Privacy Policy
This Privacy Policy is provided in accordance with Law No. 9887, dated 10.3.2008 of the Republic of Albania, and Article 13 of the European Regulation No. 679/2016, and applies exclusively to all data collected through the website mrbubbo.com.
This Privacy Policy is subject to updates, which will be published in a timely manner on the website. This Privacy Policy, together with the Terms and Conditions, any other documents referenced herein, and the Cookie Policy, establishes the basis on which the personal data of the data subject will be processed.
Data Controller
The Data Controller of the data collected through this website is Mr.Bubbo LLC, with its registered office at Artan Lenja Street, 13-1, Three-Story Villa, First Floor, 1001, Tirana, Albania.
Personal Data
Personal Data refers to any information relating to an identified or identifiable natural person (the Data Subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Categories of Personal Data Processed
Among the Personal Data processed by this website, either independently or through third parties, are common data such as: cookies, usage data, first name, last name, email address, phone number, and tax information necessary for purchases.
Methods of Processing Personal Data
The Personal Data provided or collected will be processed based on the principles of fairness, lawfulness, transparency, and the protection of confidentiality, in accordance with applicable regulations.
The Owner processes Users’ Personal Data by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of the Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes.
a) Purpose of Processing Personal Data and Legal Basis
Personal Data may be collected independently by the Owner or through third parties. In this case, the IT systems and software procedures used to operate this website acquire certain technical and IT-related personal data of users (e.g., IP address, type of browser used, operating system, domain name, and addresses of websites from which access is made or exited, etc.), the transmission of which is inherent in the normal operation of the Internet. Such data may be processed solely for the purpose of obtaining anonymous statistical information regarding the use of the site and/or to ensure its correct functioning and will be deleted immediately after processing.
The data that the Data Subject voluntarily chooses to provide will be processed in accordance with the lawfulness conditions under Article 6 of the GDPR and will be used to enable the website to provide its services, as well as for the purposes indicated below, and will be stored for the time necessary to fulfill the aforementioned purposes.
b) Processing Necessary for the Performance of a Contract
The data will be processed to fulfill obligations arising from the contract entered into between the Data Subject and the Owner for the sale of services available on the Website, to contact the Data Subject regarding the contract, to manage requests related to legal warranties, assistance, withdrawal requests, management and resolution of the contract itself, as well as for purposes related to the registration procedure aimed at purchasing and using the services of the Data Controller.
Legal Basis: This processing is necessary for the performance of a contract to which the Data Subject is a party, for the execution of pre-contractual measures, or for compliance with a legal obligation to which the Data Controller is subject.
Data Retention Period: 10 (ten) years or as otherwise required by legal obligations.
c) Compliance with Legal Obligations
The data will be processed to fulfill any type of obligation established by current laws, relevant regulations, commercial practices, and tax/fiscal matters, including purposes established by legislation on anti-money laundering (Legislative Decree 231/2007 and subsequent amendments).
Legal Basis: This processing is necessary for compliance with a legal obligation to which the Data Controller is subject.
Data Retention Period: 10 (ten) years or as otherwise required by legal obligations.
d) Soft Spam
The data will be processed to allow the Owner to send the Data Subject commercial and promotional communications via email regarding Products and/or Services similar to those already purchased, without the need for the prior express consent of the Data Subject, as provided under Article 130, paragraph 4, of the Privacy Code as amended by Legislative Decree No. 101 of 2018, provided that the Data Subject does not exercise their right to object.
Legal Basis: This processing is based on the legitimate interest of the Data Controller pursuant to Article 6, letter f) and Recital 47 of the GDPR.
Data Retention Period: Until the Data Subject objects.
e) Direct Marketing
The data will be processed for the direct sale of Products/Services, market research, and the sending of promotional, commercial, and advertising communications or materials related to initiatives and events, through newsletters, email, SMS, WhatsApp, chat, direct messages via social media, social networks, or via phone calls, postal mail, and other informational materials.
Legal Basis: This processing is based on the freely given consent of the Data Subject under Article 6, paragraph 1, letter a) of the GDPR.
Data Retention Period: Until consent is withdrawn.
f) Statistics
The data will be processed to perform statistical analyses on aggregate and anonymous data in order to analyze the behavior of the Data Subject and improve the products and services offered by the Data Controller, as well as to better meet the expectations of the Data Subject.
Legal Basis: This processing is based on the freely given consent of the Data Subject.
Data Retention Period: Until consent is withdrawn.
g) Profiling
The data will be processed for the analysis and evaluation of interests, habits, and consumption choices, including the creation of profiles, in order to send personalized information and promotional materials about the Services/Products offered by the Data Controller.
