Privacy policy

This policy explains how Arcline Consulting ("Arcline", "we") collects and uses personal data when you visit arcline-consulting.com, contact us, or work with us as a data owner or a buyer.

1. Who we are

The controller of your personal data is Arcline Consulting, a company registered in Kosovo under business registration number 812250223, with its registered address at Hilmi Rakovica, Bregu i Diellit, B-0116, Prishtina, Kosovo. You can contact us about privacy at info@arcline-consulting.com.

2. What we collect

• Enquiry forms: your name, work email, organisation, the type of enquiry and your message. We also record the page you sent the form from and how you reached our website (for example a search engine, an AI assistant or a social network).
• Email and calls: the content of our correspondence and, where you agree at the start of a call, a recording or automated notes of that call.
• Website visits: technical data that our hosting provider logs for security and operation, such as IP address, browser type, the pages requested and the referring page.
• Business relationships: contact details of the people we work with at data owners and buyers, and the contract and payment details needed to carry out an agreement.

We do not ask for special categories of personal data through our website. Health data from healthcare providers is only handled in de-identified form, under separate written agreements with those providers.

3. Why we use it, and on what legal basis

We process personal data in line with Kosovo Law No. 06/L-082 on the Protection of Personal Data and, where it applies, the EU General Data Protection Regulation (GDPR). The legal bases below follow the GDPR references, which the Kosovo law mirrors.

• To reply to your enquiry and take steps you ask for before a contract (Article 6(1)(b) GDPR).
• To perform contracts with data owners and buyers (Article 6(1)(b)).
• To follow up on business discussions, understand which channels bring enquiries, and keep our website secure (our legitimate interests, Article 6(1)(f)).
• To meet legal, accounting and tax obligations (Article 6(1)(c)).
• To record calls, only with your consent (Article 6(1)(a)), which you can refuse or withdraw at any time.

4. Who we share it with

We use service providers who process data on our behalf under data processing terms: Netlify (website hosting and forms), Google Workspace (email and documents) and Fireflies.ai (call notes, only with consent). Our website loads fonts from Google Fonts, which receives your IP address when a page loads. We do not sell personal data. We share a data owner's or a buyer's identity with the other side only with their agreement.

5. International transfers

Some of our providers process data outside the European Economic Area, including in the United States. Where this happens, we rely on an adequacy decision (such as the EU-US Data Privacy Framework, where the provider is certified) or the European Commission's Standard Contractual Clauses.

6. How long we keep it

Enquiries that do not lead to a business relationship are deleted after 24 months. Contract, accounting and tax records are kept for as long as the law requires, as required by applicable accounting and tax law. Website logs are kept by our hosting provider for a short period, normally a few days to a few weeks.

7. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use these rights, write to info@arcline-consulting.com. We reply within one month.

You can also complain to a data protection authority, in particular the Information and Privacy Agency of Kosovo, or the data protection authority of the EU or EEA country where you live or work.

8. Cookies

Our website does not use advertising or tracking cookies. To understand where an enquiry came from, we keep the referring source in your browser for the length of your visit only (session storage), and send it with the form if you choose to submit one.

9. Changes

We may update this policy. The date at the top shows when it last changed.