(Reference Translation – The Albanian version prevails in case of conflict)

Magus Group Albania sh.p.k.
Address: Linze, Nd. 30, H. 31, Ap. 52, Dajti, 1040, Tirana, Albania
Email: request@busrent.al
Phone: +355 69 202 4511
Official website: www.busrent.al

Article 1 – Purpose and Scope
1.1. This Privacy Policy regulates the collection, processing, storage, and use of personal data by Magus Group Albania sh.p.k., in accordance with Law No. 9887, dated 10.03.2008 “On the Protection of Personal Data” (as amended) and, where cross-border processing applies, Regulation (EU) 2016/679 (GDPR).
1.2. This Policy applies to all visitors, users, and clients of the www.busrent.al website and its services.

Article 2 – Definitions
2.1. “Personal data” – any information relating to an identified or identifiable natural person, as per Article 3 of Law No. 9887.
2.2. “Processing” – any operation performed on personal data, including collection, recording, organization, storage, use, transmission, deletion.
2.3. “Data controller” – Magus Group Albania sh.p.k..

Article 3 – Categories of Data Collected
3.1. Billing data: name, surname, address, VAT/NIPT, company data – stored in our database for tax and accounting purposes (Article 5, Law No. 9920, dated 19.05.2008 “On Tax Procedures”).
3.2. Booking data: passenger name, contact details, travel details – stored only in email correspondence for preparing transport documents (Article 11, Law No. 8378, dated 22.07.1998 “Road Transport Code”).
3.3. Technical data: IP, browser type, operating system, visits – collected via cookies and analytics tools (GDPR, Art. 4/1 and Art. 6).

Article 4 – Purposes of Processing
4.1. To fulfil transport contracts (GDPR Art. 6(1)(b); Law No. 9887, Art. 5).
4.2. To comply with legal obligations (GDPR Art. 6(1)(c)).
4.3. For service improvement and marketing (GDPR Art. 6(1)(f)) – including sending promotional offers by email unless the client has opted out.

Article 5 – Data Sharing
5.1. Data may be shared with:

• Payment processors: Stripe, PayPal, Raiffeisen Bank, Banka Kombëtare Tregtare (Law No. 10433, dated 16.06.2011 “On Payment Services”).
• Authorized transport partners.
• State authorities: Police, Customs, Border Control (where required by law).
• Analytics service providers: Google Analytics, Microsoft Clarity, Facebook Pixel, Cloudflare.

Article 6 – Online Payment Security
6.1. All payments through www.busrent.al are protected by SSL Encryption and processed by licensed payment providers in accordance with Albanian law and the regulations of the Bank of Albania (Law No. 10433).
6.2. The company does not store complete credit/debit card details on its servers.

Article 7 – International Data Transfers
7.1. When data is processed outside Albania, legal safeguards are applied as per Article 8 of Law No. 9887 and Chapter V of GDPR.

Article 8 – Retention Periods
8.1. Billing data is stored for 10 years as per tax law.
8.2. Booking data is stored until the service is completed and legal obligations are fulfilled.

Article 9 – Data Subject Rights
9.1. Right to information (Law No. 9887, Art. 12).
9.2. Right of access, rectification, erasure (Arts. 13–15).
9.3. Right to object to marketing (GDPR Art. 21).
9.4. Right to lodge a complaint with the Commissioner for the Right to Information and Protection of Personal Data.

Article 10 – Complaint Procedure
10.1. Complaints regarding data processing must be submitted in writing to request@busrent.al.
10.2. In case of a dispute, the parties shall follow mediation/arbitration under Law No. 10385, dated 24.02.2011 “On Commercial and International Arbitration” before applying to the Court of Tirana.

Article 11 – Policy Changes
11.1. Any changes will be published on our website and will take effect on the date of publication.