Legal Basis: This processing is based on the freely given consent of the Data Subject pursuant to Article 6, paragraph 1, letter a) of the GDPR.
Data Retention Period: Until consent is withdrawn.
Data Communication
In addition to the Owner, in some cases, the following parties may have access to the data:
a) categories of personnel specially trained and involved in the organization of the website (administrators, commercial staff, marketing, legal, system administrators);
b) external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) who are also appointed as Data Processors by the Data Controller in accordance with Article 28 of the GDPR. An updated list of Data Processors, if appointed, can always be requested from the Data Controller;
c) public or private entities that may access the data in compliance with legal obligations;
d) entities carrying out support and instrumental tasks related to the activity of the Data Controller.
Data Retention Periods
As expressly provided by Article 5, paragraph 1, letter e) of the GDPR, data is stored for the time necessary to fulfill the purposes for which it was collected, specifically related to the performance of the requested service or as required by the purposes described above in this document.
At the end of the retention period, Personal Data will be deleted, and consequently, the rights of access, erasure, rectification, and data portability can no longer be exercised.
Cookies
This website uses cookies. Cookies are small text files that websites can use to make the user experience more efficient and to personalize content and advertisements, provide social media features, and analyze traffic.
Cookie Policy
Place of Data Processing and Data Transfer Abroad
The data is processed at the operational headquarters of the Owner. For further information, you may contact the Data Controller. Data may be processed by individuals and/or legal entities acting on behalf of the Data Controller and in accordance with specific contractual obligations, whether located within EU member states or outside the EU.
In the event that data is transferred outside the EEA (European Economic Area), the Data Controller will adopt all appropriate contractual measures to ensure an adequate level of data protection.
Exercise of Data Subject Rights
The Data Subject has the right to exercise the rights provided under Articles 7 and 15–22 of European Regulation 679/2016 (GDPR). In particular, the Data Subject has the right to withdraw consent at any time and, by making a simple request to the Data Controller, may request access to Personal Data, obtain the Personal Data, and, where possible, transmit it to another controller without hindrance (so-called data portability).
The Data Subject also has the right to request the updating, restriction of processing, rectification, or deletion of Personal Data processed in breach of applicable law.
For legitimate reasons, the Data Subject has the right to object to the processing of their Personal Data, as well as to object to processing for purposes of sending advertising materials, direct sales, or market research.
Additionally, the Data Subject has the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali) or to seek judicial remedy before the competent courts.
The Data Subject may exercise these rights by contacting the Data Controller at: info@mrbubbo.com.
Tools Used for the Processing of Personal Data
Contact Form
By filling out the contact form with their Personal Data, the Data Subject consents to the use of such information to respond to requests for information, or for any other purposes indicated by the form’s title.
Personal Data collected through the contact form: Email, Name, and Phone Number.
Contact Form 7 (Rock Lobster LLC)
This is a form creation and management service that allows this website to incorporate such content within its pages.
Personal Data collected: Email and Name. Various types of data as specified in the Privacy Policy of the service.
Place of processing: Japan – Privacy Policy
Contact Tools
WhatsApp Business
WhatsApp Business is an instant messaging service provided by WhatsApp Ireland Limited. For details on the data processing methods, please also refer to WhatsApp’s Business Data Processing Terms available at the following link:
https://www.whatsapp.com/legal/business-data-processing-terms/.
The Data Subject’s information will be transmitted through WhatsApp Business services under the conditions reported in the “WhatsApp Business Terms of Service” available at:
https://www.whatsapp.com/legal/business-terms/.
Personal Data collected: phone number, email address, usage data, and cookies.
Place of processing: Ireland – Privacy Policy.
Chat Service
To manage information requests from users, this website uses a chat service provided by:
Tawk.to (tawk.to Inc.)
Tawk.to is an online messaging service that allows communication with users visiting the website, monitoring the performance of chats, personalizing the messages displayed to users, and blocking users if necessary.
Place of processing: USA – Privacy Policy
Email Address Management
These services allow the management of a database of email contacts, phone contacts, or contacts of any other type used to communicate with the Data Subject. These services may also allow the collection of data concerning the date and time when the Data Subject views messages, as well as their interactions with the messages, such as information about clicks on links included in the messages.
Newsletter
By registering for the newsletter, the Data Subject’s email address will be automatically added to a list of contacts to whom email messages containing information, including commercial and promotional information related to this website, may be sent.
The Data Subject’s email address may also be added to this list as a result of registering on the website or making a purchase.
