Controller and contact
The controller is Vega Audit SH.P.K., NUI 810822040, Bulevardi “Dëshmorët e Kombit”, Ulpianë, C2, H-III, No. 6, 10000 Prishtina, Kosovo. For privacy questions or to exercise your rights, email info@vegaaudit.com.
Information you provide
The contact form requires your full name and email address. Organisation and message are optional; you may select a service or leave it for discussion with the team. The form cannot accept an enquiry without a name and email address. The email also includes the form language. Do not send identity documents, sensitive information or confidential material; we agree a document-delivery method separately.
Purpose and lawful basis
We use contact information to answer your enquiry, clarify the service and prepare a quotation. For steps requested by an individual towards their own contract, the basis is Article 5(1.2) of Law 06/L-082. For communications with organisational representatives, comment administration, website operation and abuse prevention, the basis is legitimate interests under Article 5(1.6): handling enquiries, discussing articles and securing the service. An initial enquiry does not by itself establish a professional engagement.
Who receives the information
Your enquiry is sent to info@vegaaudit.com, the firm’s HostGator/cPanel mailbox, and is also forwarded to a Gmail mailbox used by the firm. Handling the enquiry involves authorised firm personnel and the technical services of HostGator and Google/Gmail. The form does not create a separate enquiry database; messages are stored in email.
Processing outside Kosovo
The website hosting and cPanel email service are located in HostGator’s data centre in Texas, USA. Forwarding to Gmail and loading Google Fonts in articles also involve processing by Google, which uses infrastructure in different countries. These services involve processing outside Kosovo. Information about Google’s practices: https://policies.google.com/privacy.
How long we retain enquiries
We retain enquiries that do not become engagements for 6 months from the last substantive communication about the enquiry or quotation. The firm carries out deletion manually, including the copies it manages in the HostGator and Gmail mailboxes. If an enquiry becomes a professional engagement, the relevant records are handled under the agreement and the retention duties applicable to that engagement. Information needed for a legal obligation or dispute may be retained for as long as necessary for that purpose.
Protecting the form
To limit abusive requests, the server processes the IP address and privately stores a pseudonymised identifier, counters and times. That file does not contain the form fields. Expired entries are cleared during subsequent eligible requests; a lack of traffic may delay cleanup. If the file is damaged, an operator may retain a private copy for investigation and recovery. This is technical incident evidence, separate from the 6-month enquiry period, and is deleted when it is no longer needed to resolve the incident or meet an applicable obligation.
Technical logs and backups
Access logs are processed daily and archiving them in the hosting account is disabled. Aggregated statistics may remain longer; daily processing is not a guarantee that every log is deleted within 24 hours. Other provider logs and backups are retained according to the information involved and operational, security, recovery or legal needs. Website-recovery copies managed by the firm are kept for as long as needed for that purpose. Deletion from active mailboxes does not mean immediate removal from every backup.
Comments on articles
When you comment, WordPress processes your name, email, comment and website address if supplied, together with your IP address and browser information for moderation and security. Comments and metadata are stored in the website database. The comment, name and website link may appear publicly. An identifier derived from your email address (a hash) may be sent to Gravatar (Automattic) to retrieve an avatar, which may appear beside your public comment. Service privacy policy: https://automattic.com/privacy/. We keep them while the comment remains published or as needed for moderation, abuse prevention or legal duties. To request removal of a comment or related information, email info@vegaaudit.com.
Cookies and Google Fonts
The main pages use no analytics, advertising or tracking cookies; their fonts and graphics are served locally. The WordPress archive and articles load Google Fonts from Google, which receives your IP address and technical request and browser information to serve them. When commenting, you may choose to save your name, email and website in cookies so you do not have to enter them again. This option is voluntary; you can delete the cookies through your browser. If you choose to remember your commenter details in the browser, the name, email and website cookies last for up to one year.
Your rights
Subject to the conditions in Law 06/L-082, you may request access, correction, deletion, restriction and portability, and object to processing based on legitimate interests. Send your request to info@vegaaudit.com. We may need enough information to verify your identity and protect information against unauthorised disclosure.
Complaints
You may complain to Kosovo’s Information and Privacy Agency: https://aip.rks-gov.net/kontakti/. Contacting the firm first is not a condition for making a complaint.
Decisions and changes
The form is not used for profiling or automated client-acceptance decisions; automated checks are limited to validation and abuse prevention. We update this notice when processing practices change. The version date appears at the top.
Contact