Privacy Policy

Last updated: 13 October 2026

1. Who we are

Terra Park (“we”, “us”) is an industrial and logistics park in Valias, Kamëz, Tirana, near Tirana International Airport, offering industrial, warehouse, showroom and commercial units for rent. We operate the website https://terrapark.al and are the controller of the personal data described in this policy.

This policy explains what personal data we collect, why, on what legal basis, how long we keep it and how you can exercise your rights. It applies to website visitors, people who contact us, representatives of businesses interested in or renting space at the park, and visitors to the park.

2. Legal framework

We process personal data in accordance with Albanian Law No. 124/2024 “On the Protection of Personal Data”, which is aligned with the EU General Data Protection Regulation (GDPR), and with the guidance of the Albanian Commissioner for the Right to Information and Personal Data Protection. We also comply with Albanian accounting and tax laws.

We follow the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

3. What data we collect

CategoryWhat it includesHow we get it
EnquiriesName, email, phone number, company name, your message and details of the space you are looking forWhen you fill in the contact form, email or call us
Tenants and business partnersName, position and contact details of company representatives, company details, data needed for lease contracts and invoicingWhen a business rents space or works with us
Security camera footageImages of people and vehicles in monitored areas of the parkFrom security cameras on the premises (see section 5)
Technical dataIP address, browser and device type, date and time of visit, pages visitedAutomatically, from our web server

4. Why we use your data and on what legal basis

PurposeLegal basis
Answering enquiries and preparing offersSteps taken at your request before a contract, or our legitimate interest in replying to enquiries
Preparing and managing lease contracts with tenantsPerformance of a contract and our legitimate interest in managing our business relationships
Invoicing, accounting and taxLegal obligation
Security of the park, tenants, visitors and property (CCTV)Our legitimate interest in safety and crime prevention
Running and securing the websiteOur legitimate interest in a working and secure website
Defending legal claimsOur legitimate interest

We do not sell your data, we do not send marketing messages without your consent, we do not use analytics or advertising tracking tools, and we do not make automated decisions that have legal effects on you.

5. Security cameras

Terra Park is monitored 24/7 by security cameras in common areas such as entrances, roads, parking areas and building exteriors, to protect tenants, visitors and property. Monitored areas are marked with signs. Cameras do not cover the inside of rented units, toilets or other private areas.

Footage is accessed only by authorised security staff and is kept for up to 30 days, unless needed to investigate a specific incident. It is shared only with the police or courts when required by law, or with a tenant when needed to investigate an incident that affects them.

6. Cookies and third-party content

Our website uses only cookies that are necessary for it to work, to remember your language choice and to keep it secure. We do not use analytics, advertising or tracking cookies.

  • Google Fonts – fonts may be loaded from Google’s servers, which receive your IP address.
  • Google Maps, Facebook and Instagram – our address and social media icons are simple links. Google or Meta receive data only if you click them.
  • Videos – if a video on our website is hosted by a third party such as YouTube or Vimeo, that provider may receive your IP address and set cookies when you play it.

You can block or delete cookies at any time in your browser settings.

7. Who we share data with

  • Security and facility management providers – where they help us operate the park, only on our instructions.
  • Technical providers – our website hosting provider, our web developer Park Studios for website maintenance, and our email service provider. They act only on our instructions.
  • Banks, accountants and legal advisers – under a duty of confidentiality.
  • Public authorities – police, tax authorities, courts and others when the law requires it.

8. International transfers

Some technical providers, such as Google, may process data outside Albania, including in the European Union and the United States. Such transfers take place only to countries with an adequate level of protection or with appropriate safeguards such as standard contractual clauses, as required by Law No. 124/2024.

9. How long we keep your data

DataRetention period
Enquiries that do not lead to a contract2 years after the last contact
Lease contracts and tenant recordsFor the duration of the contract and as long as needed for any claims afterwards
Invoices and accounting records10 years, as required by Albanian accounting law
Security camera footageUp to 30 days, unless needed for a specific incident
Website server logs6 months

After these periods, data is securely deleted or anonymised.

10. Security

We use appropriate technical and organisational measures to protect your data, including an encrypted connection (HTTPS), restricted access to camera footage and business records, and regular updates of our website software. If a data breach is likely to put your rights at risk, we will notify the Commissioner within 72 hours and, where the risk is high, inform you without undue delay.

11. Your rights

Under Law No. 124/2024 you have the right to:

  • access your personal data and receive a copy;
  • correct inaccurate or incomplete data;
  • erasure, where we no longer need the data and are not legally required to keep it;
  • restrict processing in certain cases;
  • object to processing based on our legitimate interests;
  • data portability for data you gave us under a contract or consent;
  • withdraw consent at any time, without affecting earlier processing.

To exercise your rights, email info@terrapark.al with the subject “Personal data request”. We may ask you to confirm your identity. It is free of charge and we will reply within 30 days.

12. Children

Our website is not directed at children under 16, and we do not knowingly collect their data.

13. Complaints and changes

If you believe your data is processed unlawfully, please contact us first so we can resolve it. You also have the right to lodge a complaint with the Albanian supervisory authority:

  • Commissioner for the Right to Information and Personal Data Protection
  • Address: Rr. “Abdi Toptani”, Nd. 5, Tirana, Albania
  • Website: www.idp.al
  • Email: info@idp.al

We may update this policy when the law or our practices change. The current version is always published on this page with the date of the last update at the top.