The Data Subject can unsubscribe from the newsletter at any time by clicking a specific button found in the email. After clicking the unsubscribe button, the Data Subject’s information will be immediately deleted from the “email marketing” software.
Personal Data collected: email address and name.
This website uses the newsletter service provided by:
Mailchimp (The Rocket Science Group)
Mailchimp is a service that organizes and analyzes the distribution of newsletters. If a Data Subject does not want their data to be processed by Mailchimp, they must unsubscribe from the newsletter. For this purpose, a link is provided in each newsletter.
Personal Data collected: email address and name.
Place of processing: USA – Privacy Policy
Sendinblue (Sendinblue SAS)
Sendinblue is a service that organizes and analyzes the distribution of newsletters. If a Data Subject does not wish for their data to be processed by Sendinblue, they must unsubscribe from the newsletter. For this purpose, a link is provided in each newsletter.
Personal Data collected: Email and Name.
Place of processing: France – Privacy Policy
Adopted Security Measures
This website, to ensure the secure transmission of Personal Data, uses an SSL certificate and the HTTPS protocol.
By using this protocol, transactions and transmitted data are conducted with maximum security, and the contents of communications cannot be read or altered in any way by third parties.
reCAPTCHA
This website uses reCAPTCHA, a service that is subject to Google’s Privacy Policy and Terms of Service.
Registration
Through the registration service, the Data Subject allows the website to identify them and provide access to dedicated services.
Registration and authentication services may also be provided by third parties. In such cases, the application will be able to access certain Data stored by the third-party service used for registration and authentication.
Direct Registration
The Data Subject registers directly on the website by filling out the form and providing their Personal Data.
Indirect Registration
The Data Subject accesses the website through:
Facebook Connect (Meta Platforms Inc.)
Facebook Connect is a service provided by Meta Platforms Inc. that facilitates and integrates the connection of the website with the Facebook social network.
This website may request certain permissions from Facebook, allowing it to perform actions with the Data Subject’s Facebook account and collect information, including Personal Data, from it.
For more information on the permissions granted, the Data Subject may refer to Facebook’s Privacy Policy.
Login with Google Account (Google Ireland Limited)
This service, provided by Google Ireland Limited, allows this website to connect with the Data Subject’s Google account.
Personal Data collected: Various types of data as specified in the service’s privacy policy.
Place of processing: Ireland – Privacy Policy
Statistics
Statistics services allow the Data Controller to exclusively monitor and analyze website traffic data and track the behavior of the Data Subject.
This website uses the following services:
Google Analytics (Google Ireland Limited)
Google Analytics is an analytics service provided by Google Ireland Limited.
Google uses the Personal Data collected to track and examine the use of this website, to compile reports, and to share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its advertising network.
Google may also transfer this information to third parties where required by law or where such third parties process the information on Google’s behalf.
The IP anonymization feature is active on this website. The IP address transmitted by the browser for Google Analytics purposes will not be merged with other data already held by Google.
The browser add-on for deactivating Google Analytics is available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Google Search Console (Google Ireland Limited)
Google Search Console is an analytics service provided by Google Ireland Limited.
Google uses the Personal Data collected to track and examine the use of this website, compile reports, and share them with other services developed by Google.
Google may also use the Personal Data to contextualize and personalize ads on its advertising network.
Moreover, Google may transfer the information to third parties where required by law or where such third parties process the information on Google’s behalf.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Hotjar (Hotjar Ltd)
Hotjar is a statistical service that allows the Data Controller to monitor customer conversions and record sessions.
The “Do Not Track” browser add-on is available from Hotjar at the following link: https://www.hotjar.com/privacy/do-not-track/.
Personal Data collected: Cookies; Usage Data.
Place of processing: Malta – Privacy Policy
Clarity (Microsoft Ireland Operations Limited)
Clarity is a service that allows the Data Controller to monitor customer conversions.
Personal Data collected: Cookies; Usage Data.
Place of processing: Ireland – Privacy Policy
Smartlook (Smartlook.com s.r.o.)
Smartlook is a service that allows the Data Controller to monitor customer conversions.
Personal Data collected: Cookies; Usage Data.
Place of processing: Czech Republic – Privacy Policy
TAG Management
Google Tag Manager (Google Ireland Limited)
This is a service that allows for the management and monitoring of all third-party tags on the website to gather information about the Users’ interests in the site itself and consequently improve the quality of the content.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Interaction with Social Networks
These services allow interaction with social networks directly from the pages of this website.
The interactions and information obtained through this website are always subject to the privacy settings of the Data Subject related to each social network.
If a service for interacting with social networks is installed, it may still collect traffic data regarding the pages on which it is installed, even if Users do not actively use the service.
