Privacy policy

This policy explains how personal information is handled when you use the Neofone website or contact our team. It describes the information needed, why it is used and how you can exercise your rights.

1. Who is responsible for your information

The controller for the website and enquiries addressed to Neofone is:

Neofone sh.p.k. · NUIS/NIPT K92103001D

Registered office: Rruga Brigada VIII, pallati nr. 8, hyrja nr. 12, ap. 8, 1000, Tiranë, Shqipëri.

Email: contact@neofone.al · Telephone: +355 4 530 0000.

For privacy matters or individual-rights requests, email us with the subject “Privacy”. This policy covers the website and initial communications. Subscriber information, telephone traffic, call recordings and services processed on behalf of business customers are addressed separately in the relevant service information and agreements.

2. Information we handle

• Contact enquiries: first name, surname, country, email and message. Telephone number and service of interest are optional. Submitted enquiries are stored in Neofone’s administration system, with information about their recording and handling.
• Correspondence: information you send by email or communicate when asking for advice, a quotation or support.
• Technical operation: the server processes connection and request information, such as IP address, access time, requested resource and browser technical information, to deliver the website, diagnose errors and protect the system.
• Language: the Albanian or English version is selected by the page URL without setting a preference cookie. See our Cookie policy.

Fields marked * are required to submit the form, not to browse the website. Without the necessary information, we may be unable to respond or prepare a quotation. You can also contact us by telephone or email. Do not include passwords, identity documents, health information or call records in an initial message. If you contact us about someone else, share only information you are entitled to provide.

3. Purposes and legal grounds

• Responding to an enquiry and preparing a quotation: pre-contractual steps you request. When you represent a business, the ground is our legitimate interest in communicating with that business and handling its enquiry.
• Managing correspondence, support and website security: legitimate interests in operating the service, preventing abuse and following up matters, subject to your rights.
• Meeting legal requirements: obligations applicable to Neofone where records or information must be retained or provided to a competent authority.
• A use requiring consent: separate consent for the stated purpose. You can withdraw it without affecting the lawfulness of earlier processing.

Submitting an enquiry does not subscribe you to marketing. The form has no campaign-subscription field. Browsing the website or reading this policy does not constitute consent to advertising, call recording or AI voice-agent use.

4. Who may receive information

An enquiry is handled by authorised Neofone personnel who need it to respond, prepare a quotation or provide support. Technical recipient categories include hosting, maintenance, email and backup providers, according to the service used. Professional advisers or competent authorities may receive information where necessary and supported by a legal ground.

A website enquiry does not authorise those recipients to use the information for their own marketing. Submitting the form does not publish your message on the website.

5. Processing outside Albania

Processing locations depend on the hosting, email and backup infrastructure. Processing outside Albania requires the applicable legal ground and safeguards, not merely acceptance of this policy. You can ask about recipients, countries and a copy or description of relevant safeguards at contact@neofone.al.

Confirmation required before publication: providers, processing countries, the specific international-transfer mechanism and implementation of the retention criteria below must be verified. The contact of any appointed data protection officer must also be confirmed. This text does not present these operational facts as verified.

6. How retention is determined

Retention must relate to the purpose and actual need, rather than be indefinite. This policy sets out the following criteria; their implementation in company systems and procedures must be confirmed before publication:

• Enquiries and correspondence: time needed to respond, complete quotation discussions and handle outstanding matters. If a contract results, necessary records become part of the relevant customer file.
• Records needed by law or for a dispute: the period resulting from the particular obligation, applicable time limits and the need to establish, exercise or defend a right.
• Technical logs: the need to detect, investigate and resolve incidents or faults; these are not marketing files.
• Backups: the retention period and recovery/replacement cycle must be established, documented and considered when handling erasure requests.

You can ask which period or criterion applies to your information. This policy does not claim that automatic deletion takes place after a specified number of days.

7. Your rights

Subject to Law No. 124/2024, you may request information and access, correction of inaccurate data, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and to direct marketing, and withdraw consent where consent is the legal ground.

Email contact@neofone.al, explaining your request and how we can reply. We may request proportionate information to verify identity, without automatically requiring an identity document. The statutory response period is 30 days; any extension or restriction must have a legal basis and be explained. Erasure and portability are not unconditional rights.

You may complain to Albania’s Commissioner for the Right to Information and Protection of Personal Data, including through info@idp.al. You do not have to resolve the matter with Neofone first to exercise your right to complain.

8. Security, automation and updates

The public website uses HTTPS. Protecting information also requires access controls and organisational measures; no website can guarantee absolute security.

The website form does not make automated decisions with legal effects or activate AI agents or call recording. If you request such a service for your business, its processing purposes, roles and conditions are defined separately before activation.

We review this policy when relevant information or website operation changes. The update date appears on this page. Changing the text does not itself authorise a new purpose that requires consent. Official information about your rights.