Privacy Policy (GDPR)

1. What data do we collect?

When booking a tour or creating an account, we may collect:

• Full name
• Email address
• Phone number
• Number of participants
• Preferred language
• Special requests
• Country of origin (optional)
• Payment information (processed securely through Stripe)

For Tour Guides: We also collect business information, certifications, profile photos, bio, languages spoken, and bank details for payouts.

2. Why do we collect this data?

• To confirm and manage reservations
• To contact travelers regarding tour changes or updates
• To send practical tour information and reminders
• To process payments securely
• To enable communication between guides and travelers
• For internal analytics and service improvement
• To comply with legal obligations

3. How do we store your data?

• All data is encrypted and securely stored on servers in the European Union
• Access is restricted to authorized Walking Tours Tirana team members only
• Payment information is handled exclusively by Stripe and never stored on our servers
• Data is retained only as long as necessary for service provision and legal compliance
• Data is never sold or shared with third parties for marketing purposes
• We may share data with third parties only when required by law or to provide the service (e.g., payment processors)

4. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request limitation of processing your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please email: support@walkingtourstirana.com

5. Cookies

This website uses cookies to enhance user experience, analyze website traffic, and remember your preferences. Essential cookies are necessary for the website to function. You can manage cookie preferences through your browser settings. For more information, see our Cookie Policy.

6. Third-Party Services

We use the following third-party services:

• Stripe: For secure payment processing
• Google Maps: For displaying tour locations and meeting points
• Email Service Provider: For sending booking confirmations and notifications

These services have their own privacy policies governing the use of your information.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: