Privacy Policy

Krahu i Shqiponjës ("we", "us", "our") operates a bar and restaurant located at Bulevardi Hasan Tahsini, Sarandë 9701, Albania, and the website you are currently viewing. For the purposes of the EU General Data Protection Regulation (GDPR) and the Albanian Law on the Protection of Personal Data, we act as the data controller for information collected through this site and in our venue.

• Reservation details - your name, phone number, email address, party size, date, time, and any dietary notes you share with us.
• Contact enquiries - messages you send via our contact form or email, and any information you include in them.
• Website usage - device type, browser, approximate location, referring page, and pages viewed, collected through cookies and similar technologies.
• Payments - processed by our payment providers; we do not store full card numbers on our systems.

• To confirm, manage, and follow up on reservations.
• To respond to enquiries and provide requested information.
• To improve our menu, service, and website experience.
• To comply with legal, tax, and regulatory obligations.
• With your consent, to send occasional updates about events, tasting menus, and seasonal openings.

We rely on the following legal bases: performance of a contract (managing your reservation), legitimate interests (operating and securing our website and business), consent (marketing communications and non-essential cookies), and legal obligations (tax and accounting records).

We do not sell personal information. We share limited data with trusted service providers who help us operate - including our reservation system, email provider, website hosting, and payment processors - under written agreements that require appropriate security and confidentiality.

Some of our providers may process data outside Albania or the European Economic Area. Where this occurs, we rely on adequacy decisions or standard contractual clauses to protect your information.

Reservation records are typically kept for up to 24 months. Accounting records are retained for the period required by Albanian law. Marketing preferences are kept until you withdraw consent.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to certain processing, request portability, or withdraw consent at any time. To exercise these rights, email us at privacy@krahuishqiponjes.com.

Our website uses essential cookies required for basic functionality and, where you consent, analytics cookies that help us understand how the site is used. You can manage cookies in your browser settings.

We apply organisational and technical measures appropriate to the sensitivity of the information we hold. No system is perfectly secure; if you believe your data has been compromised, please contact us immediately.

We may update this policy from time to time. The "last updated" date above indicates when it was most recently revised. Material changes will be highlighted on this page.

Questions or requests regarding this policy can be sent to privacy@krahuishqiponjes.com or by post to Krahu i Shqiponjës, Bulevardi Hasan Tahsini, Sarandë 9701, Albania.