Privacy Policy

Capra Adventures ("the Controller", "we", "us", or "our") respects the privacy of every visitor and client and is committed to processing personal data lawfully, fairly and transparently in accordance with Law No. 06/L-082 on Personal Data Protection of the Republic of Kosovo and any applicable supplementary legislation issued by the Information and Privacy Agency ("AIP").

1. Data Controller

The data controller responsible for the processing of your personal data is Capra Adventures, a tour operator established and registered in the Republic of Kosovo. For all matters relating to this Policy or to the exercise of your rights, please contact us using the details set out in Section 12 below.

2. Categories of Personal Data Processed

In the course of providing our services we may process the following categories of personal data:

• Identification data: full name, date of birth, nationality, passport or identity-card number where required for booking and travel formalities.
• Contact data: postal address, email address, telephone number.
• Booking data: tour selected, travel dates, group composition, dietary requirements, emergency contact.
• Health and fitness information: only where strictly necessary for the safe conduct of mountain activities and only with your explicit consent.
• Payment data: invoicing details. Payment-card information is processed exclusively by our authorised payment processors and is not stored on our servers.
• Technical data: IP address, browser type, device identifiers and pages visited, collected through cookies and similar technologies.

3. Legal Basis for Processing

We process your personal data solely on one or more of the lawful bases set out in Article 5 of Law No. 06/L-082, namely: (a) the performance of a contract to which you are a party; (b) compliance with a legal obligation; (c) the protection of vital interests; (d) your explicit consent for specific purposes such as marketing or the processing of health data; or (e) our legitimate interests, where these are not overridden by your rights and freedoms.

4. Purposes of Processing

Your personal data are processed for the following purposes:

• To handle bookings, issue confirmations and provide the services you have purchased.
• To communicate with you regarding your reservation, itinerary and any operational changes.
• To comply with legal obligations under tax, accounting and tourism legislation.
• To ensure the safety and security of participants on our expeditions.
• To improve our website and service quality through aggregated, non-identifying analytics.
• To send marketing communications, where you have given prior consent and which you may withdraw at any time.

5. Disclosure to Third Parties

Personal data may be disclosed to the following recipients only to the extent necessary for the purposes set out above and under appropriate data-processing agreements:

• Local guides, accommodation providers and transport partners involved in delivering the booked services.
• Insurance providers, where insurance is arranged on your behalf.
• Public authorities of the Republic of Kosovo and of countries visited, where required by law.
• IT service providers, hosting and payment processors acting as data processors on our behalf.

We do not sell, rent or otherwise commercialise your personal data to any third party for marketing purposes.

6. International Transfers

Where personal data are transferred outside the territory of the Republic of Kosovo, such transfer takes place only to jurisdictions providing an adequate level of protection or under appropriate safeguards as required by Articles 47 to 53 of Law No. 06/L-082.

7. Retention Periods

Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected, unless a longer retention period is required by law (in particular tax, accounting and tourism record-keeping obligations, typically up to ten (10) years from the end of the relevant financial year). After the retention period expires, data are securely deleted or anonymised.

8. Your Rights as a Data Subject

Pursuant to Articles 14 to 25 of Law No. 06/L-082 you have the right, free of charge and subject to the conditions provided by law, to:

• Be informed about the processing of your personal data;
• Access your personal data and obtain a copy thereof;
• Request rectification of inaccurate or incomplete data;
• Request the erasure of your personal data (the "right to be forgotten");
• Request the restriction of processing;
• Object to processing carried out on the basis of legitimate interests or for direct-marketing purposes;
• Receive your personal data in a structured, commonly used and machine-readable format (data portability);
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• Lodge a complaint with the Information and Privacy Agency (AIP).

9. Cookies and Similar Technologies

Our website uses essential cookies necessary for its functioning and, with your prior consent, analytical and preference cookies. You may at any time manage your cookie preferences through your browser settings or through the cookie banner displayed on our website.

10. Security Measures

We apply appropriate technical and organisational measures, including encryption in transit, access controls, regular back-ups, staff confidentiality undertakings and the principle of data minimisation, to ensure a level of security appropriate to the risk, in line with Article 28 of Law No. 06/L-082.

11. Complaints

If you consider that the processing of your personal data infringes the law, you have the right to lodge a complaint with the Information and Privacy Agency of the Republic of Kosovo (Agjencia për Informim dhe Privatësi - AIP), with seat in Prishtina. We nevertheless invite you to contact us first so that we may address your concern.

12. Contact

For any question relating to this Privacy Policy or to exercise your rights, please write to Capra Adventures using the contact information published on the Contact page of this website.

13. Changes to this Policy

This Policy may be updated from time to time to reflect legal, technical or operational changes. The version in force is the one published on this page, together with its date of last update.