Privacy Policy.
How Site Solutions L.L.C. collects, uses and protects your personal data. Compliant with the EU General Data Protection Regulation (GDPR) and Kosovo Law No. 06/L-082 on Personal Data Protection.
Who we are
This privacy policy applies to site-solutions.tech (and all subdomains), operated by:
10000 Pristina, Kosova
What data we collect
1. Contact form submissions
When you submit a project brief through our contact form, we process the following data you voluntarily provide:
- Name · required
- Email address · required
- Phone number · optional
- Company name · optional
- Project brief · required (free text)
- Preferred reply method · Email, WhatsApp, or call
2. Server logs
Our hosting provider automatically collects standard technical data when you access this website:
- IP address (anonymised within 30 days)
- Date and time of access
- Browser type and version
- Operating system
- Referring URL
This data is necessary for the technical operation, security and stability of the website.
3. Cookies
This website does not use tracking, advertising or analytics cookies. No cookie banner is required because no consent-bearing cookies are set.
Legal basis for processing
Under GDPR Art. 6(1), we process your personal data on the following legal grounds:
- Consent (Art. 6(1)(a)) · for processing your contact form submission. By sending the form, you consent to us using your data to respond to your inquiry.
- Legitimate interest (Art. 6(1)(f)) · for replying to your business inquiry, maintaining the technical security of the website, and improving our service.
- Contractual necessity (Art. 6(1)(b)) · if you become a client, for the performance of our engagement.
How long we keep your data
- Contact form data · retained for up to 12 months after our last contact with you, or until you request deletion.
- Server logs · anonymised or deleted after 30 days.
- Client engagement data · retained for the duration of the engagement plus the legally required record-keeping period under Kosovo tax law (up to 6 years).
Third parties & sub-processors
We do not sell, rent, or share your personal data with third parties for marketing purposes.
The following sub-processors may have limited access to your data strictly to deliver the service:
- Hostinger International Ltd. (Lithuania, EU) · hosting provider. Processes server logs and serves website content. Hostinger Privacy Policy ↗
- Web3Forms · processes contact form submissions and forwards them to our inbox. Receives form data (name, email, phone, brief, attachments) only when you submit the form. Does not store data beyond delivery. Web3Forms Privacy Policy ↗
All sub-processors are bound by data processing agreements compliant with GDPR Art. 28. Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses or equivalent safeguards.
Your rights under GDPR & Kosovo law
You have the following rights regarding your personal data:
- Right of access (Art. 15) · obtain a copy of the personal data we hold about you
- Right to rectification (Art. 16) · correct inaccurate or incomplete data
- Right to erasure / "right to be forgotten" (Art. 17) · request deletion of your data
- Right to restrict processing (Art. 18) · limit how we process your data
- Right to data portability (Art. 20) · receive your data in a machine-readable format
- Right to object (Art. 21) · object to processing based on legitimate interest
- Right to withdraw consent · withdraw at any time, without affecting prior lawful processing
To exercise any of these rights, contact info@site-solutions.tech. We will respond within 30 days. No fee applies unless the request is manifestly unfounded or excessive.
Right to lodge a complaint
If you believe we are processing your data unlawfully, you have the right to lodge a complaint with a supervisory authority:
- Kosovo · Agency for Information and Privacy (AIP)
- EU residents · your local Data Protection Authority
Data security
We use appropriate technical and organisational measures to protect your data, including TLS encryption for all data in transit, secure password handling, access controls limited to the two co-founders, and routine security patches on all systems we operate. No method of internet transmission is 100% secure; however, we work to apply commercially acceptable safeguards.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or for legal reasons. The current version is dated below. Significant changes will be communicated through a notice on this website. Previous versions are available on request.