Last updated: 21 September 2026
Applicable law and international protection
The controller is based in the Republic of Albania and applies Albanian Law No. 124/2024, “On Personal Data Protection”, and its implementing acts. This law is aligned with Regulation (EU) 2016/679.
Where processing concerns people in the European Union or European Economic Area, or the offering of services to them, the GDPR also applies within its territorial scope. For users in other countries, the controller also complies with mandatory data protection provisions applicable at the data subject’s location, where those provisions apply to the service offered.
Where laws overlap, requirements providing the highest level of protection are adopted, except where the competent law imposes different mandatory obligations. Users may lodge a complaint with the Commissioner for the Right to Information and Protection of Personal Data of the Republic of Albania and, where applicable, the competent supervisory authority in their own country.
Data controller
The data controller is Capital Global Service Investment Partner SH.P.K., Shoqëri me Përgjegjësi të Kufizuar, NUIS M52104043E, registered at Rruga “Emil Lëgrand”, Ndërtesa 5, Hyrja 1, Apartamenti 3, Njësia Administrative Nr. 7, Tirana, Albania.
Trading brand: Capital Global Travel Network.
Legal representative: Dr Giacinto Rubicondo.
Privacy contact: capitalglobaltirana@gmail.com.
Scope
This notice describes the processing of personal data through capitalglobaltravel.com, contact forms, enquiries about travel, hotels, apartments, tours, flights and car rental, and any registration and booking functions. Where the website offers services to people in the European Union, processing complies with Regulation (EU) 2016/679 (GDPR), where applicable.
Data processed
We may process identification and contact details, such as first name, surname, email and telephone number; travel enquiry and accommodation preference data; information needed for bookings and payments; communications sent to customer service; technical browsing data such as IP address, device, browser, logs and cookies; and other information voluntarily provided by users.
Please do not send special-category or sensitive data that is unnecessary for your enquiry. If health or assistance information is essential to the service, it will be processed within the limits permitted by law and with applicable safeguards.
Purposes and legal bases
Data is processed to:
- Respond to enquiries and prepare quotations, based on pre-contractual measures requested by the data subject;
- Manage bookings, payments, assistance and contractual relationships;
- Comply with legal, tax, accounting and security obligations;
- Prevent fraud and protect the controller’s rights, based on legitimate interests;
- Send newsletters and promotional communications only with separate consent, which may be withdrawn at any time;
- Use statistical, profiling or marketing cookies only when required by applicable rules and after the user’s choice.
Providing data
Information marked as mandatory is needed to respond to the enquiry or provide the service. Failure to provide it may prevent a quotation or booking from being processed. Marketing consent is optional; refusal does not prevent use of the services.
Recipients
Data may be disclosed, to the extent necessary, to authorised staff and collaborators; hotels, accommodation providers, tour operators, carriers, airlines, car rental companies, insurers and other suppliers involved in the requested service; hosting, email, maintenance, security and IT service providers; payment providers; tax, legal and administrative advisers; and public authorities where required by law.
When users choose services or links managed by third parties, such as Booking.com, DLT Viaggi, PayPal, Stripe, Google Maps, YouTube or WhatsApp, those parties may act as independent controllers under their own privacy notices. The actual list of suppliers may vary depending on the requested service.
International transfers
The controller is based in Albania. Some recipients or technology providers may be in Albania, the European Union or other countries. Where the GDPR applies, international transfers are made using a valid legal basis and, where necessary, adequacy decisions, standard contractual clauses or other safeguards provided under Articles 44 and following of the GDPR.
Retention periods
Enquiry data and quotations that do not result in a contract are retained for as long as necessary to manage them and normally no longer than 24 months. Contractual, accounting and booking data is retained for the period required by applicable law, normally up to 10 years. Marketing data is retained until consent is withdrawn or for the period stated when it is collected. Technical logs are retained for as long as necessary for security and troubleshooting. Longer periods may apply to comply with legal obligations or defend legal claims.
Data subject rights
Where provided by applicable law, data subjects may request access, rectification, erasure, restriction, objection, data portability and withdrawal of consent without affecting processing carried out before withdrawal. Requests may be sent to capitalglobaltirana@gmail.com.
Data subjects may also lodge a complaint with the competent supervisory authority. Users whose data is processed under the GDPR may contact the competent authority in the European Economic Area country where they live, work or believe the infringement occurred.
Cookies and third-party tools
The website uses technical cookies necessary for operation. Statistical, multimedia, profiling and marketing cookies are used according to preferences expressed through the consent panel. Users may change their choice at any time through the “Manage cookie preferences” link. Please refer to the Cookie Policy for further information.
Security
The controller adopts reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration and disclosure. No Internet-connected system can guarantee absolute security.
Minors
The services are not directed at minors acting independently. Enquiries and bookings concerning minors must be made by a person with parental responsibility or another authorised person.
Changes
This notice may be updated for legal, technical or organisational changes. The updated version will be published on this page with its date.