1. Who We Are
EVOLVE WEB STUDIO (Data Controller)
NIPT (Tax ID): L72429007F
Address: Headquarters/Central Office: Tirana, Albania
Email: [email protected]
Tel: (+355) 69 458 8269
Data Protection Contact Person: Evolve Web Studio
Email: [email protected]
Tel: +355 69 458 8269
Data subjects may contact us regarding any matter related to the processing of their personal data, in accordance with Article 34, paragraph 3, of Law No. 124/2024.
2. What Data This Website Collects
The website www.evolve-al.com is an informational site. It does not have a contact form, registration system, or transactional functionality. Evolve Web Studio does not collect or store direct personal data such as names, email addresses, or phone numbers through this website.
However, when you visit the site, certain data is collected automatically through cookies and third-party technologies described in detail in Section 3. This data primarily consists of random numeric identifiers linked to browsing behavior, not to your personal identity.
3. Cookies and Trackers — Full List
What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the site function properly or provide us with statistical information on how it is used.
3.1 Necessary Technical Cookies
These cookies are essential for the secure operation of the site. They are activated automatically and do not require your consent, as they are necessary for infrastructure protection and the security of your visit.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
cf_clearance | Cloudflare, Inc. (USA) – Processor | Security verification — distinguishes human visitors from automated bots. Without this cookie, the site may not load properly. | 1 year |
Legal Basis: The legitimate interest of the controller under Article 7, paragraph 1, letter “dh”, of Law No. 124/2024 — protection of the site from cyberattacks and unauthorized access. This legitimate interest is not overridden by your interests, as these cookies do not profile or track browsing behavior.
3.2 Analytical Cookies
These cookies are activated only if you give your consent through the cookie banner displayed during your first visit. They help us understand how visitors navigate our site for the sole purpose of improving it.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google LLC (USA) – Processor | Stores the unique visitor identifier (Client ID) to distinguish different sessions and visitors. | 2 years |
_gid | Google LLC (USA) – Processor | Identifies the current visit session. | 24 hours |
_ga_G-XXXXXXXXXX | Google LLC (USA) – Processor | Google Analytics 4 cookie — stores session state and counts visits for the site’s analytical property. | 2 years |
Legal Basis: Your explicit consent under Article 7, paragraph 1, letter “a”, and Article 8 of Law No. 124/2024. You may withdraw it at any time by clicking [Manage Cookies] on the cookie banner at the bottom of the page or by changing your browser settings, in accordance with Article 8, paragraph 3, of Law No. 124/2024.
Note on Anonymity: Google Analytics does not store names, email addresses, or data that directly identifies you. Cookies store only random numeric identifiers linked to browsing behavior, not to your personal identity. Evolve Web Studio does not have access to data linking these identifiers to your physical person.
Note on Automated Decision-Making and Profiling: Evolve Web Studio does not make automated decisions based on profiling you and does not create individual visitor profiles, in accordance with Article 20 of Law No. 124/2024. Please note that Google LLC, as an independent provider of the analytical service, may conduct internal profiling within its own platform — Google’s privacy policy is accessible at policies.google.com/privacy.
3.3 Performance Cookies and Trackers
These also require your consent and are activated only after you give it.
| Tracker | Provider | Purpose | Duration |
|---|---|---|---|
| Cloudflare Web Analytics (cdn-cgi/rum, cloudflareinsights.com/beacon.min.js) | Cloudflare, Inc. (USA) – Processor | Collects anonymous data on page load performance, response time, and technical errors, with the aim of optimizing speed. | Session |
Legal Basis: Your explicit consent under Article 7, paragraph 1, letter “a”, and Article 8 of Law No. 124/2024.
4. International Data Transfer
Google LLC and Cloudflare, Inc. are companies headquartered in the United States of America. Consequently, data collected through cookies is transferred outside the territory of the Republic of Albania.
This transfer is carried out in the absence of an adequacy decision by the Commissioner for the Right to Information and Personal Data Protection for the United States of America, in accordance with Article 40 of Law No. 124/2024. As appropriate safeguards under Article 41, paragraph 1, of Law No. 124/2024, the transfer is based on Standard Contractual Clauses that Google and Cloudflare apply as a global data protection mechanism in their contractual relationships with controllers.
You may request information on the specific safeguards implemented by contacting us at the address above.
5. Who We Share Data With
The data collected through cookies is shared only with:
- Google LLC — as a processor of the Google Analytics 4 service, based on a data processing agreement in accordance with Article 26 of Law No. 124/2024
- Cloudflare, Inc. — as a processor of the security and performance analytics service, based on a data processing agreement in accordance with Article 26 of Law No. 124/2024
Data is not sold, given, or transferred to third parties for advertising, marketing, or any other purposes.
