Privacy PolicyPrivacy Policy

MTC Marketing is the controller of the personal data described in this policy. You can reach us at:

MTC Marketing
info@mtcmarketing.co
+383 49 277 977

We handle personal data in line with Kosovo’s Law No. 06/L-082 on the Protection of Personal Data and, where it applies to you, the EU General Data Protection Regulation (GDPR).

When you contact us

When you send our contact form, we collect what you enter into it:

• Your name
• Your email address
• Your phone number, if you give it
• Your company name, if you give it
• The services you are interested in, if you choose any
• The content of your message

Only your name, email address, and message are required. Before sending, you also confirm that you are 16 or older and have read this policy. If you email or call us instead, we receive the details you share that way.

When you ask about your data

When you use our data request form, we collect your name, your email address, what you would like us to do, and any details you add.

When you browse the website

Like most websites, our hosting provider automatically records standard technical data for each request (such as your IP address, browser type, the page requested, and the time) to deliver the website and keep it secure. We do not use this data to identify or profile visitors.

This website does not use analytics, advertising, or other visitor-tracking tools.

• To answer your enquiry and to prepare proposals or quotes you ask for, because you asked us to take these steps before a possible contract (GDPR Article 6(1)(b)), and because we have a legitimate interest in replying to business enquiries (Article 6(1)(f)).
• To keep records of our conversations with clients and prospective clients, based on our legitimate interest in running our business (Article 6(1)(f)), and where tax or accounting law requires it (Article 6(1)(c)).
• To handle requests about your data, because the law requires us to (Article 6(1)(c)).
• To run the website and keep it secure, based on our legitimate interest in a working, safe website (Article 6(1)(f)).

We do not sell your personal data, we do not make decisions about you by automated means, and we do not send you marketing emails unless you ask us to.

We use a small number of service providers who process personal data on our behalf, only for the purposes below and under agreements that require them to protect it:

• Vercel: hosts this website and processes the technical request data described in Section 2.
• Supabase: stores the messages and requests you send us, and the website’s content and media, in its database and file storage.
• Resend: delivers the email notification our team receives when you send the contact or data request form, which contains the details you entered.

We may also disclose personal data where the law requires it, for example to a court or public authority.

Some of these providers are based in, or use servers in, the United States and other countries outside Kosovo and the European Economic Area. Where personal data is transferred there, we rely on the safeguards each provider offers, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

This website does not use analytics or advertising cookies. It uses one strictly necessary cookie to support the password-protected administration panel used by our staff; this cookie is not set for ordinary visitors. For full details, see our Cookie Policy.

• Enquiries that do not lead to a project: deleted within two years of our last exchange.
• Enquiries that lead to a project: kept for as long as we work together, and afterwards for as long as tax and accounting law requires.
• Requests about your data: a record of the request and our answer, kept for up to three years to show how we handled it.
• Technical request data: kept by our hosting provider for a short period for security and troubleshooting.

You can ask us to delete your data sooner; see Section 9.

This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 16, and our contact form asks you to confirm that you are 16 or older. If you believe a child has sent us their details, please contact us and we will delete them.

Depending on the law that applies to you, you have the right to:

• Ask for a copy of the personal data we hold about you
• Have inaccurate or incomplete data corrected
• Have your data deleted
• Restrict or object to how we use your data
• Receive your data in a portable format

To use any of these rights, send us a request through our data request form or email us at the address in Section 1. We reply within one month. To protect your data, we may ask you to confirm your identity first.

You also have the right to complain to a data protection authority: in Kosovo, the Information and Privacy Agency (Agjencia për Informim dhe Privatësi); in the EU or EEA, the authority where you live, work, or think your rights were infringed. We would appreciate the chance to resolve your concern first.

Messages and requests you send us are stored with our providers and are accessible only to authorised MTC Marketing staff through a password-protected administration panel. We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of storage or transmission over the internet is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The “Last updated” date at the top of this page reflects the most recent revision.