Privacy Policy

1 Introduction and Purpose

At Intermed sh.p.k., the privacy and protection of personal data constitute an essential element of how we operate and communicate with the visitors to our website. The processing of personal data is carried out in accordance with the principles of transparency, proportionality, and respect for the privacy of every individual.

This Privacy Policy has been drafted in accordance with Law No. 124/2024 "On the Protection of Personal Data", as well as with the general principles of Regulation (EU) 2016/679 (GDPR), to the extent that they apply to our activity. The purpose of this policy is to inform the visitors of the intermed.al website about how personal data are processed during the use of our website, the legal bases for such processing, the rights of data subjects, and the measures we have taken to protect privacy.

When you visit our website or contact us via email, Intermed sh.p.k., as the Data Controller, processes your information in accordance with this Privacy Policy and is responsible for the administration, security, and lawful processing of personal data.

The address of our website is: intermed.al.

2 Identity of the Controller

The controller of personal data is:

For any question or request regarding the processing of personal data, you may contact us at the above address.

3 Nature of the Website and the Principle of Minimisation

The intermed.al website is informational in nature and does not require registration or the creation of an account by users.

In application of the principle of data minimisation, we process only the data that are necessary for the technical functioning of the website and for the provision of the information requested by visitors. The processing of data may occur in the following cases:

• Technical data necessary for the functioning of the website (technical cookies);
• Statistical data through Google Analytics, only after your consent;
• Data from third-party services integrated into the website, such as Google Maps;
• Data that you yourself voluntarily send to us when you contact us by email.

4 Cookies and Tracking Technologies

Our website uses "cookies" – small files that are stored on your device. We divide them into two categories:

4.1 Necessary (technical) cookies

They are necessary for the basic functioning of the website and for storing your choices regarding consent. These do not require consent. They include, for example, the consent management cookie (CookieYes).

4.2 Analytical cookies (Google Analytics)

The website uses Google Analytics to understand how visitors interact with the website (the number of visitors, the most visited pages, the source of traffic). These cookies (e.g. "_ga", "ga*") are placed only after you give your consent through the cookie banner.

You may give or withdraw your consent at any time through the cookie banner on the website. You may also manage or disable cookies from your browser settings. Disabling necessary cookies may affect the functioning of the website.

5 Third Parties and Integrated Services

To provide certain functionalities, the website uses third-party services that may process technical data (including the IP address):

• Google Analytics (provided by Google LLC) – for anonymous statistics on the use of the website.
• Google Maps (provided by Google LLC) – for displaying our location on the map. Loading the map may set Google cookies (e.g. "NID").

These services are activated in accordance with your choices regarding consent. The processing of data by Google is also governed by Google's Privacy Policy: policies.google.com/privacy

6 Contact by Email

The website does not contain active forms that collect data within the platform. However, if you decide to contact us voluntarily at the address info@intermed.al, we will process the data that you provide to us (such as your name, email address, and the content of the message) solely for the purpose of handling and responding to your request. This processing is based on our legitimate interest in communicating with you or in taking preliminary steps at your request.

7 International Transfer of Data

Some of the third-party services (Google Analytics, Google Maps) are operated by Google LLC, headquartered in the United States of America. As a result, certain technical data may be transferred outside the territory of the Republic of Albania.

These transfers are carried out in accordance with the guarantees provided for by Law No. 124/2024 and the relevant protection mechanisms offered by Google (including standard contractual clauses). The transfer occurs only after you have given your consent for the relevant cookies.

8 Retention Period

In application of the principle of storage limitation:

• Necessary cookies: retained for the technically required period or until you delete them from your browser.
• Consent cookie (CookieYes): retained for up to 12 months, for the purpose of maintaining your choice.
• Google Analytics cookies ("_ga"): retained for up to 13 months.
• Data sent by email: retained only for as long as is necessary for handling the request and in accordance with legal obligations.

After the expiry of the time limits, the data are deleted or anonymised.

9 Rights of Data Subjects

You enjoy all the rights provided for by Law No. 124/2024:

• The right of access: confirmation as to whether or not personal data are being processed;
• The right to rectification and erasure;
• The right to restriction of processing;
• The right to data portability;
• The right to object, including the withdrawal of consent at any time;
• The right not to be subject to automated decisions, including profiling.

To exercise these rights, you may contact us at info@intermed.al. We will respond to your request as soon as possible and, in any event, no later than 30 (thirty) days from the date of its receipt.

10 Data Security

The Controller has taken appropriate technical and organisational measures to ensure the security of browsing and the protection of data against unauthorised or unlawful processing, including the use of the secure HTTPS (SSL) protocol.

11 Right to Lodge a Complaint

12 Changes to the Privacy Policy

This policy may be updated in the event of changes to the functionality of the website or to the applicable legislation. The latest applicable version will always be accessible on this page, accompanied by the relevant date of update.