Privacy Notice

Effective: 12 September 2026

1. Who handles your data

The operator of Trafiku Rrugor Albania is the controller for information submitted through this website. Contact details and the secure email channel are listed on our Contact page. The applicable service and payment terms are available before checkout.

2. Data we use

• Email address, one-time login records and account-session data.
• VIN, make, model, year, installed system, requested services and your note.
• Order status and correspondence.
• For crypto payment: order/payment reference, EUR total, selected currency and network, payment status, transaction identifier and confirmation data.
• Limited security and rate-limit data needed to prevent abuse.

3. Why we use it

We use this information to authenticate your account, check vehicle compatibility, answer your request, deliver an agreed service, keep an order record, prevent fraud and comply with legal obligations. We do not use the VIN to advertise publicly and we do not sell personal data.

4. Service providers

Cloudflare hosts the website and storage and provides security services. Resend delivers transactional email. If you choose crypto payment, 2328 provides the hosted checkout and processes the payment details needed to complete and verify that transaction. We do not ask for or store your wallet private key or seed phrase.

5. Retention

One-time codes expire after 10 minutes. Sessions expire automatically. Request and order records are kept only as long as needed to handle the service, resolve disputes, prevent abuse and meet applicable accounting or legal obligations. We delete or anonymise information when it is no longer needed.

6. Your choices and rights

You may ask for access, correction, deletion, restriction or portability where applicable, and you may object to certain processing. You can sign out of all sessions from your account. Send a request to info@trafiku.al. You may also complain to Albania’s Commissioner for the Right to Information and Protection of Personal Data.

7. Security

Accounts use one-time email codes rather than stored passwords. Traffic is encrypted in transit, sessions use secure cookies, and administrative access is separated from the public site. No internet service can promise absolute security.

8. Changes

We may update this notice when the service or legal requirements change. The effective date above shows the current version.