Privacy Policy

Last updated: 26.03.2026

1. General Information

We appreciate your interest in Datilis. Protecting your personal data is a core principle of how we design and operate our services.

You can generally use our website without providing personal data. However, when using certain services (e.g., contact forms, consultations, or service requests), processing of personal data may be required.

All personal data is processed in accordance with:

• The General Data Protection Regulation (GDPR)
• Applicable national data protection laws

This Privacy Policy explains:

• What data we collect
• How we process and use it
• Your rights

2. Data Controller

Datilis

Street: Hajdar Hidi, Tirana 1001, Albania
Email: hello@datilis.com
Website: https://datilis.com

3. Definitions

• Personal Data: Information relating to an identifiable individual
• Processing: Any operation on personal data (collection, storage, use, deletion)
• Data Subject: The individual whose data is processed
• Controller: Entity determining processing purposes
• Processor: Entity processing data on behalf of the controller
• Consent: Freely given agreement to processing

4. Data Collection

4.1 Website Access Data

We automatically collect technical data when you visit our website:

• Browser type and version
• Operating system
• Referrer URL
• Pages visited
• Timestamp
• IP address

This data is used to:

• Ensure system stability
• Improve performance
• Detect security threats

This data is not used to identify individuals directly.

4.2 Contact and Communication

When you contact us via:

• Email
• Contact forms

We process:

• Name
• Email address
• Message content

Purpose:

• Respond to inquiries
• Provide services

Your data is not shared with third parties without consent, unless required by law.

5. Cookies

We use cookies to:

• Improve usability
• Optimize content
• Enable essential functionality

You can:

• Disable cookies in your browser
• Delete existing cookies

Note: Some features may not function correctly without cookies.

6. Data Retention

We retain personal data only as long as necessary:

• For the intended purpose
• To comply with legal obligations

Afterward:

• Data is deleted or anonymized

7. Data Security

We implement industry-standard safeguards:

• Encryption (in transit and at rest)
• Access control mechanisms
• Secure cloud infrastructure
• Monitoring and logging

Despite best efforts, no internet transmission is completely secure.

8. Data Platform & AI Processing

As a company specializing in data engineering and AI, Datilis may process data within:

• Data pipelines
• Analytics platforms
• AI/ML systems

8.1 Data Processing in Platforms

Client data processed in platforms may include:

• Structured and unstructured datasets
• Operational and analytical data
• Pseudonymized or anonymized data

Processing occurs strictly:

• Based on contractual agreements
• Under client-defined governance rules
• Using secure environments

8.2 AI and Machine Learning

Where AI systems are used:

• Personal data is minimized or anonymized where possible
• Models are tested for:
  • Accuracy
  • Bias
  • Fairness

We ensure:

• Human oversight of critical decisions
• Transparency in AI behavior
• Compliance with GDPR (including Article 22)

No fully automated decision-making with legal impact is performed without appropriate safeguards.

8.3 Data Masking & Privacy Protection

We implement:

• Data masking
• Tokenization
• Pseudonymization

This ensures:

• Protection of sensitive data (e.g., PII)
• Secure usage in development and testing environments

9. Cloud Processing & Third Parties

We use trusted cloud providers such as:

• Google Cloud Platform (GCP)
• Amazon Web Services (AWS)

These providers may process data as data processors under GDPR-compliant agreements.

We ensure:

• Data Processing Agreements (DPAs)
• Secure infrastructure configurations
• Regional data handling where required

10. Your Rights

You have the following rights:

✔ Access

Request information about your data

✔ Rectification

Correct inaccurate data

✔ Erasure

Request deletion of your data

✔ Restriction

Limit processing

✔ Portability

Receive your data in a machine-readable format

✔ Objection

Object to processing

✔ Withdraw Consent

At any time

✔ Complaint

Contact a supervisory authority

📩 Contact: hello@datilis.com

11. Legal Basis

We process data based on:

• Consent (Art. 6(1)(a))
• Contract (Art. 6(1)(b))
• Legal obligation (Art. 6(1)(c))
• Legitimate interest (Art. 6(1)(f))

12. Legitimate Interests

Our legitimate interests include:

• Operating and improving our services
• Ensuring security and reliability
• Delivering data platform solutions

13. Provision of Data

Providing personal data may be:

• Required by law
• Necessary for contracts

Failure to provide data may result in:

• Inability to deliver services

14. Automated Decision-Making

Datilis does not perform automated decision-making with legal or significant impact without:

• Human oversight
• Appropriate safeguards

15. Updates

We may update this policy periodically.
The latest version is always available on our website.