Privacy Policy
This policy describes how Tridens processes personal data in accordance with Law No. 124/2024 "On Personal Data Protection" of the Republic of Albania (the "Data Protection Law"), which is fully aligned with Regulation (EU) 2016/679 (GDPR), and with the professional-secrecy obligations that apply to advocates and tax advisors.
1. Controller. Tridens, Boulevard "Deshmoret e Kombit", Twin Towers, Tower 1, 8th Floor, 1001, Tirana, Albania, NUIS/NIPT M62031007D, email info@tridenslaw.com, is the controller within the meaning of the Data Protection Law.
2. Overview and principles. We process personal data lawfully, fairly, and transparently, only for specified purposes, limited to what is necessary, kept accurate and only as long as required, and secured by appropriate technical and organizational measures (Articles 5 and 6 of the Data Protection Law). We process data only where a lawful basis exists: your consent, the performance of a contract or pre-contractual steps, compliance with a legal obligation, or our legitimate interests where these do not override your rights.
3. Website and log files. When you visit this site, our hosting provider processes technical data (IP address, browser type, date and time of access) to deliver the site securely and prevent abuse. Lawful basis: our legitimate interest in the secure operation of the website. Log files are retained only for the period provided by law.
4. Contact form and email. We process the details you submit (name, email, phone, company, message, and chosen topic) solely to handle your enquiry. Lawful basis: pre-contractual measures taken at your request and/or our legitimate interest in responding. If no engagement follows, enquiry data is deleted once the matter is concluded, unless statutory retention obligations apply.
5. Client engagements and professional secrecy. Where you become a client, we process data to perform the engagement and to meet our statutory and professional obligations. Lawful basis: performance of the contract and compliance with legal obligations. Data held in connection with legal engagements is protected by the professional secrecy of advocates under Law No. 55/2018 "On the Profession of Advocate". Engagement and tax records are retained for the periods provided by law, including under Law No. 9920/2008 "On Tax Procedures" and related legislation.
6. Anti-money-laundering. Where we are subject to client due-diligence and record-keeping obligations under Law No. 9917/2008 "On the Prevention of Money Laundering and Financing of Terrorism", as amended, we process and retain identification data for the periods that law requires. Lawful basis: compliance with a legal obligation.
7. Job applications. We process application data (CV, covering note, and related information) to conduct the recruitment procedure. Lawful basis: pre-contractual measures and, where applicable, your consent. Application data is retained for the period provided by law.
8. Whitepaper downloads. Where you request a download, we process your name and email with your consent to deliver the document and, only if you separately agree, to contact you about related matters.
9. Map service. Our Contact page displays a map provided by Google Maps. When the page loads, your browser connects to Google and your IP address is transmitted to Google. Lawful basis: our legitimate interest in showing you the location of our office.
10. Recipients and processors. We disclose personal data only to processors acting on our documented instructions under written processing agreements as required by the Data Protection Law (hosting, email, and IT), to public authorities and courts where legally required, and otherwise only with your instruction. All processors are bound to confidentiality and appropriate security.
11. International transfers. Personal data is processed within Albania wherever possible. Where a processor is located abroad, we transfer data only to countries recognized by the Commissioner as ensuring an adequate level of protection, or on the basis of appropriate safeguards (such as standard contractual clauses) together with a transfer risk assessment, in accordance with the Data Protection Law.
12. Data security and breach notification. We apply appropriate technical and organizational measures to protect personal data. In the event of a personal data breach likely to result in a risk to your rights, we notify the Commissioner without undue delay, and you where the law requires it.
13. Your rights. Subject to the conditions of the Data Protection Law, you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right not to be subject to solely automated decisions and the right to withdraw consent at any time with effect for the future. Note that professional-secrecy and statutory retention duties may limit erasure in specific cases. To exercise any right, contact us at info@tridenslaw.com.
14. Right to complain. You may lodge a complaint with the Commissioner for the Right to Information and Protection of Personal Data (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale), Rruga "Abdi Toptani", Nd. 5, Tirana, Albania — www.idp.al — without prejudice to any judicial remedy before the competent Albanian courts.
15. Updates. We revise this policy when our processing activities or the applicable law change. The current version is always available on this page.