A. Personal Data You Provide Voluntarily – You may provide personal data when you subscribe to our newsletter, create a member account, submit a contact form, submit a contribution (photos, articles, tips), pre-book a tour, or leave a comment or review. The personal data we collect may include your name, email address, username, password, profile preferences, contribution content (such as photos, articles, tips, and comments), tour preferences, and communication data sent via forms.

​

B. Automatically Collected Data – When you visit our Site, we automatically collect certain technical data, including device information (such as IP address, browser type, and device model), usage data (pages visited, time spent, and referral source), approximate geographic location based on your IP address, and cookie data (preferences and session information).

We collect information through direct interactions when you fill out forms, create accounts, or contact us directly. We also collect information through automated technologies, including cookies, web beacons, and analytics tools that track your activity. Additionally, we use third-party services such as Wix (hosting) and Google Analytics (usage analysis). When you make payments, we use payment processors including PayPal and Paysera.

We use your personal data for the following purposes: to provide and maintain our Site and services; to respond to inquiries, send newsletters, and notify you of updates; to manage your account and enable contributions; to collect interest and contact you about upcoming tours; to understand how visitors use our Site and improve user experience; and to detect and prevent fraudulent or harmful activity.

We process your personal data on the following legal bases. We rely on consent when you subscribe to our newsletter, create an account, or submit a form. We rely on contractual necessity when we need to process data to provide a service you requested, such as pre-booking a tour. We rely on legitimate interest for analytics, security, and improving our services, provided your rights do not override these interests. We also process data when required to comply with applicable legal obligations.

We do not sell or rent your personal data to third parties. We may share your data with service providers who help us operate our Site and deliver services. These include Wix.com Ltd. (website hosting and platform services), Google LLC (analytics), and PayPal and Paysera (payment processing). We ensure that all third-party providers process your data in compliance with applicable data protection laws. We may also disclose your data if required by law or to protect the rights, safety, or property of Eksperienca Group sh.p.k. or others.

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access or disclosure, accidental loss or destruction, and unlawful processing. Our security measures include encrypted connections (SSL/HTTPS), secure data storage, access controls to personal data, and regular monitoring and updates. Despite these measures, no online transmission is 100% secure. We cannot guarantee absolute security, but we take all reasonable steps to protect your data.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Account data is retained until you close your account or request deletion. Form submissions are retained for up to three years, unless otherwise required. Newsletter subscriptions are retained until you unsubscribe. Tour pre-bookings are retained until the tour season ends, or as needed for follow-up. Analytics data is retained for 26 months, in line with Google Analytics standard retention. We periodically review and delete data that is no longer needed.

Depending on your location, you may have the right to access, request a copy of the personal data we hold about you; request correction of inaccurate or incomplete data; request deletion of your personal data; request that we limit how we use your data; request that your data be transferred to another service; object to processing based on legitimate interest or direct marketing; and withdraw consent at any time for processing based on consent.

To exercise any of these rights, contact us at info@kosovavista.com. We will respond to your request within 30 days, as required by applicable law.

Our Site is intended for a general audience and is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us. We will take steps to delete such information promptly.

Our Site may contain links to third-party websites, including tour operator websites, external booking platforms, social media channels, and partner organizations. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page, notify you via email if you have subscribed, and post a notice on our Site if changes are significant. We encourage you to review this policy periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Eksperienca Group sh.p.k.

Email: info@kosovavista.com

Address: Ali Aliu Kelmendi, 1B. HiG Center, Prishtina, Kosovo