Privacy Policy

Triton Boat Tours Vlore operates the website triton.al and provides boat tour services in Vlorë, Albania. The data controller is ER AB 2007 (NIPT M16512203V), trading as Triton Boat Tours.

Contact: [email protected] | +355 69 812 9277
Address: Rruga Pelivan Leskaj, Vlorë 9402, Albania

When you book a tour:

• Full name, email address, phone number
• Number of passengers (adults/children)
• Tour date, time, and package selection
• Language preference
• How you reached our website (source, medium, campaign, landing page and referring page of your visit and, if you accept marketing cookies, the ad click identifier)

When you visit our website:

• IP address, browser type, device information
• Pages visited and time spent (via Google Analytics and Microsoft Clarity)
• Cookies for site functionality and, if you accept them, analytics and marketing
• Your cookie choice, the time of that choice, the site language, the policy version and a random ID (see Section 7)

We use your personal data for the following purposes:

• Process your booking — confirm reservations, send booking details. Legal basis: performance of a contract.
• Communication — send reminders before your tour, respond to inquiries. Legal basis: performance of a contract or our legitimate interest.
• Improve our service — analyze website usage to enhance user experience. Legal basis: your consent.
• Marketing: measure bookings from our Google Ads and show our ads to past visitors (remarketing). Legal basis: your consent.
• Legal obligations — comply with applicable laws and regulations. Legal basis: legal obligation.

These legal bases come from Art. 6 GDPR and Albanian Law No. 124/2024.

We will never sell your personal data to third parties.

We use the following technologies:

• Google Analytics 4 (GA4) — only if you accept analytics cookies: to understand how visitors use our website. GA4 collects usage data tied to a random identifier, including pages visited, session duration, traffic sources and booking events (such as tour, date, passengers, value and booking reference). Our Google Analytics is linked to Google Ads, so for these booking events Google also receives the value, the booking reference and this random identifier for conversion measurement. If you accept analytics cookies only, this does not use Google Ads cookies, click identifiers or your hashed email address or phone number. Google Privacy Policy
• Microsoft Clarity — only if you accept analytics cookies: session recordings and heatmaps of how our pages are used (clicks, scrolling, mouse movements), to improve the website. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the "Cookie Settings" link in the footer. Form fields are masked and their content is not sent to Microsoft. Microsoft receives this data as an independent controller and may also use it for its own purposes, including advertising. For visitors in the EEA, the UK and Switzerland, that controller is Microsoft Ireland Operations Limited. Microsoft stores the data in its Azure cloud and may process it in the United States and other countries where Microsoft operates; for these transfers it uses the standard contractual clauses of the European Commission and takes part in the EU-U.S. Data Privacy Framework. Clarity keeps recordings for 30 days; heatmap and click data, recordings we save and a random sample of recordings are kept for up to 9 months. Microsoft Privacy Statement
• Google Ads: the Google Ads tag and its cookies run only if you accept marketing cookies, to measure conversions and for remarketing. When you send a form on our website, such as the booking, contact or booking lookup form, any email address or phone number you enter can be hashed in your browser (SHA-256) and sent to Google to measure conversions; for a booking, the booking reference and value follow once the booking is made. Hashed data is still personal data. The legal basis for Google Analytics and Google Ads is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the "Cookie Settings" link in the footer. The data goes to Google LLC in the USA, which takes part in the EU-U.S. Data Privacy Framework. Google Privacy Policy
• Essential cookies — required for the website to function properly (language preference, your cookie choice, security)

You can disable cookies in your browser settings. Note that disabling essential cookies may affect website functionality.

If you provide your phone number and book via WhatsApp, we may use WhatsApp to:

• Send booking confirmations
• Send tour reminders (1 hour before departure)
• Share meeting point location and directions
• Respond to your questions

WhatsApp messages are processed through the WhatsApp Business platform. WhatsApp Privacy Policy

You can opt out of WhatsApp messages at any time by contacting us.

We may share your data with the following third-party services, to provide our services and, only with your consent, for analytics and marketing:

• Google LLC — Analytics (usage data tied to a random identifier), Ads (conversion measurement and remarketing, including your hashed email address and phone number when you send a form, see Section 4), the map on our Contact page (Google receives your IP address when the map loads) and reCAPTCHA on our partner sign-up form (Google receives your IP address when you start filling it in)
• Microsoft Corporation — Clarity (website usage recordings and heatmaps, masked; Microsoft also uses this data for its own purposes, see Section 4)
• WhatsApp / Meta — for sending booking-related messages
• Email provider — for sending booking confirmations and reminders
• Esri — the map on our tour and destination pages (Esri receives your IP address when the map loads)
• Service providers — POK (card payments), Contabo (server hosting), Cloudflare (content delivery and security), Twilio (SMS), Telegram (booking alerts to our team and to partners), Apple and Google (tickets you add to your wallet), Apple (alerts in our team’s app), Sentry (error reports) and, if you book through a partner, that partner

We do not share your personal data with any other third parties for marketing purposes.

We retain your booking data for up to 24 months after your tour date for operational and legal purposes. After this period, personal data is anonymized or deleted.

Analytics data is tied to a random identifier. It is kept for the period set in our Google Analytics account and, for Clarity, as described in Section 4. Aggregated statistics, which do not identify you, may be retained for longer periods for statistical analysis.

To prove your consent, we keep your cookie choice, the time of that choice, the site language, the policy version and a random ID on our server for 24 months. We do not keep your IP address in this record. If you book, your choice, its time and this ID are also stored with your booking and kept as long as your booking data. Your browser keeps your choice for 180 days, then we ask you again.

You may request early deletion at any time (see Section 8).

Under applicable data protection laws, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Portability — receive your data in a structured, machine-readable format
• Object — object to certain processing of your data
• Withdraw consent — withdraw previously given consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Commissioner for the Right to Information and Personal Data Protection in Albania (idp.al) or, if you live in the EU, with the supervisory authority where you live.

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. Changes will be posted on this page with the updated date. We encourage you to review this page periodically.

Last updated: 2026-11-06

If you have any questions about this Privacy Policy or how we handle your data:

• Email: [email protected]
• Phone: +355 69 812 9277
• Address: Rruga Pelivan Leskaj, Vlorë 9402, Albania