Privacy at Albania Nights

The list: your email, your first name if you add it, your language and, if you give them, your travel dates, how many of you are coming, a mobile and a message. We use them to write when Saranda and Ksamil nights go on sale, because you ticked the consent box; the dates form and the alert for one night carry that same box, which makes them list sign-ups too. Stored alongside: the website, the form type, the date and hour and, as a record of your consent, the consent text version and the page it was given on.

Messages from the contact form: your name, email, mobile if you add it and the message itself, so we can answer you.

The host chat: your question is sent to an AI provider to draft the answer. The conversation stays in your browser until you close the tab; the service keeps only technical usage details, without the text (website, language, outcome and timings), and these sit briefly in the hosting company's server logs.

Every form is screened for spam with a hidden field, the time it took to fill in and a cap on repeated requests. For that cap your IP address is used for an instant in memory; it is not stored with a valid entry.

You stay on the list until you leave it, with one click at the bottom of every email, and from that moment no more emails go out. Seven days later the extras you typed (name, mobile, dates, group size, message, interests) are erased; we hold on to the email plus the website, language and origin, together with the fact that you left, so that you are not added again by mistake.

An alert for one night lasts while that night (or the one that comes in its place) has not gone on sale, for twelve months at most, and once sent it goes after the night; leaving cancels this website's pending alerts there and then, and they are erased on the following daily round. Contact-form messages are erased two years after their last activity; technical security records, within 90 days.

Nothing is sold or passed to venues, promoters or advertisers. Supabase hosts the database, the emails leave through Resend on an account of these websites opened in its European Union region, Groq is the chat's AI provider and Netlify hosts the website; they process data for us and only for this. Some of them are based outside the EEA, for example in the US, and those transfers are protected by the European Commission's standard contractual clauses or another safeguard that the GDPR provides. Opens and clicks in our emails are not followed; a copy of each email and a note of whether it went out, arrived, bounced or met a complaint are kept for one year.

You can ask to see, correct or delete your details, to restrict or object to their use, or to take them with you, and you can withdraw consent at any time; a request to erase them is answered within one month. Write to us through the contact page or on WhatsApp. If you think we got it wrong, you can complain to Malta's Information and Data Protection Commissioner. The nights on this website are for adults: if you are under 18, please do not send us your details. Maltese law and the GDPR apply.