Last updated: 14 October 2026
1. Who we are
Artur Restorant (“Artur”, “we”, “us”) operates seafood restaurants in Tirana, Durrës, Dhërmi and Jalë, Albania, and the website https://arturrestorant.al. We are the controller of the personal data described in this policy.
This policy explains what personal data we collect, why, on what legal basis, how long we keep it and how you can exercise your rights. It applies to website visitors, guests who make reservations, people who contact us, and clients who organise events with us.
- Locations: Tirana, Durrës, Dhërmi and Jalë, Albania
- Phone (orders and reservations): +355 69 708 2803
- Durrës: +355 67 608 4889
- Jalë: +355 68 201 1388
2. Legal framework
We process personal data in accordance with Albanian Law No. 124/2024 “On the Protection of Personal Data”, which is aligned with the EU General Data Protection Regulation (GDPR), and with the guidance of the Albanian Commissioner for the Right to Information and Personal Data Protection.
We follow the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
3. What data we collect
| Category | What it includes | How we get it |
|---|---|---|
| Reservations | Name, phone number, email, date, time, restaurant location, number of guests, special requests | When you book through our online reservation form, by phone or by social media |
| Allergies and dietary needs | Information about food allergies or intolerances | Only if you choose to tell us |
| Events and group bookings | Name and contact details of the organiser, event details, menus, invoices | When you organise an event or a large group booking |
| Messages | Name, contact details and your message | When you contact us by phone, email or social media |
| Technical data | IP address, browser and device type, date and time of visit, pages visited | Automatically, from our web server |
Information about allergies is health data. We use it only to prepare your food safely, and only with your explicit consent, which you give by sharing it with us.
4. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing your reservation and contacting you about it | Steps taken at your request before a contract |
| Taking your allergies into account | Your explicit consent |
| Organising events and group bookings | Performance of a contract |
| Answering your messages | Our legitimate interest in replying to guests |
| Invoicing and tax | Legal obligation |
| Running and securing the website | Our legitimate interest in a working and secure website |
We do not sell your data, we do not send marketing messages without your consent, we do not use analytics or advertising tracking tools, and we do not make automated decisions that have legal effects on you.
5. Online orders through Baboon
The “Order Online” link on our website takes you to Baboon, an independent food delivery platform. When you order through Baboon, your data is collected and processed by Baboon under its own terms and privacy policy. Baboon passes us only the information needed to prepare your order.
6. Cookies and third-party content
Our website uses only cookies that are necessary for it to work and to keep it secure. We do not use analytics, advertising or tracking cookies.
- Google Fonts – fonts may be loaded from Google’s servers, which receive your IP address.
- Google Maps, Facebook, Instagram, TripAdvisor and Baboon – our location, social media, review and ordering links are simple links. These services receive data only if you click them.
You can block or delete cookies at any time in your browser settings.
7. Who we share data with
- Our restaurants – your reservation is shared with the restaurant location you chose.
- Technical providers – our website hosting provider, our web developer Park Studios for website maintenance, and our email service provider. They act only on our instructions.
- Accountants – for invoices, under a duty of confidentiality.
- Public authorities – when the law requires it.
8. International transfers
Some technical providers, such as Google and Meta, may process data outside Albania, including in the European Union and the United States. Such transfers take place only to countries with an adequate level of protection or with appropriate safeguards such as standard contractual clauses, as required by Law No. 124/2024.
9. How long we keep your data
| Data | Retention period |
|---|---|
| Reservations | 3 months after the reservation date |
| Allergy information | Until the end of your visit |
| Messages and enquiries | 1 year after the last contact |
| Event records and invoices | 10 years, as required by Albanian accounting law |
| Website server logs | 6 months |
After these periods, data is securely deleted or anonymised.
10. Security
We use appropriate technical and organisational measures to protect your data, including an encrypted connection (HTTPS), restricted access to reservation records and regular updates of our website software. If a data breach is likely to put your rights at risk, we will notify the Commissioner within 72 hours and, where the risk is high, inform you without undue delay.
11. Your rights
Under Law No. 124/2024 you have the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete data;
- erasure, where we no longer need the data and are not legally required to keep it;
- restrict processing in certain cases;
- object to processing based on our legitimate interests;
- data portability for data you gave us under a contract or consent;
- withdraw consent at any time, without affecting earlier processing.
To exercise your rights, call us at +355 69 708 2803 or contact us through our website. We may ask you to confirm your identity. It is free of charge and we will reply within 30 days.
12. Children
Our website is not directed at children under 16, and we do not knowingly collect their data.
13. Complaints and changes
If you believe your data is processed unlawfully, please contact us first so we can resolve it. You also have the right to lodge a complaint with the Albanian supervisory authority:
- Commissioner for the Right to Information and Personal Data Protection
- Address: Rr. “Abdi Toptani”, Nd. 5, Tirana, Albania
- Website: www.idp.al
- Email: info@idp.al
We may update this policy when the law or our practices change. The current version is always published on this page with the date of the last update at the top.