GDPR Compliance

Data controller

Future Home Dyrrah (Sheshi Liria, Durrës 2001, Albania) is the controller of personal data processed through this site. Contact: administrata@futurehomedyrrah.al.

Legal bases we rely on

• Consent (Art. 6(1)(a)) — for replying to your inquiry and for marketing communications. Both are tracked separately and revocable at any time.
• Pre-contractual steps (Art. 6(1)(b)) — when you ask us to coordinate a property visit, reservation, or contract.
• Legal obligation (Art. 6(1)(c)) — for tax, AML and real-estate record-keeping when a transaction proceeds.
• Legitimate interest (Art. 6(1)(f)) — for fraud prevention (rate limits, honeypot, time-trap) and for measuring the effectiveness of our marketing in aggregate.

Your rights, in plain English

• See what we have on you. Email us; we will export the record.
• Correct it. Reply to your confirmation email or write to us.
• Delete it. "Please erase my record" in an email is enough — we honour the request within 30 days unless we have a legal duty to retain (we will tell you which one).
• Restrict / object. Tell us which processing you want stopped and why.
• Take it with you. We export the record in JSON or CSV.
• Withdraw consent. Effective immediately for future processing; the lawfulness of past processing is unaffected.
• Complain. If you are unhappy with our response, lodge a complaint with the Albanian Information and Data Protection Commissioner (idp.al) or your local EU supervisory authority.

Marketing consent

The optional marketing-consent checkbox on the contact form is independent of the GDPR consent we need to reply to your inquiry. You can opt into one without the other. Every marketing email includes a one-click unsubscribe link; one click ends the processing.

Data we send to advertising platforms

If you accept the analytics cookie, we send Meta's Conversions API a record that an inquiry was submitted, with your email and phone hashed (SHA-256) and your country code. We never send your free-text message, your budget or your intent to advertising platforms. The hashing is one-way and Meta uses it only to match the event to an existing person if you have a Meta account.

Data retention

• Inquiry never converted: 18 months from last interaction.
• Inquiry converted to purchase: 10 years after contract end (tax / AML).
• Marketing list: until unsubscribe, then 30-day cooldown for unsubscribe processing.
• Server logs (IP, user agent, request path): 30 days.

Sub-processors

Vercel Inc. (hosting, EU edge), our transactional email provider (EU), Meta Platforms (advertising attribution, opt-in only). All operate under signed Data Processing Agreements. SCCs apply where data routes via the United States.

Security incidents

In the unlikely event of a personal-data breach affecting your record, we will notify the supervisory authority within 72 hours and you directly when there is a likely high risk to your rights, in line with Art. 33–34 GDPR.

Contact

administrata@futurehomedyrrah.al · +355 69 768 9999 · Sheshi Liria, Durrës 2001, Albania