We welcome you to Bambaron, our website at www.bambaron.com and/or our iOS and Android Mobile application (our “Platform”).
In the below Privacy Policy, we inform you about the scope of the processing of your personal data. Bambaron proceeds with all data processing procedures (e.g., collection, processing, and transmission) in accordance with the General Data Protection Regulation (“GDPR”).
Responsible for data processing
Responsible for data processing in accordance with the provisions of the GDPR is:
Bambaron.com
Rrúga Aranit Serbi
Lagjia Lef Sallata
9402, Vlore
Web: www.bambaron.com
E-Mail: info@bambaron.com
General information on data processing
In the course of our business and platform operations, we process data, and this data is generally transferred to our Headquarters in Albania and stored at our privately leased server. However, this also includes disclosure by transmission to third parties and to so-called third countries outside Albania and EEA.
All personal data that we obtain from you via the platform will only be processed for the purposes described in more detail below. This is done within the framework of the respective legal regulations mentioned or only with your consent. In particular, GDPR specify when data processing is permitted. Bambaron collects personal data if:
you have given your consent,
the data is necessary for the fulfillment of a contract / pre-contractual measures,
the data is necessary for the fulfillment of a legal obligation or
the data is necessary to protect the legitimate interests of our company, provided that your interests are not overridden.
Bambaron processes and stores your personal data only for the period of time required to achieve the respective processing purpose or for as long as a legal retention period (in particular Delaware`s commercial and tax law) exists. Once the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.
Processing of Automatically Collected Data
a) Collection of access data and log files
We also collect data on every access to our website. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified. The legal basis for the data processing is our legitimate interest in providing an appealing website.
b) Use of cookies
We think it's important that you have full control over your privacy online and that's why we refrained from placing cookies that are non-essential such as functional and performance cookies. As set out in the EU`s Privacy and Electronic Communications Directive (PECD), we don’t need to obtain consent when we don’t use them, and this is why we don’t need one of these annoying cookie pop ups.
c) Downloading the APP
The APP can be downloaded from the "Google Playstore" a service offered by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, US, if you are resident outside the EU and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland if you are a resident within the EU, or the Apple App service "App Store" a service of Apple Inc., 1 Infinite Loop, Cupertino, CA 95014, US, if you are resident outside the EU and Apple Distribution International Ltd, Hollyhill Industrial Estate, Hollyhill Ln, Knocknaheeney, Cork, Ireland, if you are a resident within the EU, to install our APP. Downloading it may require prior registration with the respective App store and/or installation of the respective App store software.
d) Installing the APP
As far as we are aware, Google collects and processes the following data: License check, network access, network connection, WLAN connections, and location information. However, it cannot be ruled out that Google also transmits the information to a server in a third country. We cannot influence which Personal Data Google processes with your registration and the provision of downloads in the respective App store and App store software. The responsible party in this respect is solely Google as the operator of the Google Play Store.
As far as we are aware, Apple collects and processes the following data: device identifiers, IP addresses, location information, it cannot be excluded that Apple also transmits the information to a server in a third country. This could in particular be Apple Inc. One Apple Park Way, Cupertino, California, USA, 95014. We cannot influence which Personal Data Apple processes with your registration and the provision of downloads in the respective app store and app store software. The responsible party in this respect is solely Apple as the operator of the Apple App Store.
e) Device information
Google and Apple may collect information from and about the device(s) you use to access the APP, including hardware and software information such as IP address, device ID and type, device-specific and APP settings and properties, APP crashes, advertising IDs (AAID), information about your wireless and mobile network connection such as your service provider and signal strength; information about device sensors such as accelerometer, gyroscope, and compass.
f) Firebase
We use the Google Firebase developer platform and related features and services provided by Google LLC and Google Ireland Limited. Google Firebase is a platform for developers of apps for mobile devices. The Google Firebase developer platform offers a variety of features. A list of these features can be found at: https://firebase.google.com/terms/. Firebase's key security and privacy information can be found here: https://firebase.google.com/support/privacy
g) External services and content on our website
We include external services or content on our website. When you use such a service or when third-party content is displayed to you, communication data is exchanged between you and the respective provider for technical reasons.
In addition, the provider of the respective services or content may process your Personal Data for further, own purposes. We have configured services or content from providers who are known to process Personal Data for their own purposes to the best of our knowledge and belief in such a way that either communication for purposes other than the presentation of the content or services on our website does not take place, or communication only takes place when you actively decide to use the service. However, as we have no control over the Personal Data collected by third parties and its processing by them, we cannot provide any binding information on the purpose and scope of the processing of your Personal Data.
