Privacy Policy

Grand Hotel & Spa Tirana
Last updated: [22/12/2025]

Grand Hotel & Spa Tirana (“Hotel”, “we”, “our”, or “us”) respects and protects the personal data of its guests, website visitors, and business partners, in accordance with Law No. 9887/2008 “On Personal Data Protection”, as amended, and applicable secondary legislation of the Republic of Albania.

This Privacy Policy explains how personal data is collected, processed, stored, and protected when you use our website or services.

1. Data Controller

In accordance with Albanian law, the Data Controller is:

Grand Hotel & Spa Tirana
Adress: Rruga Ismail Qemali
Email: info@grandhoteltirana.com
Phone: +355 69 609 5399
Tirana,1001, Albania

2. Legal Framework

The processing of personal data is carried out in compliance with:

  • Law No. 9887, dated 10.03.2008 “On Personal Data Protection”, as amended

  • Decisions and instructions of the Commissioner for the Right to Information and Protection of Personal Data (IDP)

  • Other applicable Albanian legal acts

Where applicable, GDPR principles are also applied as best practice.

3. Categories of Personal Data

We may process the following categories of personal data:

  • Identification data (name, surname)

  • Contact details (email address, telephone number)

  • Reservation and accommodation details

  • Billing and payment-related data (processed securely through authorized providers)

  • Communication data (requests, inquiries, feedback)

  • Technical data (IP address, browser type, access logs)

  • Cookie and website usage data

4. Methods of Data Collection

Personal data is collected when you:

  • Make a reservation or accommodation request

  • Complete forms on our website

  • Communicate with us by phone, email, or online forms

  • Use our website, through cookies and technical tools

5. Purpose of Processing

Personal data is processed for the following lawful purposes:

  • Reservation management and guest accommodation

  • Customer communication and service delivery

  • Payment processing and invoicing

  • Fulfillment of legal obligations under Albanian law (e.g., reporting to authorities)

  • Website administration and service improvement

  • Marketing and promotional communication (only with prior consent)

6. Legal Basis for Processing

According to Article 6 of Law No. 9887, personal data is processed based on:

  • Fulfillment of a contractual relationship

  • Compliance with legal obligations

  • Legitimate interest of the Hotel

  • Explicit consent of the data subject, where required

7. Data Disclosure and Transfers

Personal data may be disclosed only to:

  • Authorized hotel staff

  • Contracted service providers (IT services, booking platforms, payment processors)

  • Public authorities when required by Albanian law

The Hotel does not sell or unlawfully disclose personal data. Any data transfer outside Albania is carried out only in compliance with applicable legal safeguards.

8. Data Retention

Personal data is stored only for the period necessary to fulfill the purposes for which it was collected and in accordance with Albanian legal requirements.

9. Data Security Measures

The Hotel applies appropriate technical and organizational measures to ensure data confidentiality, integrity, and availability, protecting personal data from unauthorized access, loss, alteration, or misuse.

10. Rights of the Data Subject

In accordance with Albanian law, you have the right to:

  • Request information about your personal data

  • Access and correct inaccurate data

  • Request deletion or restriction of processing, when legally permitted

  • Object to unlawful processing

  • Withdraw consent at any time (where consent is the legal basis)

  • File a complaint with the Commissioner for the Right to Information and Protection of Personal Data

Requests may be sent to: info@grandhoteltirana.com

11. Cookies

The Hotel website uses cookies to improve functionality and user experience. Cookies may be managed or disabled through browser settings. Additional information may be provided in a separate Cookie Policy, if applicable.

12. Third-Party Websites

Our website may contain links to third-party websites. The Hotel is not responsible for the privacy practices or content of external websites.

13. Changes to This Privacy Policy

This Privacy Policy may be updated periodically. Any changes will be published on this page with an updated revision date.

14. Contact Information

For any questions regarding this Privacy Policy or personal data processing, please contact:

Grand Hotel & Spa Tirana
Email: info@grandhoteltirana.com
Phone: +355 69 609 5399
Address: Rruga Ismail Qemali, 1001, Tirana, Albania

Close