EstateAll Privacy Policy

ESTATEALL PRIVACY POLICY
In accordance with Law No. 124/2024 “On Personal Data Protection” of the Republic of Albania
Last updated: February 2026

EstateAll, registered in the Republic of Albania as Person Fizik, NUIS/NIPT: L77204215C, acting as Data Controller within the meaning of Law No. 124/2024 “On Personal Data Protection”, processes personal data in compliance with applicable Albanian legislation and in accordance with the principles of transparency, lawfulness, fairness, proportionality, purpose limitation, data minimization, accuracy, storage limitation and integrity and confidentiality.

This Privacy Policy applies to all personal data voluntarily provided by users through the website www.estateall.com, through inquiry forms, electronic communication, messaging applications, telephone contact, social media interaction, brokerage agreements and any other form of communication related to the provision of real estate and investment services in Albania.

EstateAll may collect and process the following categories of personal data: full name, residential address, email address, telephone number, identification data where legally required, financial and transactional information necessary for compliance with anti-money laundering legislation, property preferences, investment objectives, communication history, technical data such as IP address and website usage information. Special categories of personal data are processed only where required by law or where explicitly provided for a lawful and specific purpose.

Personal data is processed on one or more of the following legal grounds: performance of a contract or pre-contractual measures at the request of the data subject; compliance with legal obligations under tax, anti-money laundering and real estate legislation; legitimate interests pursued by EstateAll where such interests are not overridden by the rights and freedoms of the data subject; explicit consent of the user, particularly in relation to marketing communications and newsletters.

The purposes of processing include client identification, provision of real estate brokerage services, preparation and execution of property transactions, compliance with AML and KYC obligations, communication with clients, customer and technical support, tax and accounting compliance, internal documentation and record keeping and, where consent is provided, delivery of promotional materials and special offers. EstateAll does not sell, rent or commercially distribute personal data to third parties.

Personal data is retained for the duration of the contractual relationship and thereafter for the period required by applicable Albanian legislation, including tax, civil and anti-money laundering laws, which may require retention for a minimum period of five to ten years depending on the nature of the documentation. Data processed on the basis of consent is retained until such consent is withdrawn. Upon expiration of the retention period, personal data is securely deleted or anonymized.

Personal data may be disclosed only where necessary to notaries, banks, public authorities including tax authorities and AML supervisory bodies, accountants, legal advisors and contracted IT service providers operating under appropriate data processing agreements in accordance with Law No. 124/2024. All such parties are bound by confidentiality and data protection obligations. Personal data is not publicly disclosed.

Where personal data is transferred outside the Republic of Albania or the European Union, such transfers are carried out only in compliance with Law No. 124/2024 and subject to appropriate safeguards ensuring an adequate level of protection.

EstateAll implements appropriate technical and organizational measures to ensure the security of personal data, including restricted access controls, secure storage systems, internal confidentiality obligations and regular compliance monitoring. While reasonable measures are taken to protect personal data, no system of electronic transmission over the Internet can guarantee absolute security.

Rights of Data Subjects: Under Law No. 124/2024, data subjects have the right to request access to their personal data, request correction of inaccurate data, request erasure where legally permissible, request restriction of processing, the right to data portability, object to processing based on legitimate interest, withdraw consent at any time without affecting the lawfulness of prior processing, and lodge a complaint with the Information and Data Protection Commissioner of the Republic of Albania.

Data Protection Officer (DPO): EstateAll has implemented internal data protection protocols to ensure compliance with Law No. 124/2024. For any inquiries regarding your personal data or to exercise your rights, you may contact: [email protected].

EstateAll reserves the right to amend this Privacy Policy to reflect legislative updates or operational changes. The current version is published on www.estateall.com

Continued use of the website constitutes acknowledgment and acceptance of this Privacy Policy in accordance with applicable Albanian law.