For further information on the purpose and scope of the processing of your Personal Data, please refer to the privacy policies of the respective providers responsible under data protection law for the services or content we integrate:
Analytics: Google Analytics by Google LLC
Tag Management: Google Tag Manager and Google Site Tag by Google LLC
Mapping: Google Maps by Google LLC
Remarketing: Facebook Remarketing by Meta Platforms Inc
Advertising: Google Ads by Google LLC
Hosting: Amazon Web Services (AWS)
Data processing when you use our services
a) Contacting us
If you contact us, we process the following data from you for the purpose of processing and handling your request: first name, last name, e-mail address, and, if applicable, other information if you have provided it, and your message. The legal basis for the data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations (Art. 6 para. 1 lit. b GDPR) and/or our overriding legitimate interest in processing your request (Art. 6 para. 1 lit. f GDPR).
We also offer to contact us via the messaging services of WhatsApp. If you contact us via those on the occasion of a specific transaction, we store and use the mobile phone number you use on and - if provided - your first and last name in accordance with the provision of a contractual or pre-contractual measure to process and respond to your request.
b) Profile and account
If you create a user account, you consent to the storage of your account and log-in data (phone number, and password). This allows us to identify you as a user and gives you the opportunity to manage your account, use our services and offers. Within your profile you are able to delete your account at any time. Your data will be processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
Alternatively, you are able to sign up using the convenience log in and sign up from Facebook or Google. For Facebook and Google log in and sign up, you will be asked to provide your basic information (i.e., name, email address, and display picture) linked to your account. If granted, your username and password will be auto generated to fill in the rest of required user data. When registering via Facebook`s and Google`s connect function, you agree to the relevant terms and conditions and consent to certain data from your respective profile of being transferred to us.
c) When using our services
We process the data of our registered users in order to be able to provide our contractual services as well as to ensure the security of our services and to be able to develop it further. The required information is identified as such in the context of the information required for the provision of services and billing as well as contact information.
Unless otherwise specified the purposes of processing are contractual performance and service, contact requests and communication, office and organizational procedures, administration, and response to requests, visit action evaluation, interest-based and behavioral marketing.
Some of the Personal Data you provide may be considered “special” or “sensitive”. This includes Personal Data concerning for example your health, racial or ethnic origins, sexual orientation, and religious beliefs. By choosing to provide this data, you consent to our processing of that data.
You have choices about the Personal Data you upload and share. You don’t have to provide Personal Data; however, Personal Data helps you to get more from our Services. It’s your choice whether to include special category data and to make that special category data public. Please do not upload or add data that you would not want to be available.
The legal basis for the processing of your personal and special category data is the establishment and implementation of the user contract for the use of the service as well as your consent. We store the data until you delete your user account. Insofar as legal retention periods are to be observed, storage also takes place beyond the time of deletion of a user account.
You may withdraw your consent and request us to stop using and/or disclosing your personal and special category data by submitting your request to us in writing to info@bambaron.com.
The legal basis for the data processing is the fulfillment of our contractual obligations (Art. 6 para. 1 lit. b GDPR) and, in individual cases, the fulfillment of our legal obligations (Art. 6 para. 1 lit. c GDPR) as well as your Consent (Art. 6 para. 1 lit. a GDPR).
d) Marketing
Insofar as you have also given us your separate consent to process your data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.
You may give us your consent in a number of ways including by selecting a box on a form where we seek your permission to send you marketing information, or sometimes your consent is implied from your interactions or contractual relationship with us. Where your consent is implied, it is on the basis that you would have a reasonable expectation of receiving a marketing communication based on your interactions or contractual relationship with us.
Direct Marketing generally takes the form of e-mail but may also include other less traditional or emerging channels. These forms of contact will be managed by us, or by our contracted service providers. Every directly addressed marketing sent or made by us or on our behalf will include a means by which you may unsubscribe or opt out.
Duration of data storage
We only store personal data for as long as it is necessary for the purposes for which it is processed or for as long as any consent you have given us has been revoked by you. Insofar as Albania`s statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, irrespective of the processing purposes.
Obligation to provide Personal Data
You are not obliged to provide us with Personal Data. However, depending on the individual case as described above, the provision of certain Personal Data may be necessary for the provision of the services. If you do not provide us with this Personal Data, we may not be able to provide the requested service.
Do Not Sell
We do not sell data to third parties.
Authorisations and Access
We may request permission to store your APP data including your Internet Connection and Network, Camera, Geo Location, Photos and Gallery of your device. The legal basis for data processing is our legitimate interest and the provision of contractual or pre-contractual measures. You can deny access on your device via the Settings/Notifications/ options of your device; however, this means that our APP may not function as intended.
