Privacy Policy

1. Data Controller

Union TECH SH.P.K.
Rr. Bau Bajden nr 1666, Tankosiq-Dardani
70000 Ferizaj, Kosovë
Phone: +383 290 310 210
Email: office@uniontechnology.net

2. Data We Collect

2.1 Information you provide directly

• Name, job title, company name
• Email address, phone number
• Project details and requirements submitted via contact forms
• Any correspondence you send to us

2.2 Information collected automatically

• IP address and approximate location
• Browser type, version, and operating system
• Pages visited, time spent, and referral source
• Device identifiers and screen resolution

2.3 Cookies and tracking technologies

We use cookies and similar technologies to improve your browsing experience. See our Cookie Policy for full details.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual necessity — to fulfill a contract with you or take pre-contractual steps at your request
• Legitimate interests — to operate and improve our services, prevent fraud, and communicate with business contacts
• Consent — for marketing communications and optional cookies, where you have given explicit consent
• Legal obligation — to comply with applicable laws and regulations

4. How We Use Your Data

• To respond to inquiries and provide requested services
• To send project updates, proposals, and service-related communications
• To improve website functionality and user experience
• To analyze traffic and usage patterns (using anonymized data)
• To comply with legal and regulatory obligations
• To detect and prevent fraud or unauthorized access

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Data Sharing and Third Parties

We may share your data with trusted third parties strictly to operate our business:

• UnionTECH Mail Server — contact form submissions are processed via our own SMTP server. No data is transmitted to third-party form processors.
• Google LLC — Google Fonts loads typefaces from Google servers, which may log your IP address. See Google Privacy Policy.
• Cloud service providers (e.g., Microsoft Azure, AWS) for hosting and infrastructure
• Legal and compliance advisors when required
• Business partners only with your explicit consent or as part of a contracted engagement

All third-party processors are bound by data processing agreements and GDPR-equivalent safeguards.

6. International Data Transfers

UnionTECH operates globally and may transfer your data to countries outside the European Economic Area (EEA). When we do, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we rely on adequacy decisions where applicable.

7. Data Retention

We retain personal data only as long as necessary for the purposes it was collected, or as required by law:

• Contact form submissions — 3 years after last interaction
• Client project data — duration of contract plus 7 years (legal requirement)
• Analytics data — 26 months (anonymized)
• Email correspondence — 3 years

After the retention period expires, data is securely deleted or anonymized.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data we hold
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — request we limit how we use your data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at office@uniontechnology.net. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include encryption in transit (TLS), access controls, regular security assessments, and ISO 27001-aligned security practices.

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

10. Cookies

We use cookies to enhance your experience on our website. Please refer to our Cookie Policy for detailed information on the types of cookies we use, their purpose, and how to manage your preferences.

11. EU Representative (Art. 27 GDPR)

Union TECH SH.P.K. is established in Kosovo and offers services to individuals in the European Union. In accordance with Article 27 of the GDPR, we are in the process of designating an EU representative. Until that designation is complete, EU residents may exercise their rights directly by contacting us at office@uniontechnology.net. We will respond within the statutory timeframe.

12. Automated Decision-Making

We do not use automated decision-making or profiling as defined under Article 22 of the GDPR. No decisions with legal or similarly significant effects are made about you solely by automated means.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact & Complaints

If you have questions about this Privacy Policy or our data practices, contact us at:
Email: office@uniontechnology.net
Phone: +383 290 310 210

You have the right to lodge a complaint with your local data protection supervisory authority. EU residents may contact the supervisory authority in their member state — for example, the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) in Germany, the CNIL in France, or the ICO in the United Kingdom. A full list of EU supervisory authorities is available at edpb.europa.eu.