Privacy Policy

1. Principles of personal data processing and website operation

1. The website available at mhconsulting.al (hereinafter referred to as “the Website”) is managed by MH Consulting, with its registered office at Rr. Kavajes. As the Website operator, we also act as the Data Controller.
2. For matters related to the Website operation and personal data processing, please contact us at: support@mhconsulting.al.
3. All personal data processed within the Website is treated with the utmost care and in accordance with applicable laws. Information you voluntarily provide is used for strictly defined purposes, such as:
   • Handling inquiries you send us by email or WhatsApp,
   • Presentation of current offers and relevant information.
4. Data collection about users and their activity on the Website is conducted (i) through information you consciously and voluntarily send us when you contact us and (ii) through cookies stored on users’ end devices.

2. Data protection mechanisms

To ensure the security of your personal data we have implemented advanced technical and organizational solutions, based on two key pillars:

1. Data transmission encryption. The entire Website is served over an encrypted connection (SSL/TLS). Information is encrypted before leaving the user’s device and decrypted only on our destination server, eliminating the risk of interception during transmission.
2. Continuous improvement of IT infrastructure. We follow a systematic update policy covering all software components used in personal data processing, allowing rapid response to emerging threats and vulnerabilities.

3. Technical infrastructure and system data collection

We work with a professional hosting service provider to ensure stable and secure operation of the Website. As part of standard procedures, our hosting partner conducts detailed activity logging at server level. This may include URLs of resources accessed, timestamps of requests and responses, client identifiers, error reports, referrer URLs, browser characteristics, IP addresses, diagnostic data on registration and service ordering, and metadata of electronic correspondence handled by our systems.

4. User rights and principles of personal data processing

4.1 Sharing of personal data

Where necessary to perform a contract, comply with legal obligations or protect our legitimate interests, we may transfer personal data to selected external entities such as hosting and analytics service providers and marketing service companies, always under a data processing agreement.

4.2 Data retention period

Personal data is stored for the period necessary to achieve specific purposes. Marketing data is processed until consent is withdrawn; data necessary for contract execution is kept for the duration of the contract and the time required by law. The standard retention period may be 3 years unless otherwise specified.

4.3 User rights

• Right of access to data,
• Right to rectification of data,
• Right to erasure of data,
• Right to restriction of processing,
• Right to data portability,
• Right to object to processing, especially for marketing purposes.

4.4 Voluntary provision of data

Providing personal data is voluntary, but in some cases necessary to use certain features such as replying to your inquiry. Without it we may be unable to respond.

4.5 Withdrawal of consent

You may withdraw consent at any time by emailing support@mhconsulting.al. Withdrawal does not affect the lawfulness of processing before withdrawal. We will confirm receipt within 7 business days, delete the data from our systems and inform external entities to which it was previously transferred.

5. Data you send us when you contact us

We may record technical parameters of the connection (timestamp, IP address) for administrative and analytical purposes. The Website has no forms. Information you send us by email or WhatsApp is processed for clearly defined purposes — handling service requests, business contact, service registration or other purposes you state in your message — and is treated as confidential under applicable data protection regulations.

6. Cookie usage policy

Cookies are small text files stored on your device while browsing. We use strictly necessary cookies to remember your cookie preference, and analytics cookies to understand how visitors use the Website. Analytics cookies are set only after you accept them in the cookie banner. Separately, our hosting provider Cloudflare counts visits in aggregate through Cloudflare Web Analytics, which does not use cookies and does not identify individual visitors. We do not use cookies to collect directly identifiable personal data such as your name or email address without your explicit input.

Analytics cookies and any associated analytics data are retained for a maximum of six (6) months from the date of collection. After this period, the data is automatically deleted or aggregated so it can no longer be linked to an individual visitor or device.

The Website may also use third-party cookies for traffic analysis and advertising — collected in a way that prevents direct identification of the user. You can delete existing cookies, block new cookies or configure your privacy level via your browser settings. Limiting cookies may affect some Website functionality.