Push messages
When you use the app, you will receive so-called push messages from us, even if you are not currently using the App. These are messages that we send you as part of the performance of the contract. You can adjust or stop receiving push messages at any time via the device settings of your device.
Transfer of personal data
We will not disclose or otherwise distribute your personal data to third parties unless this:
is necessary for the performance of our services,
you have consented to the disclosure,
or the disclosure of data is permitted by relevant legal provisions.
However, we are entitled to outsource the processing of your personal data in whole or in part to external service providers acting as processors within the framework of the GDPR. External service providers support us, for example, in the technical operation and support of the platform, data management, the provision and performance of services, marketing, as well as the implementation and fulfillment of reporting obligations.
The service providers commissioned by us however will process your data exclusively in accordance with our instructions and we remain in accordance with the GDPR responsible for the protection of your data. Doing so we always make sure that service providers commissioned by us are carefully selected, follow strict contractual regulations, technical and organizational measures, and additional controls by us.
We may also disclose Personal Data to third parties if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to fulfill our legitimate interests.
Automated decision-making
Automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR does not take place at Bambaron.
Your data subject rights
Every data subject has:
the right to information according to Art. 15 GDPR,
the right to rectification according to Art. 16 GDPR,
the right to deletion according to Art. 17 GDPR,
the right to restriction of processing pursuant to Art. 18 GDPR, and
the right to data portability under Art. 20 GDPR.
Furthermore, you can revoke consent, in principle with effect for the future.
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). We would, however, appreciate the chance to deal with your concerns before you approach a data protection supervisory authority.
Finally, you also have a right to object according to Art. 21 GDPR. This applies, on grounds relating to data processing on the basis of my legitimate interest and also to profiling.
If you object, we will no longer process your Personal Data unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
We encourage you to contact us if you have any information requests, requests for information or objections about data processing or concerns. However, you also have the right to file a complaint with your local supervisory authority. However, we would appreciate it if you would contact us with your concern before turning to a supervisory authority.
The Supervisory Authority
The competent data protection authority in Albania is:
Information and Data Protection Commissioner
Rr. "Abdi Toptani", Nd. 5,
Kodi postar 1001, Tiranë
E-mail: info@idp.al
Web: www.idp.al
Security
State-of-the-art internet technologies are used to ensure the security of your data. During the online enquiry process, your details are secured with SSL encryption. For secure storage of your data, the systems are protected by firewalls that prevent unauthorized access from outside. In addition, technical and organizational security measures are used to protect the personal data you have provided against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
Updating your information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so within your account or by contacting us using info@bambaron.com.
Access Request
In the event that you wish to make a Data Subject Access Request, you may inform us in writing of the same using info@bambaron.com.
We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the respective legal regulations mentioned above).
Withdraw your consent
You may withdraw your consent and request us to stop using and/or disclosing your Personal Data for any or all purposes by submitting your request to us using info@bambaron.com.
Please note that your withdrawal of consent will not prevent us from exercising our legal rights (including any remedies) or undertaking any steps as we may be entitled to at law.
Changes and updates
We kindly ask you to regularly inform yourself about the content of our Privacy Policy and Privacy Policy. We will amend our Privacy Policy and Privacy Policy as soon as changes to the information processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.
Concerns and Contact
If you have any concerns about a possible compromise of your privacy or misuse of your personal information on our part, or any other questions or comments, you can contact us using info@bambaron.com.
This Privacy Policy was last updated on Thursday, January 19, 2023
Thank you for your interest in this Cookie Policy. You are about to read more about the purposes for which we and our partners use cookies and similar technologies and how you can manage your preferences regarding cookies.
This Cookie Policy applies to www.bambaron.com operated by Bambaron.com of Rruga Aranit Serbi, Lagja Lef Sallata Vlore, Albania Our acting as the data controller in accordance with the Privacy and Electronic Communications Directive (“PECD”) and the General Data Protection Regulation (“GDPR”).
If you have any questions about Cookies or about data protection in general, you can reach us via email using info@bambaron.com.
What cookies are?
On this website we use so-called "cookies". Cookies are small text files that are stored in the memory of your device via your browser. Cookies store certain information (e.g., your preferred language or page settings) which can be sent back to us by your browser when you visit the website again (depending on the lifetime of the cookie).
Which cookies we use?
We distinguish between two categories of cookies:
Essential or Necessary cookies. These cookies are essential or necessary to ensure that a website works properly and is secure so that you can navigate a website and use its features. Without these cookies, certain features of a website would not function, and thus you would not be able to use certain services.
