Purpose and Scope

This Data Protection Policy sets out the principles and responsibilities that govern how RESARDECO Sh.p.k, trading as KUCHEASY, collects, processes, stores, and protects personal data. It applies to all data collected through our website, service forms, communications, and operational activities.

This policy is aligned with applicable data protection law in Albania and, where relevant, with the principles of the European Union's General Data Protection Regulation (GDPR) and the EU Data Protection Directive, given our services to European nationals and residents.

Data Protection Principles

We are committed to processing personal data in accordance with the following principles:

• Lawfulness, fairness, and transparency, data is processed on a lawful basis and in a transparent manner
• Purpose limitation, data is collected for specified, explicit, and legitimate purposes only
• Data minimisation, we collect only the data that is necessary for the stated purpose
• Accuracy, we take reasonable steps to ensure data is accurate and kept up to date
• Storage limitation, data is kept only for as long as necessary
• Integrity and confidentiality, data is processed securely and protected against unauthorised access, loss, or destruction
• Accountability, we take responsibility for compliance with these principles

Data We Collect and Why

We collect the following categories of personal data and process them for the purposes stated:

Contact and Identity Data

Name, email address, phone number (optional), and country of residence or nationality.

Purpose: To respond to enquiries, deliver services, issue invoices, and communicate with clients.

Property Data

Property URL or listing reference submitted voluntarily by the client.

Purpose: To conduct the requested property verification or due diligence on the client's behalf.

Payment Data

We do not store payment card details. For PayPal payments, transactions are processed directly through PayPal's secure platform. For bank transfers, we hold invoice records as required by Albanian accounting regulations.

Purpose: To process payments and maintain legally required financial records.

Technical and Usage Data

Basic website analytics data including IP address, browser type, and pages visited.

Purpose: To ensure our website functions correctly and to improve user experience.

Legal Bases for Processing

We rely on the following legal bases:

• Contract performance, processing is necessary to deliver the service you requested
• Legal obligation, where we are required by Albanian law to retain financial records
• Legitimate interests, for website analytics and service improvement, where these interests do not override your rights
• Consent, where you have provided explicit consent, for example when submitting an enquiry form

Data Storage and Security

We take the security of your personal data seriously and implement the following measures:

• Secure email and communication channels
• Limited internal access to personal data on a need-to-know basis
• Password-protected internal systems and devices
• Regular review of data held and deletion of data no longer required
• Third-party service providers used by KUCHEASY (including Tawk.to, PayPal, and our website hosting) are selected for their data security standards and, where applicable, GDPR compliance

We do not use automated systems that make decisions about individuals based solely on their personal data.

Data Retention Schedule

We retain personal data for the following periods:

• Client enquiry and service records, 3 years from the date of last contact or service delivery
• Invoices and payment records, 7 years, in compliance with Albanian tax law
• Website analytics, up to 26 months
• Live chat logs (via Tawk.to), subject to Tawk.to's retention settings; we review and clear records periodically

After the applicable retention period, data is securely deleted or anonymised.

Data Sharing and Third-Party Processors

We share personal data only where necessary and with the following categories of recipients:

• PayPal, for payment processing (PayPal's own privacy policy applies)
• Tawk.to, for live chat support (Tawk.to's privacy policy applies)
• Website hosting and analytics providers, for basic website operation
• Vetted professional partners, only when you have requested a referral or connection, and only the minimum data necessary
• Legal or regulatory authorities, where required by law

We do not sell personal data to any third party.

International Transfers

Some of our third-party providers may process data outside of Albania. Where this occurs, for example in the case of PayPal or Tawk.to, we rely on the safeguards provided by those platforms (including Standard Contractual Clauses where applicable) to ensure your data remains protected.

Individual Rights

You have the following rights in relation to your personal data held by us:

• Access, to request confirmation of whether we hold your data and a copy of it
• Rectification, to request correction of inaccurate or incomplete data
• Erasure, to request deletion of your data where there is no lawful basis to retain it
• Restriction, to request that we pause processing of your data in certain circumstances
• Portability, to receive your data in a structured, machine-readable format
• Objection, to object to processing based on legitimate interests

To exercise any of these rights, please submit a written request to connect@kucheasy.com. We will respond within 30 days. We may need to verify your identity before processing your request.

Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, the affected individuals in accordance with applicable legal obligations and within the required timeframes.

We maintain an internal log of any data security incidents for review and improvement purposes.

Changes to This Policy

This policy will be reviewed and updated periodically to reflect changes in our operations, legal requirements, or best practices. The current version will always be available at www.kucheasy.com.

Contact

For any data protection enquiries, requests to exercise your rights, or to report a concern, please contact:

KUCHEASY | RESARDECO Sh.p.k
Email: connect@kucheasy.com