Home / Privacy policy
Privacy policy
Last updated 11 October 2026
Who is responsible
The business behind What in Përmet is named in our legal notice. For any question about your data, write to wpermet@gmail.com or call +355 68 44 57 765.
What we collect, why, and on what basis
- When you book: your name, email address, the phone number and notes if you choose to give them, and the details of your booking (what, when, how many guests, price). We use them to make and manage your booking, to confirm it and to let you cancel from your link. Basis: performing the contract with you.
- Emails about your booking: confirmation, cancellation and reminders. Basis: performing the contract.
- Newsletter: only your email address, and only if you tick the box and subscribe. Basis: your consent, which you can withdraw at any time.
- Technical data: like any website, our hosting provider handles your IP address and browser details to deliver the pages and keep the site secure. Basis: our legitimate interest in running a secure site.
- Records: booking and payment records that accounting and tax law require us to keep. Basis: legal obligation.
No cookies, no tracking
This site does not set cookies and does not use analytics or advertising trackers. Fonts, images and videos are served from our own site, so your browser does not contact other companies when you read a page. That is why there is no cookie banner. The page language is chosen by the web address (for example /de), not by a cookie. If we ever add anything that needs your consent, we will ask first.
Who receives your data
- The local business that runs your tour, stay or transfer receives your booking details, because they need them to look after you.
- Our service providers, who process data only to provide their service: Cloudflare (hosting and data storage) and an email service that sends our messages.
- Authorities, if the law requires it.
We do not sell your data.
Transfers outside the EU and EEA
We are based in Albania, and some of our providers are based in other countries, for example the United States. Where your data leaves the EU or EEA we rely on the safeguards our providers offer, such as standard contractual clauses.
How long we keep it
Booking records are kept as long as needed to run the booking, deal with questions or claims afterwards, and meet legal and accounting duties. Newsletter addresses are kept until you unsubscribe or ask us to remove them.
Your rights
You can ask us to show you the data we hold about you, to correct it, to delete it, to restrict how we use it, or to give you a copy in a common format. You can object to processing based on our legitimate interest, and you can withdraw your newsletter consent at any time. Email wpermet@gmail.com. We answer as soon as we can, and within one month.
You also have the right to complain to a data protection authority, for example the one in the country where you live. In Albania this is the Information and Data Protection Commissioner (IDP).
Links to other sites
Our guides link to other websites, which have their own privacy rules.
Changes
If we change this policy, the date at the top changes. See also our terms and conditions and cancellation policy.