1.Facebook (Meta Platforms, Inc.)
Facebook buttons are interaction services with the Facebook social network, provided by Meta Platforms, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
2.Instagram (Meta Platforms, Inc.)
Instagram buttons are interaction services with the Instagram social network, provided by Meta Platforms, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
3.LinkedIn (LinkedIn Ireland Unlimited Company)
LinkedIn buttons are interaction services with the LinkedIn social network, provided by LinkedIn Corporation.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
4.Twitter (Twitter International Company)
Twitter buttons are interaction services with the Twitter social network, provided by Twitter, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
5.Telegram (Telegram UK Holdings Ltd)
Telegram buttons are interaction services with the Telegram communication service, provided by Telegram UK Holdings Ltd.
Personal Data collected: Cookies and Usage Data.
Place of processing: United Kingdom – Privacy Policy
6.TikTok (TikTok Technology Limited)
TikTok buttons are interaction services with the TikTok social network, provided by TikTok Technology Limited.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Remarketing and Retargeting
These services allow this website to communicate, optimize, and serve advertisements based on the past use of this website by the Data Subject.
This activity is carried out through the tracking of Usage Data and the use of Cookies.
This website uses the following services:
The information collected is anonymous to the operators of this website and cannot be used to identify individual Data Subjects.
However, the information is stored and analyzed by Facebook, which may associate the information with a specific user profile and use it for its own internal advertising purposes, as described in Facebook’s Privacy Policy.
This allows Facebook to display ads both on Facebook itself and on third-party websites.
The Owner of this website has no control over how Facebook uses this data.
For more information on how users can protect their privacy, please refer to Facebook’s Privacy Policy.
Google ADS
Google ADS is a service provided by Google Ireland Limited that connects this website to Google’s advertising network.
This website uses Google Analytics Remarketing features combined with Google ADS’ cross-device capabilities.
This feature allows audience groups created by Google Analytics Remarketing to be linked to Google ADS cross-device marketing functionalities.
It enables the display of advertisements based on the personal interests of the Data Subject, identified through the analysis of their behavior on the web, whether accessed via mobile device or other devices.
You can permanently opt out of Google’s personalized advertising by disabling the “personalized advertising” option in your Google Account.
You can do this by following this link: https://www.google.com/settings/ads/onweb/
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company)
This website uses a script called the “LinkedIn Insight Tag.”
The LinkedIn Insight Tag adds a cookie to users’ browsers whenever they visit this website.
Thanks to this tool, the Owner can track when a LinkedIn member performs specific actions on the website (such as booking a service or submitting an email address).
This tool is used to collect statistical data that helps measure the effectiveness of paid advertising campaigns.
The LinkedIn Insight Tag allows the Owner to understand the actions that users perform on the website.
The collected data is used to:
This website uses the LinkedIn Insight Tag for “remarketing” and “retargeting” activities; cookies are used for these activities based on the Data Subject’s browsing without identifying the individual.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Instagram Remarketing (Meta Platforms, Inc.)
Instagram Remarketing is a service provided by Meta Platforms, Inc., that connects the activity of this website with the Instagram advertising network.
This website uses the Pixel tool to measure conversions and understand the actions people take on the site.
The information collected is anonymous to the operators of this website and cannot be used to identify individual Data Subjects.
However, the information is stored and analyzed by Facebook, which may associate the data with an individual profile and use it for internal advertising purposes as described in Facebook’s Privacy Policy.
For more information on how users can protect their privacy, please refer to Instagram’s Privacy Policy.
TikTok Ads (TikTok Technology Limited)
TikTok Ads is a remarketing service provided by TikTok Technology Limited that connects the activity of this website with the TikTok advertising network.
This website uses the pixel tracking tool to measure conversions and understand the actions users perform on the site.
For more information on how users can protect their privacy, please refer to TikTok’s Privacy Policy.
Twitter Ads (Twitter International Company)
Twitter Ads is an advertising service provided by Twitter International Company.
Twitter Ads allow advertisers to purchase promoted tweets to reach a specific target audience, identified based on the specific products/services offered by the advertiser.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
Content on External Platforms
These services allow the display of content hosted on external platforms directly from the pages of this website and enable interaction with such content.
If a service of this kind is installed, it may still collect traffic data related to the pages where it is installed, even if Users do not actively use the service.
This website uses:
Google Maps
Google Maps is a map visualization service managed by Google that allows this website to integrate such content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
YouTube (Google Ireland Limited)
YouTube is a video content viewing service managed by Google that allows this website to integrate such content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
@2025 mrbubbo.com | all rights reserved
NIPT: M02220014A