Last updated: 13 October 2026
1. Who we are
Gramatek (“we”, “us”) supplies building chemicals, construction materials and technical products under the GRAMATEK brand to businesses and customers in Albania. We are based in Tirana, Albania, and operate the website https://gramatek.al. We are the controller of the personal data described in this policy.
This policy explains what personal data we collect, why, on what legal basis, how long we keep it and how you can exercise your rights. It applies to website visitors, people who contact us or write product reviews, and representatives of our customers, distributors and suppliers.
- Location: Tirana, Albania
- Email: info@gramatek.al
- Phone: +355 69 40 31 935
2. Legal framework
We process personal data in accordance with Albanian Law No. 124/2024 “On the Protection of Personal Data”, which is aligned with the EU General Data Protection Regulation (GDPR), and with the guidance of the Albanian Commissioner for the Right to Information and Personal Data Protection. We also comply with Albanian accounting, tax and consumer protection laws.
We follow the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
3. What data we collect
| Category | What it includes | How we get it |
|---|---|---|
| Enquiries and quote requests | Name, email, phone number, company name, your message and project details | When you fill in the contact form, email or call us |
| Product reviews | Your name, email, rating and review text | When you write a review on a product page |
| Customers, distributors and suppliers | Name, position and business contact details of company representatives, delivery addresses, and data needed for orders, contracts and invoicing | When we work with your business |
| Technical data | IP address, browser and device type, date and time of visit, pages visited | Automatically, from our web server |
Reviews are public. Your name, rating and review text are published on the product page. Your email address is never published.
4. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering enquiries, giving technical advice and preparing offers | Steps taken at your request before a contract, or our legitimate interest in replying to enquiries |
| Publishing and moderating product reviews | Your consent, which you give when you submit a review |
| Processing orders, deliveries and payments | Performance of a contract and our legitimate interest in managing business relationships |
| Handling complaints and warranty claims | Performance of a contract and legal obligation under consumer protection law |
| Invoicing, accounting and tax | Legal obligation |
| Running and securing the website, including spam prevention | Our legitimate interest in a working and secure website |
| Defending legal claims | Our legitimate interest |
We do not sell your data, we do not send marketing messages without your consent, we do not use analytics or advertising tracking tools, and we do not make automated decisions that have legal effects on you.
5. Cookies and third-party content
Our website uses only cookies that are necessary for it to work and to keep it secure. If you tick “Save my name, email, and website in this browser” when writing a review, a cookie stores these details on your device for your next review. We do not use analytics, advertising or tracking cookies.
- Google Fonts – fonts may be loaded from Google’s servers, which receive your IP address.
- Gravatar – when you submit a review, an anonymised string created from your email address may be sent to the Gravatar service (Automattic Inc.) to check whether you have a profile picture.
You can block or delete cookies at any time in your browser settings.
6. Who we share data with
- Transport partners – the contact details and delivery address needed to deliver orders.
- Technical providers – our website hosting provider, our web developer Park Studios for website maintenance, and our email service provider. They act only on our instructions.
- Banks, accountants and advisers – under a duty of confidentiality.
- Public authorities – tax authorities, market surveillance authorities, courts and others when the law requires it.
7. International transfers
Some technical providers, such as Google and Automattic, may process data outside Albania, including in the European Union and the United States. Such transfers take place only to countries with an adequate level of protection or with appropriate safeguards such as standard contractual clauses, as required by Law No. 124/2024.
8. How long we keep your data
| Data | Retention period |
|---|---|
| Enquiries that do not lead to an order | 2 years after the last contact |
| Product reviews | For as long as the review is published, or until you ask us to delete it |
| Customer, distributor and supplier contact details | For as long as we work together, and up to 2 years after the last order |
| Orders, invoices and accounting records | 10 years, as required by Albanian accounting law |
| Website server logs | 6 months |
After these periods, data is securely deleted or anonymised.
9. Security
We use appropriate technical and organisational measures to protect your data, including an encrypted connection (HTTPS), restricted access to business records and regular updates of our website software. If a data breach is likely to put your rights at risk, we will notify the Commissioner within 72 hours and, where the risk is high, inform you without undue delay.
10. Your rights
Under Law No. 124/2024 you have the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete data;
- erasure, including deletion of your review, where we are not legally required to keep the data;
- restrict processing in certain cases;
- object to processing based on our legitimate interests;
- data portability for data you gave us under a contract or consent;
- withdraw consent at any time, without affecting earlier processing.
To exercise your rights, email info@gramatek.al with the subject “Personal data request”. We may ask you to confirm your identity. It is free of charge and we will reply within 30 days.
11. Children
Our website is not directed at children under 16, and we do not knowingly collect their data.
12. Complaints and changes
If you believe your data is processed unlawfully, please contact us first so we can resolve it. You also have the right to lodge a complaint with the Albanian supervisory authority:
- Commissioner for the Right to Information and Personal Data Protection
- Address: Rr. “Abdi Toptani”, Nd. 5, Tirana, Albania
- Website: www.idp.al
- Email: info@idp.al
We may update this policy when the law or our practices change. The current version is always published on this page with the date of the last update at the top.