La Mia Card in Albania

Privacy policy

Last updated: 30/08/2026

1. Data controller

The data controller is Social Up Shpk, Rruga Robert Shvarc, 1001 Tirane, NIPT M42424012O. For any request: info@ilmioviaggioinalbania.com.

2. Data we collect

  • Purchase and contact data: first and last name, email, phone (if provided).

  • Payment data: handled directly by Stripe; we do not store full card data.

  • Card usage data: businesses where the Card was used, spend amounts, applied discounts, date and time.

  • "Become a partner" application data: contact name, business name, email, phone and city provided through the public form.

  • Technical data: minimal browsing data needed for the website to work; for "Become a partner" applications we also collect IP address and user agent, used to detect repeated spam submissions.

3. Purposes and legal bases

  • Providing the service, issuing and managing the Card (performance of the contract).

  • Sending service communications (confirmation, activation, expiry emails) (performance of the contract).

  • Legal, tax and accounting obligations (legal obligation).

  • Handling requests and support (legitimate interest).

4. Sharing data with third parties

Data may be shared with: Stripe (payment processing); partner businesses, limited to the Customer's first name, solely to validate the Card; technical providers (hosting, email) acting as data processors. Data is not sold for third-party marketing purposes.

5. Retention

We keep data for as long as necessary to provide the service and comply with legal obligations (e.g. tax), after which it is deleted or anonymized. [SPECIFY RETENTION PERIODS, E.G. 10 YEARS FOR ACCOUNTING RECORDS] Technical data (IP address and user agent) collected through the "Become a partner" form is automatically anonymized 12 months after the application is submitted.

6. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data. You can exercise your rights by writing to info@ilmioviaggioinalbania.com. You also have the right to lodge a complaint with the competent data protection authority.

7. Transfers and security

We adopt appropriate technical and organizational measures to protect data. Any transfers to providers located outside the national territory take place in compliance with the safeguards required by applicable law.

8. Changes

This notice may be updated; the current version is always available on this page.