Unique Identification Number (VAT) K11715005L. Vodafone Albania is registered with the Commissioner for the Right to Information and Protection of Personal Data (IDP).

You may contact us at +355 69 900 0140 or by email at [email protected].

How to contact us
Your opinion matters to us. If you have any questions regarding this Privacy Notice, you may contact us at [email protected] or visit our support page. You may also contact our Data Protection Officer at [email protected]

Our principles
Vodafone is committed to respecting your privacy. We take privacy, security, and compliance with data protection and privacy laws seriously. Our Privacy Framework is at the core of our Privacy Policy, and we aim to place these commitments at the center of everything we do.

Scope
This notice applies to all visitors, including but not limited to: Business visitors; Suppliers and contractors; Job candidates attending interviews; Visitors attending meetings or events and any other individuals visiting Vodafone Albania premises.

Personal Information we collect about you
During your visit, we may collect the following categories of personal data: Identification data (e.g. name, surname, passport number); Visitor badge or access permit details; Signature; Date and time of entry and exit; CCTV images and video recordings; Vehicle registration number (if parking facilities are used). We collect only the personal data necessary for the purposes specified below.

How we use your personal data and our lawful basis
Visitor personal data is processed for the following purposes: Managing access to our premises; Ensuring the physical security of individuals and property; Maintaining visitor records; Health and safety management; Preventing unauthorized access and security incidents; Complying with legal and regulatory obligations.

Whenever we process your personal data, we do so on the basis of one of the following lawful grounds under data protection law:

1. Legitimate interests of Vodafone, such as ensuring the security and protection of our premises. When relying on this lawful basis, we assess our legitimate interests to ensure they do not override your rights and freedoms.

2. Compliance with a legal obligation.

3. Consent, where you have freely provided it. Consent may be withdrawn at any time.

Vodafone Albania uses CCTV systems in and around its premises for security purposes. CCTV footage is used solely for security and protection purposes, accessed only by authorized personnel, and retained for a limited period, unless required for investigative or legal proceedings. Appropriate signage is displayed in all areas subject to CCTV monitoring.

International data transfers
In order to deliver our services effectively, Vodafone may need to transfer your personal data to other companies within the Vodafone Group (for example, Vodafone Intelligence Solutions (VOIS) centers located in Egypt, Hungary, and India, which provide operational support) or to service providers located within the European Economic Area (EEA). The EEA consists of European Union member states, Switzerland, Iceland, Liechtenstein, and Norway, which are considered to have data protection laws equivalent to those of the European Union. Where Vodafone transfers personal data to countries within or outside the EEA, we ensure that your information is adequately protected in accordance with Law No. 124/2024 “On the Protection of Personal Data”, Decision No. 8/2016 of the Commissioner for Personal Data Protection on adequate levels of protection, and the 2014 Guidelines of the Commissioner on international transfers of personal data, including the relevant transfer forms.

How long we retain your personal data
We retain your personal data for as long as required by law. Where there is no legal retention requirement, we retain the data only for as long as necessary for the purposes for which it was collected. In certain cases, personal data that would not ordinarily be retained may be kept due to specific circumstances, such as judicial or legal investigations.

Your Rights
You have the following rights in relation to your personal data:
Right of access – to request a copy of the personal data Vodafone holds about you.
Right to rectification – to request correction of inaccurate, incomplete, or outdated personal data.
Right to object – to object to processing where it is based on our legitimate interests.
Right to withdraw consent – to withdraw your consent at any time, using the same method by which it was provided.
Right to restriction of processing – to request limitation of processing where you believe your data is inaccurate or unlawfully processed.
Right to erasure – in certain circumstances, to request the deletion of your personal data.

How to make a complaint
If you wish to exercise any of your rights or raise a concern regarding the way we process your personal data, please contact our Customer Care team or email us at [email protected].

We will make every effort to assist you. If you remain dissatisfied, you have the right to lodge a complaint with the Commissioner for the Right to Information and Protection of Personal Data (IDP). Further details are available at: https://idp.al/