How we handle your information
This policy explains what information AGOG Marketing collects through this website, why we use it, who it is shared with and the rights you have over it.
Effective from 1 August 2026
1. Who we are
AGOG Marketing is a digital marketing agency established in Tirana, Albania, in 2016. We provide marketing strategy, social media and content, search engine optimisation, paid advertising, email marketing and website development.
For the purposes of the General Data Protection Regulation (EU) 2016/679 and Albanian Law no. 9887 on the Protection of Personal Data, AGOG Marketing is the data controller for the personal information described in this policy. Where we handle personal data on behalf of a client as part of a marketing engagement, we act as a data processor under that client’s instructions, governed by the agreement signed with them, and that client’s own privacy notice applies to those individuals.
2. Information we collect
This website has no registration, no login area, no online payment and no contact form. We therefore collect very little.
Information you give us
If you choose to email us or start a WhatsApp conversation using the links on this site, we receive whatever you send: typically your name, your email address or phone number, your company, and the content of your message. You decide what to include.
Information collected automatically
Our hosting provider records standard server logs when a page is requested. These normally include the IP address, the date and time, the page requested, the referring page, and basic browser and device information. They are used to deliver the site, to keep it secure and to diagnose faults.
Information we do not collect
- We do not run advertising or tracking pixels on this site.
- We do not build visitor profiles and we do not carry out automated decision making or profiling that produces legal effects.
- We do not ask for special category data such as health, religion, political opinions or biometric data, and you should not send it to us.
3. Why we use it and our legal basis
| Purpose | Information | Legal basis |
|---|---|---|
| Replying to your enquiry and discussing possible work | Your contact details and message | Steps taken at your request before entering a contract, and our legitimate interest in responding to enquiries |
| Providing and administering agreed services | Contact and business details | Performance of a contract |
| Operating, securing and troubleshooting this website | Server log data | Our legitimate interest in a secure and functioning website |
| Meeting accounting, tax and other legal obligations | Transaction and correspondence records | Compliance with a legal obligation |
4. Third party services used on this site
To keep this site fast and to show live content, some elements are loaded from other companies. When your browser loads them, it necessarily reveals your IP address to those providers, who may process it under their own privacy policies. We do not control that processing. The services in use are:
| Service | Purpose on this site | What it may receive |
|---|---|---|
| Google Fonts (Google Ireland Limited) | Delivers the typeface used across the site | IP address and technical request data |
| LightWidget | Displays our public Instagram feed | IP address and technical request data; interactions inside the feed are governed by Instagram |
| Content delivery proxies | Retrieve public marketing news headlines shown in the Insights section | IP address and technical request data |
| Our hosting provider | Serves the website and keeps security logs | Server log data as described above |
The site also links out to LinkedIn, Instagram, Facebook, WhatsApp and to third party article publishers. Selecting those links takes you to services we do not operate, and their own terms and privacy notices then apply.
5. Cookies and local storage
This website does not set cookies of its own, does not use analytics cookies and does not display a consent banner because none is required for its own operation. Embedded third party content, in particular the Instagram feed, may set cookies or use local storage in your browser under the provider’s own policy. You can block or delete cookies in your browser settings at any time; if you do, embedded content may not display correctly.
6. Who we share information with
We do not sell personal information and we do not disclose it for third party marketing. We share it only:
- with service providers who support our operations, such as hosting, email and communication providers, acting on our instructions;
- with professional advisers such as accountants or lawyers, where necessary and under a duty of confidentiality;
- where we are required to do so by law, by a court or by a competent authority, or to establish, exercise or defend legal claims.
7. International transfers
Some of the providers above are established outside Albania and the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, that transfer is made under an adequacy decision or under standard contractual clauses approved by the European Commission, together with appropriate additional safeguards where required.
8. How long we keep information
- Enquiries that do not lead to work: kept while we are in contact and then deleted, normally within twelve months.
- Client correspondence and project records: kept for the duration of the engagement and then for as long as needed to handle any claim or obligation arising from it.
- Accounting records: kept for the period required by Albanian tax and accounting law.
- Server logs: kept for a short period for security and diagnostic purposes and then rotated out by the hosting provider.
9. Your rights
Subject to the conditions in applicable law, you have the right to:
- be informed about how your personal data is used, which is the purpose of this policy;
- request access to a copy of the personal data we hold about you;
- have inaccurate data corrected and incomplete data completed;
- request erasure of your data where there is no continuing reason for us to hold it;
- request that processing be restricted while a concern is being resolved;
- object to processing carried out on the basis of legitimate interests;
- receive the data you provided in a structured, commonly used and machine readable format, and have it transmitted to another controller where technically feasible;
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
We respond to requests without undue delay and in any event within one month, and we may ask for information to verify your identity before acting. Exercising these rights is free of charge unless a request is manifestly unfounded or excessive.
10. Security
The site is served over an encrypted HTTPS connection. We apply appropriate technical and organisational measures, including access control, up to date software and confidentiality obligations on the people who work with us. No transmission over the internet or method of electronic storage is completely secure, so while we protect information using appropriate measures, we cannot guarantee absolute security. Please do not send confidential or sensitive material by email or messaging unless it is necessary.
11. Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under the age of sixteen. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy to reflect changes to the site, to our services or to legal requirements. The effective date shown near the top of this page indicates when the current version took effect. Material changes will be highlighted on this page.
13. How to contact us
For any question about this policy, or to exercise any of the rights described above, please write to us using the contact details published in the Contact section of this website. Please mark your message clearly, for example “Data protection request”, so that it reaches the right person promptly.