Privacy Policy

Effective date: 17 January 2026  ·  Applies to: www.medaurbybeefhouse.com

1. Who We Are

The data controller responsible for your personal data is:

• Business name: Medaur By Beef House
• Address: Green Coast Resort, Palasë, Himarë, Albania
• Email: reservations@medaurbybeefhouse.com
• Phone: 069 604 9999

If you have any questions about how we handle your data, please contact us at the email address above.

2. What Data We Collect

We only collect data that you provide to us directly through our reservation form. This includes:

• First name and last name
• Email address
• Phone number (optional)
• Preferred date and time of visit
• Number of guests
• Occasion (optional)
• Special requests, dietary requirements or allergies (optional)

We do not collect payment information, create user accounts, or track your behaviour on our website through analytics tools.

3. How We Collect It

We collect your data exclusively through the reservation form on our Contact page. This form is processed by FormSubmit (formsubmit.co), a third-party form submission service, which forwards your submission to our email address. FormSubmit acts as a data processor on our behalf. You can review FormSubmit's privacy practices at formsubmit.co/privacy.pdf.

4. Why We Collect It — Legal Basis

We process your personal data on the following legal bases under Albanian Law No. 124/2024:

Performance of a contract (pre-contractual steps)

Your name, contact details, date, time and guest count are necessary to process and confirm your table reservation. Without this information we cannot fulfil your request.

Legitimate interests

Optional information such as your occasion or special requests helps us provide a better dining experience. We process this on the basis of our legitimate interest in delivering quality, personalised service.

Legal compliance

We may retain certain records where required to do so by Albanian law.

5. How Long We Keep Your Data

• Reservation data is kept for 12 months from the date of your visit or, if you cancel, from the date of cancellation.
• After this period, your personal data is permanently deleted from our systems.
• If you contact us by email outside of a reservation, we retain that correspondence for 6 months unless a longer retention is required by law.

6. Who We Share Your Data With

We do not sell, rent or trade your personal data. We share it only with:

• FormSubmit — to deliver your reservation request to our email inbox (data processor).
• Our internal team — restaurant staff who manage reservations.

We do not share your data with any advertising networks, social media platforms, or other third parties.

7. Third-Party Services on This Website

Our website loads resources from the following third-party services, which may set technical cookies or access limited technical data (such as your IP address) to serve their content:

• Google Fonts — to display typography (fonts.googleapis.com)
• jsDelivr CDN — to serve Bootstrap CSS/JS (cdn.jsdelivr.net)
• cdnjs (Cloudflare) — to serve Font Awesome icons and carousel library
• Heyzine — our digital menu flipbook (heyzine.com)

These services operate under their own privacy policies. We do not use Google Analytics or any other behavioural tracking or advertising tools.

8. Cookies

Our website uses only essential technical cookies necessary for the site to function correctly. We do not use advertising, tracking or analytics cookies. Please see our Cookie Policy for full details.

9. Your Rights

Under Albanian Law No. 124/2024, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your data where there is no longer a valid legal basis for us to hold it.
• Right to restriction — you can ask us to limit how we use your data.
• Right to object — you can object to processing based on legitimate interests.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at reservations@medaurbybeefhouse.com. We will respond within 30 days.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Reservation data is accessed only by staff who need it to manage your booking.

11. Supervisory Authority

If you believe we have not handled your data correctly, you have the right to lodge a complaint with Albania's data protection authority:

• Commissioner for the Right to Information and Protection of Personal Data (IDPC)
• Website: www.idp.al
• Address: Blvd. "Gjergj Fishta", Nr. 44, Kulla 1, Tirana, Albania

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this page periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, contact us at:
reservations@medaurbybeefhouse.com
069 604 9999