GDPR
Effective Date: 10/04/2026
Welcome to Saranda Express – Burdeni. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable local laws.
1. Data Controller Saranda Express – Burdeni is the Data Controller responsible for your personal data. Address: Rruga L. Talo, Agjensia Tradicionale Autobuzave. Sarande, Albania Email:info@saranda-express.com
2. Information We Collect and Legal Basis for Processing Under the GDPR, we must have a legal basis to process your data. We collect:
- Identity & Contact Data: Name, email, phone number. Legal basis: Performance of a contract (booking a ticket).
- Travel & Border Data: Passport/ID details required for the Greece-Albania border. Legal basis: Compliance with a legal obligation.
- Financial Data: Payment details (processed securely via third-party providers). Legal basis: Performance of a contract.
- Technical Data: IP address, browser type. Legal basis: Legitimate interest (keeping our website secure and functional).
3. How We Share Your Data We do not sell your data. We only share data with:
- Border Authorities: Greek and Albanian customs and border control, as required by law.
- Service Providers: Secure payment gateways and website hosting platforms.
4. Data Retention We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or border-control reporting requirements.
5. Your GDPR Rights If you are located in the European Economic Area (EEA), you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your personal data (the “right to be forgotten”), subject to legal obligations.
- Restrict or Object to our processing of your data.
- Data Portability: Request transfer of your data to another party.
To exercise these rights, please email us at info@saranda-express.com. You also have the right to file a complaint with the Albanian Data Protection Authority (ADPA) if you believe your rights are violated.
