Who we are

AiM Advisory Ltd (“AiM Advisory”, “we”, “us”) is an accounting, tax, and business advisory firm operating in Albania and Kosovo. For the purposes of applicable data protection law, AiM Advisory is the controller of the personal data described in this policy.Our offices: Rr. Andon Zako Çajupi, N.20/3, H.1, Ap.3, Tirana, Albania · Rr. Luan Haradinaj, Hyrja 134, Kati 2, Nr. 5, Prishtinë, Kosovo. You can contact us about this policy at info@aimadvisory.al.

What data we collect

We collect personal data in the following situations:

  • Contact and callback forms. When you submit an enquiry through our website, we collect the information you provide: your name, email address, phone number, the service you are interested in, and the content of your message.
  • Email correspondence. If you contact us directly by email or phone, we process the contact details and information you share with us.
  • Technical data. Like most websites, our hosting infrastructure automatically records limited technical information such as IP addresses in server logs, for security and operational purposes.
  • Cookies. Our website currently uses only functional cookies necessary for the site to operate. We do not currently use analytics or marketing cookies. For details, see our Cookie Policy.

We do not knowingly collect data from children, and our services are directed at businesses and professionals.

Why we process your data and on what legal basis

  • To respond to your enquiries — processing is based on our legitimate interest in responding to requests you send us, and on taking steps at your request prior to entering into an engagement.
  • To provide our professional services — where you become a client, processing is necessary for the performance of our engagement with you and for compliance with legal obligations that apply to accounting and advisory firms.
  • To meet legal obligations — including obligations under applicable tax, accounting, and anti-money-laundering legislation.
  • To maintain the security of our website and systems — based on our legitimate interest in protecting our infrastructure.

We do not use your personal data for automated decision-making, and we do not sell personal data.

Who we share your data with

We share personal data only with service providers who support our operations, under appropriate safeguards:

  • Website hosting — our website is hosted by a hosting provider; server infrastructure may be located outside Albania and Kosovo.
  • Email and productivity services — enquiry notifications and our correspondence are processed through Microsoft 365.
  • Professional partners — where an engagement requires it and you have been informed, we may involve professional partners such as legal advisors or auditors.
  • Public authorities — where disclosure is required by law.

International transfers

Some of our service providers may process data outside Albania, Kosovo, or the European Economic Area. Where this occurs, we rely on appropriate safeguards recognised under applicable data protection law, such as contractual protections with our providers. (Orjon: confirm wording/SCC references for the Bluehost and Microsoft arrangements.)

How long we keep your data

  • Enquiries that do not lead to an engagement: retained for up to [12 months] from our last contact, then deleted.
  • Client engagement records: retained for the periods required by applicable accounting, tax, and professional legislation.
  • Server logs and technical data: retained for short, security-appropriate periods.

Your rights

Subject to applicable law, you have the right to access your personal data, to request correction or deletion, to object to or request restriction of processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at info@aimadvisory.al. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with a supervisory authority — in Albania, the Office of the Information and Data Protection Commissioner; in Kosovo, the Information and Privacy Agency; or, for EU residents, your local data protection authority.

 

How we protect your data

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) on our website, access controls on our systems, and confidentiality obligations for our team.

 

Changes to this policy

We may update this policy from time to time. The current version, with its date, will always be published on this page.

 

Contact

For any question about this policy or about how we handle personal data: info@aimadvisory.al, or by post to either office listed above.