6. Retention Periods
In accordance with the principle of storage limitation under Article 6, paragraph 5, of Law No. 124/2024, data is retained only for as long as necessary for its purpose:
| Category | Duration |
|---|---|
| Technical cookies (cf_clearance) | Session or maximum 1 day |
| GA4 analytical cookies (_ga, _ga_G-*) | Maximum 2 years |
| Session cookie (_gid) | 24 hours |
| Server logs (IP address, etc.) | 2 months |
7. Your Rights
In accordance with Articles 12–20 of Law No. 124/2024, you have the following rights. For each right, its specific applicability to this website is indicated.
Right to Information (Article 13)
Applicable — This notice itself constitutes the exercise of this right. Evolve Web Studio proactively informs you about every aspect of the processing of your data.
Right of Access (Article 14)
Applicable with practical limitations — You have the right to request confirmation as to whether data relating to you is being processed and to receive information on the purpose, legal basis, and retention period. Since the website collects only anonymous numeric cookie identifiers that are not linked to your identity, Evolve Web Studio cannot identify you as a specific visitor. We will inform you of the specific possibilities after submitting your request.
Right to Rectification (Article 15, paragraph 1)
Not applicable — The website does not collect direct personal data such as name, email, or other rectifiable data. Numeric cookie identifiers are automatically generated and do not contain factual information that can be corrected.
Right to Erasure (Article 15, paragraph 2)
Applicable — You have the right to request deletion of data when you withdraw consent for analytical cookies or when processing is unlawful. Immediate deletion of cookies can also be done directly from your browser settings without needing to contact us.
Right to Be Forgotten (Article 16)
Not applicable — This right relates to the deletion of personal data published by the controller, particularly from search engine results. Evolve Web Studio does not publish personal data of website visitors.
Right to Restriction of Processing (Article 17)
Applicable with practical limitations — You have the right to request suspension of processing in the cases provided for in Article 17. In practice, immediate suspension is achieved by withdrawing consent for analytical cookies or blocking them in your browser.
Right to Data Portability (Article 18)
Not applicable — This right applies when the data subject has actively provided identifiable data with consent. Anonymous numeric cookie identifiers do not constitute data actively provided by the visitor and are not transferable within the meaning of Article 18.
Right to Object (Article 19)
Applicable — You have the right to object to: (i) processing based on legitimate interest (Cloudflare technical cookies) when your particular circumstances justify it, in accordance with Article 19, paragraph 1; (ii) processing for analytical purposes at any time and without being required to explain your reasons, in accordance with Article 19, paragraph 2, by withdrawing your consent.
Right Not to Be Subject to Automated Decisions and Profiling (Article 20)
Not applicable — Evolve Web Studio does not make any automated decisions based on your cookie data and does not create individual visitor profiles. For possible internal profiling by Google LLC within its own platform, please refer to Google’s privacy policy.
How to Exercise Your Rights:
Send a written request to: [email protected]
We respond within 30 days of receiving the request, in accordance with Article 12, paragraph 4, of Law No. 124/2024. This period may be extended up to 60 days for complex cases, with prior notice and justification. The service is free of charge in accordance with Article 12, paragraph 5, of the same law.
How to Manage Cookies Directly from Your Browser:
8. Right to Lodge a Complaint
If you believe that your rights under Law No. 124/2024 have been violated and you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority, in accordance with Article 86 of Law No. 124/2024:
Commissioner for the Right to Information and Personal Data Protection
Web: www.idp.al
Email: [email protected]
Tel: 0800 20 50 (toll-free)
This right does not affect your right to an effective remedy before the competent administrative court, in accordance with Article 87 of Law No. 124/2024.
9. Security Measures
In accordance with Articles 22 and 28 of Law No. 124/2024, Evolve Web Studio implements appropriate technical and organizational measures to ensure a level of security commensurate with the risks posed by the processing of your data. These measures include:
- Pseudonymization and encryption of personal data, where applicable.
- Ensuring the confidentiality, integrity, availability, and resilience of processing systems and services.
- The ability to restore availability and access to personal data within a reasonable time frame in the event of a physical or technical incident.
- A process for regularly testing, reviewing, and evaluating the effectiveness of technical and organizational measures to ensure the security of processing.
These measures are implemented taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, as well as the risks to the rights and freedoms of natural persons.
10. Changes to This Notice
This notice may be updated when the technologies used, third-party cookies, or applicable legislation change. The current date and version are indicated at the top of the document.
For material changes that affect your rights, you will be notified with a prominent message on the site before the changes take effect, in accordance with Article 13, paragraph 4, of Law No. 124/2024.
