Privacy Policy

NextSite.al is a design and development studio based in Albania, run by its co-founders Irsian Hashorva and Ersi Spiro. We decide how the personal data described here is used, so we are responsible for it. You can reach us by email at nextsite.al1@gmail.com or by direct message on Instagram at @nextsite.al.

We follow Albania’s Law No. 124/2024 on Personal Data Protection and, where it applies to you, the EU General Data Protection Regulation (GDPR).

Project inquiries. When you send the form on our contact page, we receive your name, business name, email address, optional phone number, the services you selected, the type of project, your budget and timeline ranges, and your project description. Please do not include sensitive personal data in your description.

Technical data. To limit spam, the form server briefly keeps your IP address in memory to count recent submissions, for about 10 minutes. We do not store it in a database or write it to our logs. Our hosting provider keeps standard server logs for security and operations.

Messages elsewhere. If you message us on Instagram, we receive what you send there.

• To reply to your inquiry and prepare a proposal. This is a step you ask us to take before a possible contract. The checkbox on the form also records your agreement to this, and you can withdraw that agreement at any time. Withdrawing does not affect what we already did.
• To keep the website and form secure and free of spam. This is our legitimate interest in protecting them.
• To keep records if we work together. This is needed for the contract and for any legal record-keeping duty.

We never sell your data or use it for unrelated marketing, and we do not make automated decisions about you or profile you. You do not have to send us your data, but we cannot reply to an inquiry without the required fields. The phone number is optional.

• Vercel: hosts this website.
• Resend: delivers inquiry form submissions to our inbox by email.
• Google (Gmail): stores the inquiries we receive in our inbox.
• Instagram (Meta): only if you choose to contact us by direct message. Meta’s own privacy policy applies.

We may also share data if the law or a competent authority requires it.

Vercel and Resend mainly process data in the United States. Their data processing agreements provide for safeguards for these transfers, including the European Commission’s standard contractual clauses. Resend also states that it is certified under the EU-U.S. Data Privacy Framework. Google, which provides our inbox, may also process data outside Albania and the EU. You can read them at vercel.com/legal/dpa and resend.com/legal/dpa, or ask us for a copy.

We keep inquiry emails for as long as needed to respond and, if we work together, for the duration of the project and any legal record-keeping period. If we do not work together, we delete inquiries within 24 months, or sooner if you ask.

This website and the connection to our email delivery provider use encrypted connections, and our logs do not contain what you write in the form. No system is completely secure, but if a breach puts your rights at risk, we will act as the law requires, including telling you and the authorities where that is needed.

You can ask us to give you access to your personal data, correct it, delete it or restrict how we use it, to give you a copy in a portable format, or to stop using it where you object to our legitimate interest. You can also withdraw your agreement at any time. These rights have some legal limits, and we may need to confirm who you are.

Contact us by email at nextsite.al1@gmail.com or by direct message on Instagram at @nextsite.al. We normally reply within 30 days, and we will tell you if we need longer.

You can also complain to Albania’s Right to Information and Personal Data Protection Commissioner, or, if you are in the EU, to the data protection authority in your country.

This website does not set cookies or use analytics, advertising or tracking tools, so you will not see a cookie banner. If we add any in the future, we will update this policy and ask for your consent where the law requires it.

We will update this page if our practices change, and change the date at the top. This policy is also available in Albanian. If the two versions differ, the English version applies, as far as the law allows.