Privacy policy

1. Controller

2. Summary

We only process personal data where this is necessary to run this website, answer your enquiries and provide our services. This website sets no cookies for analytics or advertising and uses no tracking services. We do not load third-party content automatically.

3. Hosting and delivery of the website

This website is delivered via Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data such as your IP address, date and time, the requested address, the referring page and information about your browser. This is used to deliver the site, fend off attacks and show us aggregated visitor numbers without personal reference. Cloudflare may set technically necessary cookies for this purpose, for example to detect bots.

The legal basis is our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework, and the European Commission's standard contractual clauses also apply.

4. Contact form and email

If you write to us via the contact form or by email, we process your name, email address, the selected topic and your message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where a possible contract is concerned, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Cloudflare (Cloudflare Workers and Email Routing) forwards messages from the form to our mailbox. Our mailbox is operated by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. The European Commission has issued an adequacy decision for Switzerland. We delete your enquiry once it has been dealt with, unless statutory retention obligations apply.

5. Booking via Cal.com

For bookings we link to Cal.com. The booking page only opens when you click a booking button. When you book, Cal.com, Inc. (USA) processes your name, email address, the selected time slot and your answers in the booking form on our behalf and sends you confirmations and reminders. The legal basis is Art. 6(1)(b) GDPR. Transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses. See theCal.com privacy policy for details.

6. Video calls

We hold the quick check and the roadmap session by video, usually via Cal Video, the service built into Cal.com (technically provided by Daily, Inc., USA). Video, audio and technical connection data are processed for the duration of the call. We do not record calls. The legal basis is Art. 6(1)(b) GDPR.

7. Providing our services

When you book our services, we process the data required for them: contact details, information about your situation and copies of documents you send us. These may include identity documents and criminal record certificates. The legal basis is Art. 6(1)(b) GDPR. We only pass documents on to third parties, such as translation agencies or a law firm you instruct, where this is necessary for the service and you have agreed. We keep invoicing data for as long as statutory retention periods require.

8. Withdrawal via our website

If you withdraw from a contract using our withdrawal function, we process your name, email address, the details of the contract and the date and time of receipt. This allows us to handle the withdrawal and confirm its receipt. The legal basis is Art. 6(1)(c) GDPR in conjunction with the rules on the right of withdrawal. We keep this information for as long as claims arising from the contract can be asserted.

9. Your rights

You have the right to

• access the data we hold about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR) and
• object to processing based on our legitimate interest (Art. 21 GDPR).

Simply write to us at kontakt@movetokosovo.com. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live. In Kosovo, the competent authority is the Information and Privacy Agency (Agjencia për Informim dhe Privatësi).

We do not use automated decision-making or profiling.

10. Changes

We update this privacy policy when our website or services change. The version published here applies.