Privacy and cookies
We collect as little as possible. This notice explains what happens to your data when you visit our site or write to us.
Last updated: 7 October 2026
Data controller
- CurePharm sh.p.k.
- NIPT
- M31718016A
- Registered address
- Rruga Asim Vokshi, Njësia Bashkiake Nr. 9, Tiranë, Albania
- rudinapapa@curepharm.org
What this notice covers
This notice applies to curepharm.org in every language. The company named above is responsible for your personal data. We follow Albanian Law No. 124/2024 on Personal Data Protection and, for visitors in the European Union, the General Data Protection Regulation (GDPR).
Messages you send us
When you write to us by email, or through the contact form, which opens your own email app, we receive your name, email address, organisation and whatever you write. We use these details only to answer you and to handle any business relationship that follows.
Legal basis: our legitimate interest in answering enquiries, or steps you ask us to take before a contract. We keep correspondence for as long as it is needed for that purpose, and business records for as long as Albanian tax and accounting law requires. Please do not send us health information about yourself or anyone else.
Hosting and security
The site is hosted by Cloudflare, which processes your IP address, browser details and the pages you request in order to deliver the site and protect it from attacks. Your browser may also send Cloudflare anonymous network error reports. Cloudflare acts as our processor, keeps these logs for a short time, and may process data outside Albania under standard contractual clauses.
Legal basis: our legitimate interest in running a secure, working website.
Analytics, only with your consent
If you allow analytics, we use Google Analytics 4 to count visits and see which pages are useful. Google sets cookies and receives an identifier for your browser, the pages you view, your device type and your approximate location. Google Analytics does not store your IP address. Advertising features and Google signals are turned off.
Google Ireland Limited processes this data for us. It may be transferred to the United States under the EU-U.S. Data Privacy Framework. Analytics data is kept for 14 months. Legal basis: your consent, which you can withdraw at any time under "Cookie settings" at the bottom of every page.
Map, only with your consent
The map on our home page is provided by Google Maps. It loads only when you choose to show it or allow maps in the cookie settings. Google then receives your IP address and may set its own cookies under the Google Privacy Policy (policies.google.com/privacy).
Social media
We link to our social media profiles. Nothing loads from those platforms until you click a link. After that, the platform's own privacy policy applies, for Instagram the Meta Privacy Policy.
Your rights
You can ask us for a copy of your data, and ask us to correct, delete or restrict it or to transfer it to you. You can object to processing based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time; this does not affect processing that happened before. Write to the email address above and we will reply within 30 days.
You can also complain to the Commissioner for the Right to Information and Personal Data Protection (idp.al). Visitors in the European Union can contact their own data protection authority, in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).
Changes to this notice
We update this notice when our practices change and show the date of the latest version at the top.
Cookies and similar storage
We only use storage that the site needs to work, unless you agree to more. You can change your choice at any time with "Cookie settings" at the bottom of every page.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
curepharm-consent | CurePharm | Remembers your cookie choices. Stored in your browser and never sent to us. Strictly necessary. | 6 months |
_ga | Google Analytics | Tells visits from different browsers apart. Only with analytics consent. | 2 years |
_ga_<ID> | Google Analytics | Keeps track of the current visit. Only with analytics consent. | 2 years |
NID, AEC and others | Google Maps | Set by Google when the map loads. Only with map consent or when you choose to show the map. | Up to 13 months |