Informativa sulla privacy

Who we are

Komani Guide operates boat trips, transfers and related services on Komani Lake and in the Albanian Alps. Our base is at Koman, near the ferry terminal, Vau i Dejës, Albania.

For personal data processed through this website (bookings, enquiries and related messages), Komani Guide is the data controller.

Contact for privacy requests: WhatsApp +355 68 386 2527, or the contact form on this website. Please include enough detail for us to find your booking or message (name, date, reference if you have one).

Scope

This policy covers personal data collected when you:

• browse komaniguide.com and related language versions;
• send an enquiry or book a tour, transfer or stay;
• start a booking on checkout (name and email may be saved so we can email you a link to continue if you leave unfinished);
• pay online or reserve to pay cash at our address;
• message us about a booking;
• accept cookies used for analytics (see our Cookie Policy).

It does not cover third-party websites we link to (for example Booking.com, Google Maps or Instagram). Those services have their own privacy policies.

What we collect

Information you give us

• Identity and contact: name, email address, phone / WhatsApp number, country.
• Booking details: service, date, time preference, number of guests (including free children where relevant), meeting or pickup notes, parking preference, hotel name if you request pickup, and free-text notes.
• Payment status: whether you paid by card, reserved for cash payment, or sent an enquiry only. We store amounts, references and payment status — not full card numbers.
• Communications: messages you send via forms, WhatsApp or email, and our replies.

Information collected automatically

• Technical data: IP address, browser type, device type, approximate location derived from IP, pages visited, referring site, language preference and timestamps.
• Cookies and similar technologies: see the Cookie Policy. If you accept analytics cookies, we use Google Analytics to understand how the site is used.

Payment cards

Card payments are processed by our payment provider (POK). Card numbers and security codes are entered on the provider’s secure form and are not stored on our servers. The provider may send us a payment confirmation, order id and status so we can mark your booking as paid.

Why we use your data (purposes and legal bases)

Purpose	Examples	Legal basis (GDPR-style)
Provide the service	Confirm availability, issue a reference, meet you, run the trip	Contract / steps before a contract
Unfinished checkout	If you enter name and email at checkout but do not finish, we may email a short transactional reminder (typically after a few minutes) with a link to continue that booking	Steps before a contract / legitimate interests
Payments	Start card checkout, record paid or “pay cash” reservations	Contract
Customer service	Answer questions, change dates, handle cancellations	Contract / legitimate interests
Safety and operations	Passenger counts, parking, weather-related changes	Legitimate interests / vital interests where relevant
Legal and accounting	Keep booking records as required by law	Legal obligation
Improve the website	Google Analytics (only if you accept analytics cookies)	Consent
Marketing	Occasional offers — only if you clearly opt in	Consent

We do not sell your personal data.

Google Analytics

If you click Accept on our cookie banner (or later enable analytics via Cookie settings), we load Google Analytics (Google Ireland Limited / Google LLC). Google may set cookies and process usage data (pages viewed, events, device/browser info, approximate location) to produce aggregated statistics for us.

You can withdraw consent at any time via Cookie settings in the footer. See also Google’s privacy policy and how Google uses data from sites that use its services.

Essential cookies (language, session, booking cart, cookie consent choice) work without analytics consent.

Who we share data with

We share data only as needed:

• Payment provider (POK) — to process card payments.
• Hosting and email infrastructure — to run the website, store booking records and send transactional emails (booking received / confirmed, unfinished-checkout continue links, trip reminders).
• Google — Analytics, only with your cookie consent; Maps embeds may load when you view a map.
• Transport or accommodation partners — when your booking involves a ferry seat, transfer or stay we arrange with a partner, we share the details needed to deliver the service (name, date, pax, contact if required).
• Authorities — if required by law or to protect guests and staff.

Staff with access to the admin system (admins, editors, agents) can see bookings and enquiries in order to serve you.

International transfers

Our operations are based in Albania. Some providers (for example Google Analytics or cloud email/hosting) may process data in the EU/EEA, the United States or other countries. Where required, we rely on appropriate safeguards offered by those providers (such as standard contractual clauses) and on your consent for analytics cookies.

How long we keep data

• Bookings and enquiries: typically kept for up to 24 months after the travel date (or last contact), longer if needed for accounting, disputes or legal requirements.
• Unfinished checkout captures: name, email and cart snapshot are kept briefly to send at most one continue-booking email per day, then marked completed/cancelled; we do not use them for marketing.
• Analytics: retained according to our Google Analytics retention settings (and your consent withdrawal stops new collection).
• Cookie consent choice: stored in your browser (local storage) until you clear it or change it via Cookie settings.

Your rights

Depending on applicable law (including EU GDPR if it applies to you), you may ask us to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete data (where we are not required to keep it);
• restrict or object to certain processing;
• receive a copy in a portable format where applicable;
• withdraw consent (for analytics cookies or marketing) without affecting processing already done lawfully.

To exercise these rights, contact us on WhatsApp or via the website contact form. We may need to verify your identity. You may also lodge a complaint with a supervisory authority in your country of residence.

Children

Our services are aimed at adults booking travel. Free child places (ages 0–5) are recorded as part of an adult’s booking. We do not knowingly collect data from children for marketing.

Security

We use HTTPS, access-controlled admin accounts, and encrypted storage for sensitive payment-related secrets on our systems. No method of transmission or storage is perfectly secure; please keep your booking reference private.

Changes

We may update this policy from time to time. The Last updated date at the top of this page will change when we do. Significant changes will be reflected on this page before they take effect where practicable.