ALBTIMERPrivacy policy
1. Who we are and how to contact us
Albtimer is the name provided for the business operating in Albania. Business registration details, NIPT/NUIS and the registered address are pending and will be added after registration. For support and privacy requests, contact support@albtimer.com.
2. Scope and purposes
ALBTIMER is a workforce-management platform for Albanian businesses. Account and employment information is processed to provide access to the service, organise employee records and documents, record attendance, calculate working hours and payroll, administer leave, manage billing and respond to requests. This notice distinguishes the marketing website from the application.
3. Information processed
Depending on the account and employment records entered, the application stores first and last name, telephone number, email, age, bank IBAN, employment seniority, professional grade, identity card or passport documents, payment-related information, employment record books and other work-related documentation. It also stores clock-in and clock-out records, hours worked and information used for leave and payroll calculations. Documents should be limited to what is necessary for employment-related purposes.
4. Location, biometrics and uploaded documents
Current live location tracking and biometric features are not active. Attendance records are used to calculate time and work-related entitlements; they are not described as live location tracking. Uploaded employment documents may contain a home address or workplace address. The exact handling of sensitive information within uploaded documents remains to be documented.
5. Employers, employees and responsibilities
Owners and managers enter and manage employee records and create employee accounts. Employers are responsible for the lawfulness, relevance and use of information they upload or export. The precise controller/processor roles and lawful bases must be documented in the final service and data-processing agreements. This allocation does not remove ALBTIMER’s obligations under applicable data-protection law.
6. Hosting, email and payments
The application servers are hosted with Hetzner in Germany; Hetzner is also used for domain services. Resend is the selected email provider, with its integration to be completed by the owner. Stripe is the selected payment processor. Providers process information needed for their services; this is not a claim that no third party ever processes data. The exact Stripe integration and the payment metadata retained by ALBTIMER still require verification. This marketing website does not itself collect card details.
7. Processing locations and provider agreements
Hosting the application in Germany does not establish that every provider processes all information only in Germany or the European Union. Applicable provider agreements, subprocessors, international transfers and safeguards must be checked for Hetzner, Resend and Stripe before final publication. This draft does not claim that those agreements have already been concluded.
8. Account deletion and retention
Application account data is deleted when the user deletes the account. The same trigger applies to accounts with 4 or fewer employees. Merely remaining below the paid threshold does not delete data. Account deletion also ends the associated subscription. Records that must be retained by law are treated separately. The exact operational deletion time, legally required records and retention periods, and the technical backup expiry schedule remain to be confirmed. A technical backup is not automatically a legally required archive.
9. Copies outside ALBTIMER
When an employer downloads, photographs or otherwise copies employee information outside the service, those copies are outside ALBTIMER’s technical control. Deleting data on the server cannot erase those copies. The employer remains responsible for its own handling of them; this does not exclude responsibility imposed on ALBTIMER by applicable law.
10. Security
The company develops its own code and uses open-source software. Software origin alone is not evidence of a particular security level. Access controls, encryption, password protection, backup handling, update processes and incident procedures have not been technically verified in this website project; this draft does not assert that specific controls are implemented.
11. Rights and requests
Send privacy requests to support@albtimer.com. Depending on the applicable law and processing context, requests may concern access, correction, erasure, restriction, portability or objection. Employee requests may need to be coordinated with the employer responsible for the employment records. Necessary identity verification should be proportionate to the request. Statutory rights, exceptions and complaint options remain governed by applicable law. The final notice must specify the relevant legal bases and authority.
12. Marketing website and support
The authored marketing website has no analytics or advertising trackers and does not store a language preference in cookies or browser storage. The current support form prepares an email in the visitor’s email application; the visitor must send it. When sent, the message contains the company name, person’s name, email and message entered. Automatic Resend sending is not enabled in this preview. The private preview host may separately process access information.