Privacy Policy

This Privacy Policy explains how Armundia Factory sh.p.k. (hereinafter “Armundia Factory”, “we” or the “Controller”) processes personal data, in accordance with Law no. 124/2024 “On the protection of personal data”. It focuses on data processed in connection with the website www.armundiafactory.com, which is informational in nature and does not collect data through forms, registrations, newsletters or online applications. This Policy also summarises the other categories of processing carried out by Armundia Factory; the relevant data subjects are informed separately through specific privacy notices. This text is a summary; for any additional information you may contact us.

1. Data Controller

The controller of the personal data processed in connection with this website is:

Item Details
Name
Armundia Factory sh.p.k.
NUIS
L51511004F
Address
Bulevardi “Gjergj Fishta”, Nr. 146, Staircase 2, Ap. 8, Tirana, Albania
Email
info@armundiafactory.com
Phone
+355 (0) 44 803 939

2. Data Protection Officer (DPO)

Armundia Factory has voluntarily appointed, pursuant to Article 33(3) of Law no. 124/2024, a two-tier DPO structure, notified to the Commissioner for the Right to Information and Protection of Personal Data pursuant to Article 34(3). For any question or request regarding the processing of your data, you may contact:

Role Name Contact
Group DPO
Avv. Paolo Todaro
paolo.todaro@armundia.com
Local contact point (Albania)
Av. Orjon Nallbati — ITAKA7 sh.p.k.
orjon.nallbati@itaka7.com | +355 69 331 4640

3. What Data the Website Processes, Why and on What Legal Basis

The website contains no forms and requires no registration. The only data processed directly through the website are technical data, necessary for its functioning and security:
Activity Data Legal basis Retention
Website functioning and security (technical server logs)
IP address, URLs of requested resources, date/time of the request, HTTP method, response status code, browser/operating system parameters
Legitimate interest in the security and functioning of the website
Up to 6 months (security standard)
Technical cookies (always active)
Session identifier, technical preferences
Technical necessity for providing the requested service
As per the Cookie Policy

The website uses ONLY technical cookies, necessary for its functioning and security. It does NOT use profiling, statistical or marketing cookies and does NOT install third-party cookies. For this reason, no prior consent is required for the cookies used. The website is not intended for minors under 16 and we do not carry out automated decision-making producing legal effects on you.

4. Voluntary Communication with Us

The website publishes email addresses and telephone numbers. If you choose to contact us, we process only the data you yourself provide, for the purpose for which you write to us:

Channel Purpose Legal basis Retention
info@armundiafactory.com (and phone)
Responding to enquiries and arranging meetings/demos
Pre-contractual measures at the data subject’s request / legitimate interest
Until the enquiry is resolved and up to 12 months after the last contact
talent@armundiafactory.com
Reviewing spontaneously submitted applications/CVs
Pre-contractual measures; consent for retention beyond the process
Spontaneous applications: 12 months. Non-selected candidates: 6 months (without consent) / 24 months (with consent). If hired, transferred to the

Email communication does not pass through the website, but through your and our email service provider. Please do not send us special categories of data (e.g. health data) unless strictly necessary.

5. Other Processing by Armundia Factory

In addition to website-related processing, Armundia Factory also processes personal data in the course of its activity, for the following categories of data subjects. These data subjects are informed directly, at the time of collection, through specific privacy notices, in accordance with Articles 18 and 19 of Law no. 124/2024:

Category of data subjects Main purpose How they are informed
Employees
Management of the employment relationship
Specific notice for employees, at the start of employment
Job candidates
Recruitment process
Specific notice for candidates, during application
Clients and business partners
Performance of contractual relationships and services
Notice and/or privacy clauses in the contract
Suppliers / service providers
Management of the supply relationship
Notice and/or clauses in the contract

Full details for each category (data categories, legal bases, retention periods) are provided in the specific notice made available to the relevant data subject. For copies or clarifications, you may contact us at the addresses above..

6. Data Recipients

The data you voluntarily send us may be made accessible, only to the extent necessary, to the following categories of recipients:

  • Authorised personnel of Armundia Factory, bound by confidentiality;
  • Amazon Web Services (AWS), as provider of the website’s cloud/hosting infrastructure, bound by a processing agreement pursuant to Article 26 of Law no. 124/2024;
  • Where relevant, companies of the Armundia Group, for handling your request;
  • Public authorities, where required by law or by court order.
We do not sell your personal data and do not use it for purposes incompatible with those declared here.

7. Transfer of Data Outside Albania

The website infrastructure is provided by Amazon Web Services (AWS). Where data is stored or processed in AWS regions outside the Republic of Albania, and where data sent by email is made accessible to companies of the Armundia Group based in Italy (an EU country with an adequate level of protection), the transfer is based on lawful grounds under Law no. 124/2024, including standard contractual clauses (SCC) or other approved mechanisms. For information on the safeguards applied and the storage region, you may contact us at the addresses above.

8. Links to Other Websites

Our website may contain links to other websites (e.g. our LinkedIn profile). This Policy does not extend to those websites; we recommend reading the privacy policy of each website you visit through such links.

9. Your Rights

Under Law no. 124/2024, you have the following rights:

  • The right to information and access to your data;
  • The right to rectification of inaccurate or incomplete data;
  • The right to erasure (“right to be forgotten”), where the legal conditions are met;
  • The right to restriction of processing;
  • The right to object to processing;
  • The right to data portability;
  • The right to withdraw consent at any time, where processing is based on consent;
  • The right to lodge a complaint with the Commissioner.

10. How to Exercise Your Rights

To exercise any right, you may write to us at info@armundiafactory.com, contact the local contact point (orjon.nallbati@itaka7.com) or the Group DPO (paolo.todaro@armundia.com). We respond to the request within the time limits set by Law no. 124/2024. For security reasons, we may ask you to verify your identity before acting on the request.

11. Data Security

Armundia Factory implements appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, in accordance with Article 28 of Law no. 124/2024.

12. Right to Complain

If you believe that the processing of your data infringes Law no. 124/2024, you have the right to lodge a complaint with the supervisory authority:

Item Details
Authority
Commissioner for the Right to Information and Protection of Personal Data
Address
Rr. “Abdi Toptani”, Nr. 5, Tirana
Email
info@idp.al
Website
www.idp.al
Phone
+355 4 2237200

13. Changes to This Policy

The version in force is always the one published on the website, with the date indicated below. We recommend consulting it periodically.
Last updated: 15 June 2026 — Version 2.0