Privacy Policy

1. Principles of personal data processing and website operation

1. The website available at mhconsulting.al (hereinafter referred to as “the Website”) is managed by MH Consulting, with its registered office at Rr. Kavajes. As the Website operator, we also act as the Data Controller.
2. For matters related to the Website operation and personal data processing, please contact us at: support@mhconsulting.al.
3. All personal data processed within the Website is treated with the utmost care and in accordance with applicable laws. Information you voluntarily provide is used for strictly defined purposes, such as:
   • Enabling interaction through the comment system,
   • Efficient handling of inquiries submitted via contact forms,
   • Presentation of current offers and relevant information.
4. Data collection about users and their activity on the Website is conducted (i) through information you consciously and voluntarily enter in forms and (ii) through cookies stored on users’ end devices.

2. Data protection mechanisms

To ensure the security of your personal data we have implemented advanced technical and organizational solutions, based on two key pillars:

1. Data transmission encryption. All areas of the Website where personal data is entered or login occurs are secured using the SSL protocol. Information is encrypted before leaving the user’s device and decrypted only on our destination server, eliminating the risk of interception during transmission.
2. Continuous improvement of IT infrastructure. We follow a systematic update policy covering all software components used in personal data processing, allowing rapid response to emerging threats and vulnerabilities.

3. Technical infrastructure and system data collection

We work with a professional hosting service provider to ensure stable and secure operation of the Website. As part of standard procedures, our hosting partner conducts detailed activity logging at server level. This may include URLs of resources accessed, timestamps of requests and responses, client identifiers, error reports, referrer URLs, browser characteristics, IP addresses, diagnostic data on registration and service ordering, and metadata of electronic correspondence handled by our systems.

4. User rights and principles of personal data processing

4.1 Sharing of personal data

Where necessary to perform a contract, comply with legal obligations or protect our legitimate interests, we may transfer personal data to selected external entities such as hosting service providers, comment system providers and marketing service companies, always under a data processing agreement.

4.2 Data retention period

Personal data is stored for the period necessary to achieve specific purposes. Marketing data is processed until consent is withdrawn; data necessary for contract execution is kept for the duration of the contract and the time required by law. The standard retention period may be 3 years unless otherwise specified.

4.3 User rights

• Right of access to data,
• Right to rectification of data,
• Right to erasure of data,
• Right to restriction of processing,
• Right to data portability,
• Right to object to processing, especially for marketing purposes.

4.4 Voluntary provision of data

Providing personal data is voluntary, but in some cases necessary to use certain features such as contact forms. Refusing to provide data may prevent the use of full Website functionality.

4.5 Withdrawal of consent

You may withdraw consent at any time by emailing support@mhconsulting.al. Withdrawal does not affect the lawfulness of processing before withdrawal. We will confirm receipt within 7 business days, delete the data from our systems and inform external entities to which it was previously transferred.

5. Collection and processing of data from forms

We may record technical parameters of the connection (timestamp, IP address) for administrative and analytical purposes. Information submitted through forms is processed for clearly defined purposes — handling service requests, business contact, service registration or other purposes specified in the form’s context — and is treated as confidential under applicable data protection regulations.

6. Cookie usage policy

Cookies are small text files stored on your device while browsing. We use strictly necessary cookies to remember your cookie preference, and analytics cookies to understand how visitors use the Website. We do not use cookies to collect directly identifiable personal data such as your name or email address without your explicit input.

Analytics cookies and any associated analytics data are retained for a maximum of six (6) months from the date of collection. After this period, the data is automatically deleted or aggregated so it can no longer be linked to an individual visitor or device.

The Website may also use third-party cookies for traffic analysis and advertising — collected in a way that prevents direct identification of the user. You can delete existing cookies, block new cookies or configure your privacy level via your browser settings. Limiting cookies may affect some Website functionality.