Optional cookies. These cookies are non-essential for the website to function and require your consent. When it comes to optional cookies the following distinctions are made:
Functional cookies or sometimes called convenience cookies. These cookies allow a website to remember the options a user has made (including user ID`s stored, consents given, or languages selected) and other personalization options you have selected when browsing.
Analysis and performance cookies, which are used to monitor and improve the function and service of a website. Those can track down problems when using a website, facilitate online surveys, record visitor numbers, and provide analytics metrics.
Advertising cookies or targeting cookies. They are used to deliver customized advertising to the user. This can be very convenient, but also very irritating.
In the following table we describe the optional cookies used on this website in detail. Please keep in mind that this list may be updated from time to time.
_ga
The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
2 years
Analytics
_gid
Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.
1 day
Analytics
_gat_gtag_UA_185966367_1
Set by Google to distinguish users.
1 minute
Analytics
_fbp
This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website.
3 months
Advertisement
test_cookie
The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies.
15 minutes
Advertisement
__gads
The __gads cookie, set by Google, is stored under DoubleClick domain and tracks the number of times users see an advert, measures the success of the campaign and calculates its revenue. This cookie can only be read from the domain they are set on and will not track any data while browsing through other sites.
1 year 24 days
Analytics
__gpi
Google Ads Service uses this cookie to collect information about from multiple websites for retargeting ads.
1 year 24 days
Advertisement
Google Analytics
We use Google Analytics from Google LLC to evaluate your use of our website, to compile reports on the activities and to provide other services related to the use of our website in order to improve the user experience. When Google Analytics is used, interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies. The following data is processed through the use of Google Analytics:
3 bytes of the IP address of the called system of the website visitor (anonymized IP address),
the website called up,
the website from which the user reached the accessed page of our website (referrer),
the subpages accessed from the website,
the time spent on the website, and
the frequency with which the website is accessed.
Google states that it will not associate your IP address with any other data held by Google. You can prevent the storage of cookies by setting your browser accordingly. You can also prevent the collection of the data generated by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
Facebook Remarketing
On the same legal basis as Google Analytics, we use so-called "Facebook pixels" of the social network Facebook, which is operated by Meta Websites Inc. With the help of the Facebook pixels, it is possible for Facebook to determine the visitors of our website as a target group for the display of advertisements, so-called "Facebook ads".
You can object to the collection by the Facebook pixels and use of your data for the display of Facebook ads. To do so, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads or declare the objection via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/.
Google Ads
Further, we use Google Ads. Google Ads uses so-called "DoubleClick DART Cookies" ("Cookies"). In addition, Google Ads also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as user traffic on our online offer can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your visit to this website will be transmitted to and stored by Google on servers in the United States.
Google uses the information thus obtained to carry out an evaluation of user behavior with regard to the ads. The IP address transmitted by your browser as part of Google Ads will not be merged with other Google data. The information collected by Google may be transferred to third parties where required to do so by law, and/or where such third parties process the information on Google's behalf. The legal basis for this processing is our legitimate interest.
In line with the above, Advertisers and third parties also may collect information about your activity on our website, on devices associated with you, and on third-party sites and applications using tracking technologies. Tracking data collected by these advertisers and third parties is used to decide which ads you see both on our website and on third-party sites and applications.
You can opt out on the Digital Advertising Alliance (DAA) if you wish not to receive targeted advertising. You may also be able to choose to control targeted advertising on other websites and platforms that you visit. In addition, you may also choose to control targeted advertising you receive within applications by using the settings and controls on your devices.
Subject to your consent
We only use optional cookies with your prior consent. If you are visiting our website for the first time, a banner will appear on our website asking for your consent to use optional cookies. If you consent to this, we will store a cookie on your computer and the banner will not be displayed again for the lifetime of the cookie. Thereafter, or if you actively delete this cookie beforehand, the banner will be displayed again the next time you visit our website in order to obtain your consent again.
How to prevent the use of cookies
Of course, you can also use our website entirely without cookies. You can configure the use of cookies in your browser settings by following the for you relevant link Google Chrome, Mozilla Firefox, Flash cookies, Microsoft Internet Explorer and Edge, Opera, Safari at any time or deactivate them completely. However, this may lead to restrictions in the functions or user-friendliness of our offer.
Does this policy change?
We may update our Cookie Policy from time to time. This might be for a number of reasons, such as to reflect a change in the law or to accommodate a change in our business practices and the way we use cookies. We recommend that you check here periodically for any changes to our Cookie Policy. This Cookie Policy was last updated on Thursday, January 19, 2023.
Who should I contact for more information?
If you have any questions or comments about our Cookie Policy or wish to exercise your rights under applicable laws, please contact us.