Privacy Policy

The data controller responsible for processing your personal data is:

Durana Tech Park
Website: www.duranatechpark.com
Email: [email protected]

We may collect and process the following categories of personal data, depending on how you interact with us:

• Identification data: name, surname
• Contact details: email address, phone number
• Professional data: company name, position, sector, professional profile information you share
• Application data: CVs, cover letters, business proposals, resident applications, supporting documentation
• Communication data: messages submitted via contact forms, email, meetings, or calls
• Event-related data: attendance confirmations, dietary preferences (only if voluntarily shared), feedback forms
• Technical data: IP address, browser type, device information, operating system, referral source, cookies and similar tracking technologies
• Usage data: how you use our website (pages visited, time spent, clicks), where cookies/analytics are enabled

• Forms on our website (e.g., contact forms, residency applications, event registrations)
• Email communications and direct inquiries
• Participation in events, delegations, workshops, and business missions
• Website technologies such as cookies and analytics tools (where applicable)

We process personal data for the following purposes:

• Responding to inquiries submitted through the website or email
• Processing applications for residency, partnerships, programs, or participation in Durana initiatives
• Managing relationships with residents, partners, stakeholders, and service providers
• Organising activities such as events, delegations, workshops, business missions, and investment promotion
• Providing and improving services including one-stop-shop support and operational coordination
• Improving the website (security, performance, content, user experience)
• Compliance and protection: meeting legal obligations, preventing fraud/abuse, enforcing policies, and protecting Durana's rights and operations
• Reporting and accountability: donor/project reporting, internal monitoring, and performance assessment (where applicable)

We process personal data on one or more of the following legal bases under GDPR:

• Consent (e.g., newsletter signup, certain cookies, optional data you voluntarily provide)
• Contract / pre-contractual steps (e.g., processing residency applications, partnership discussions)
• Legal obligations (e.g., accounting, compliance, regulatory requests)
• Legitimate interests (e.g., managing communications, improving services, ensuring security, developing the ecosystem), provided your rights and freedoms do not override these interests

Where processing is based on consent, you may withdraw your consent at any time.

We may share personal data only when necessary and only with appropriate safeguards, including:

• Public institutions and competent authorities where legally required
• Partners and consultants supporting Durana activities (e.g., project delivery, ecosystem initiatives, training)
• Service providers (processors) who support our operations (e.g., website hosting, IT support, email tools, event platforms), under contractual confidentiality and data processing agreements
• EU and international organisations where relevant to project delivery, funding frameworks, or joint initiatives (only to the extent necessary)

Durana Tech Park does not sell personal data.

We do not transfer personal data outside the European Economic Area (EEA) unless appropriate safeguards are in place, such as:

• an adequacy decision, or
• Standard Contractual Clauses (SCCs), or
• other lawful transfer mechanisms recognised under GDPR.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including:

• the duration needed to manage your inquiry or relationship with Durana
• the period required to evaluate applications and maintain records
• legal and regulatory retention requirements
• donor/project reporting obligations (where applicable)

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data (right to be forgotten), where applicable
• Restrict processing in certain cases
• Object to processing based on legitimate interests
• Data portability (receive your data in a structured format), where applicable
• Withdraw consent at any time, where processing is based on consent

If you believe your rights have been violated, you have the right to lodge a complaint with the competent data protection authority in your jurisdiction, or with the relevant Albanian authority, as applicable.

Durana Tech Park uses appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure, including (as appropriate):

• access controls and role-based permissions
• secure hosting and encryption where feasible
• staff confidentiality obligations
• incident management procedures

No system is 100% secure; however, we continuously improve safeguards to reduce risks.

The website may use cookies and similar technologies to:

• enable core functionality
• improve performance and user experience
• understand website usage through analytics (where enabled)

You can manage cookie preferences through your browser settings and (if implemented) the cookie banner/consent tool.

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date.

For questions related to data protection or this Privacy Policy, please contact:

📧 [email protected]
🌐 www.duranatechpark.com