Effective Date: October 2025

Company: Lika Real Estate sh.p.k.
Address: Rruga e Durrësit, Kavajë, Albania
Email: info@likarealestate.com
Jurisdiction: Republic of Albania (GDPR-Compliant)



1. Purpose and Scope


  1. This Data Protection Policy defines how Lika Real Estate ensures the protection and lawful processing of personal data collected through its website and related services.

  2. It applies to all users, agents, clients, employees, contractors, and third-party service providers handling data on behalf of the company.

  3. The policy follows the principles set out in the EU General Data Protection Regulation (GDPR) and applicable national laws.



2. Data Protection Principles


  1. All personal data shall be:

    • Processed lawfully, fairly, and transparently.

    • Collected for specific, explicit, and legitimate purposes.

    • Limited to what is necessary (“data minimization”).

    • Accurate and kept up to date.

    • Stored only as long as necessary.

    • Protected against unauthorized or unlawful access, loss, or destruction.



3. Categories of Data Collected


  1. Lika Real Estate processes:

    • Identification data: name, surname, contact details, and company name (if applicable).

    • User account data: username, password, profile details.

    • Property listing data: text, images, videos, and descriptions uploaded by agents.

    • Technical data: IP address, browser type, operating system, and device information.

    • Communication data: inquiries, chat messages, and contact forms.



4. Legal Basis for Processing


  1. Personal data is processed under one or more of the following lawful bases:

    • Consent of the user (Article 6(1)(a) GDPR).

    • Performance of a contract or pre-contractual steps (Article 6(1)(b)).

    • Compliance with legal obligations (Article 6(1)(c)).

    • Legitimate interests of the company (Article 6(1)(f)).



5. Data Collection and Use


  1. Data is collected directly from users or automatically via cookies and analytics tools.

  2. Information is used for account management, listing publication, internal communication, marketing (if consented), and compliance purposes.

  3. No personal data is sold or shared for commercial gain.



6. Data Storage and Security


  1. Personal data is stored on secure servers located within the European Union or trusted regions with equivalent protection.

  2. Security measures include:

    • SSL encryption for all communications.

    • Access control and authentication for employees.

    • Regular backups and encrypted databases.

    • Malware and intrusion detection systems.

  3. Only authorized personnel with legitimate purpose can access user data.



7. Data Access and User Rights


  1. Every user has the right to:

    • Access their personal data.

    • Correct or update inaccurate data.

    • Request deletion (“right to be forgotten”).

    • Restrict or object to processing.

    • Receive a copy of their data (data portability).

  2. Requests can be made by emailing info@likarealestate.com, and will be addressed within 30 days.



8. Data Sharing and Third Parties


  1. Lika Real Estate may engage verified third-party vendors for hosting, analytics, and IT support.

  2. All third parties operate under data processing agreements ensuring compliance with GDPR.

  3. Data is shared only when necessary and with appropriate confidentiality clauses.

  4. Transfers outside the EEA occur only to countries with adequate data protection or via Standard Contractual Clauses.



9. Data Retention


  1. Personal data will be retained only for as long as necessary to fulfill its purpose.

  2. Deleted accounts are purged within 30 days, with residual backups held securely for up to 90 days.

  3. Business records or invoices may be retained longer if required by law.



10. Data Breach Management


  1. In case of a personal data breach:

    • The incident will be logged and investigated immediately.

    • The Data Protection Officer (DPO) will notify the supervisory authority within 72 hours.

    • Affected users will be informed promptly if the breach poses a risk to their rights or freedoms.



11. Roles and Responsibilities


  1. Management: ensures company-wide compliance with data protection laws.

  2. Employees and contractors: must follow internal data handling procedures and maintain confidentiality.

  3. Third-party processors: must comply with contractual and legal obligations for secure data management.



12. Data Protection Officer (DPO)


  1. The company appoints a Data Protection Officer responsible for overseeing compliance and managing user inquiries:
    DPO Contact: dpo@likarealestate.com (or info@likarealestate.com if no separate DPO).



13. Privacy by Design and Default


  1. Lika Real Estate integrates data protection principles into every stage of product and feature development.

  2. Systems are configured by default to collect the minimum necessary data.

  3. Access to personal data is logged, monitored, and periodically reviewed.



14. Data Transfers and International Use


  1. Users acknowledge that their data may be processed in Albania or other secure international locations.

  2. All cross-border transfers comply with GDPR adequacy decisions or contractual safeguards.



15. Employee Data Protection


  1. Employee and contractor data are handled according to separate internal policies consistent with GDPR.

  2. Access is restricted and used only for payroll, contracts, and HR compliance purposes.



16. Training and Awareness


  1. All staff handling data receive periodic training on GDPR principles and data security best practices.

  2. Regular audits ensure compliance with the policy and evolving legal standards.



17. Accountability and Documentation


  1. Lika Real Estate maintains detailed records of processing activities (Article 30 GDPR).

  2. Evidence of compliance (training logs, breach logs, user requests) is securely stored and available upon legal request.



18. Data Subject Complaints


  1. Users may submit data protection complaints to the company at info@likarealestate.com.

  2. If unresolved, users may contact the Albanian Data Protection Authority or their local supervisory body.



19. Policy Review and Updates


  1. This Policy is reviewed annually or when significant legal or operational changes occur.

  2. Updates will be posted on our website, and users will be notified where appropriate.



20. Enforcement


  1. Any employee or third party found violating this policy may face disciplinary or contractual consequences.

  2. Users who misuse data from the platform may have their accounts terminated.

  3. Lika Real Estate reserves the right to take legal action for misuse or unauthorized access.

  4. Continued use of the website constitutes acceptance of this Data Protection Policy.

Compare