IT DEPARTMENT
Privacy policy
How we use and protect your data when you visit itdks.tech and contact us.
Who we are
The controller of the data for this website is:
IT Department, based in Prishtina, Kosovo · info@itdks.tech · +383 49 573 570
This policy applies to itdks.tech and to the enquiries you send us through it. The legal framework is Law No. 06/L-082 on the Protection of Personal Data.
Data, purposes and retention
We process only the data needed for each purpose. For each flow:
Enquiry form
- Data
- Name, email, company and phone if provided, the selected service, your message, and the form type and language.
- Purpose
- To reply and, if you ask for it, to prepare an offer.
- Legal basis
- Steps taken at your request before a contract; our legitimate interest in replying.
- Retention
- The enquiry passes through Formspree and reaches our inbox. We keep it as long as needed for the enquiry and any collaboration that follows; longer only where the law requires it, for example for contracts and invoices.
Draft in your browser
- Data
- The text you type into the form, before sending.
- Purpose
- So your text is not lost if you reload the page or switch language.
- Legal basis
- Legitimate interest in a working form; the draft is not sent to us until you submit it.
- Retention
- Only in this browser tab (sessionStorage), until the enquiry is sent successfully or the tab is closed.
Email, phone and WhatsApp
- Data
- Your email address or number and the content of your message.
- Purpose
- Communicating about your enquiry.
- Legal basis
- Steps before a contract, at your request; legitimate interest in replying.
- Retention
- As for form enquiries. WhatsApp opens only when you click the link and operates under its own terms.
Booking a meeting
- Data
- Name, email, the selected time and the answers you give in Calendly.
- Purpose
- Organising the meeting.
- Legal basis
- Steps before a contract, at your request.
- Retention
- Calendly loads only when you open the booking and keeps the data under its own terms; we use it as long as needed for the meeting and any collaboration that follows.
Visit measurement (Google Analytics)
- Data
- The page, language, service or product category and the contact action (for example an email click or a confirmed booking), plus technical device data; with your consent also an identifier stored in a cookie. Our events contain no names, emails, phone numbers or messages.
- Purpose
- To understand which pages and services are used, so we can improve the site. Statistics are not used for advertising: Google signals and ad personalisation are switched off.
- Legal basis
- Your consent (“Statistics”) for the cookie and the identifier. Without it, the Google tag still loads, but sets no cookie and sends Google Analytics only cookieless signals without a visitor identifier, which Google uses for aggregate estimates; this rests on our legitimate interest in measuring the website. If your browser sends “Do Not Track”, the Google tag does not load at all.
- Retention
- Cookies up to 2 years; event data according to the setting of our Google Analytics property, no longer than 14 months.
Ad measurement (Google Ads)
- Data
- With your consent: the ad click identifier (for example gclid), the page and, when the form is accepted, a conversion with a random enquiry number; the email or phone from the form only in hashed form, so Google can match the enquiry to the click; technical device data and identifiers in cookies. Your message is not sent.
- Purpose
- To measure how many enquiries come from our Google ads. It is not used for personalised advertising or remarketing.
- Legal basis
- Your consent (“Advertising”). Without it, Google Ads sets no cookies and receives no click identifier and no form data, only cookieless signals about the page, an accepted enquiry (with its random number) and the missing consent, which Google uses to estimate conversions in aggregate; this rests on our legitimate interest in measuring our ads.
- Retention
- Cookies up to 90 days; data in Google Ads under Google’s terms.
Site statistics (on our own server)
- Data
- The page, language, referring website, campaign (utm) and contact actions, plus the browser language, time zone, window size, device type and browser, and the country from the server or the browser language. Your IP address and a random browser identifier are stored only as keyed hashes (pseudonymised). No names, emails, phone numbers or messages.
- Purpose
- A simple overview of visits and enquiries for our team, alongside Google Analytics.
- Legal basis
- Your consent (“Statistics”). Without it, nothing is sent to our statistics.
- Retention
- Events for up to 90 days on our hosting (Hostinger); the random identifier stays in your browser until you withdraw consent or clear your browser data.
Technical server data
- Data
- IP address, date and time, the requested address, the referring page and the browser type.
- Purpose
- Delivering the site, operating it and protecting it against misuse.
- Legal basis
- Our legitimate interest in a secure, working website.
- Retention
- For a limited time, according to the settings of the hosting provider (Hostinger).
Map and fonts
- Data
- When you click “Show map”, Google Maps receives your IP address and technical device data.
- Purpose
- Showing the approximate location. The font (Outfit) is served by this website, with no connection to Google Fonts.
- Legal basis
- Your request by clicking; the map does not load before you click.
- Retention
- Under Google’s terms.
Please do not send passwords or sensitive data, such as health information, through the form or messages.
External services
For some functions we use external providers. Each receives only the data its service needs and has its own privacy policy:
- Hostinger: website hosting
- Formspree: form delivery
- Google: Statistics (Analytics) and advertising (Ads): cookies and identifiers only with consent, without it only cookieless signals; Maps only after a click
- Calendly: booking meetings, when you open it
- WhatsApp: conversations, when you click the link
The social networks at the bottom of the page open only when you click them. Some of these providers process data outside Kosovo, including in the European Union and the United States, under their own terms and safeguards.
Your rights
Under Law No. 06/L-082 you can request access to your data, its correction or deletion, restriction of processing and, where applicable, data portability, and you can object to processing based on legitimate interest.
You can change or withdraw your consent to statistics and to advertising at any time under “Privacy settings” at the bottom of the page. Withdrawal does not affect processing carried out before.
To exercise these rights, write to info@itdks.tech. If you believe your rights have been infringed, you can lodge a complaint with the Information and Privacy Agency (AIP).
Contact and changes
Privacy questions: info@itdks.tech or +383 49 573 570. When we change this policy, we publish the new version on this page with its update date.