Privacy Notice

Introduction
PRIMA MARINA is committed to protecting your personal data and respecting your privacy.
This privacy policy explains how we collect, use, and protect your data when you use our services, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable data protection laws.

1. Data Controller
The data controller responsible for your data is:
• PRIMA MARINA
• Address: Albania , Vlore Vlora , Rruga Hektor Shyti Porti Vlore
• Email: [email protected]

2. Personal Data We Collect
We collect and process the following types of personal data:
• Identification and Contact Information: Name, surname, phone number, email, date of birth, and valid identification document details.
• Booking Details: Information related to your travel booking, including itinerary, ferry company, and vehicle details.
• Payment Information: Bank account, credit card, and payment details for transaction purposes.
• Communications Data: Any correspondence you have with us, including call center inquiries or emails.

3. Purpose and Legal Basis for Data Processing
We process your personal data for the following purposes, based on the legal grounds provided by the GDPR:
• To Manage Your Booking: This includes processing your ferry ticket reservations, sending you booking confirmations, and ensuring communication with the ferry operator. This processing is necessary for the performance of a contract (Art. 6(1 (b) GDPR).
• Payment and Billing: To handle payments securely and issue invoices, we share your payment information with third-party payment processors (e.g., banks, PayPal). This is also necessary for contractual performance (Art. 6(1)(b) GDPR).
• Legal Obligations: We may process and store your data to comply with legal and tax regulations, such as maintaining billing records for 10 years. This is necessary for compliance with legal obligations (Art. 6(1)(c) GDPR).
• Customer Service and Complaint Handling: To manage any complaints, refunds, or disputes related to your booking. This is based on legitimate interest (Art. 6(1)(f) GDPR).
• Marketing Communications: With your explicit consent, we may send you newsletters and promotional offers. You can opt out at any time by clicking the “unsubscribe” link in our emails (Art. 6(1)(a) GDPR).

4. How We Process Your Data
Your data is processed using secure IT systems and physical measures to ensure confidentiality. We collect personal data through:
• Website Forms: When you complete booking forms or subscribe to newsletters.
• Call Center: When you contact us by phone for booking or inquiries.
• Third-Party Platforms: When you make payments through third-party services like PayPal or bank transfers.

5. Data Sharing
Your data is shared with:
• Ferry Operators: To complete your travel booking.
• Payment Processors: Such as banks or financial institutions to process payments securely.
• Public Authorities: When required by law (e.g., customs or port authorities). We do not sell or transfer your personal data to third parties for marketing purposes without your explicit consent.

6. Data Transfers Outside the EU
We aim to store your data on servers located within the European Union. If your data needs to be transferred outside the EU for operational purposes (e.g., server hosting), we ensure adequate protection by using EU-approved standard contractual clauses or other lawful mechanisms.

7. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy. Booking information is retained for 3 years after your last interaction, or longer if required for legal and regulatory purposes.

8. Your Rights
Under GDPR, you have the following rights:
• Right of Access: You can request information about the data we hold on you.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you can request correction.
• Right to Erasure: You can request the deletion of your personal data where it's no longer necessary or where you have withdrawn consent.
• Right to Object: You can object to the processing of your data under specific circumstances.
• Right to Data Portability: You can request that your data be transferred to you or another service provider.
• Right to Withdraw Consent: If we rely on your consent to process data, you can withdraw it at any time without affecting the legality of the processing before withdrawal. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Security of Your Data
We implement appropriate security measures to protect your data from unauthorized access, accidental loss, or destruction. These measures include encryption (e.g., SSL technology) and secure server locations.

10. Cookies
We use cookies on our website to personalize your experience and improve functionality. You can adjust your browser settings to block cookies or alert you when cookies are being used. For more details, please review our Cookies Policy.

11. Changes to this Privacy Policy
We may update this privacy policy from time to time to reflect changes in legal requirements or our processing practices. Any significant changes will be communicated through our website or via email.

12. Contact Information
If you have any questions or concerns regarding this privacy policy or your data, please contact us at:
• PRIMA MARINA
• Address: Albania , Vlore Vlora , Rruga Hektor Shyti Porti Vlore
• Email: [email protected] You also have the right to file a complaint with the relevant data protection authority.