Privacy Policy

Last updated: 25 September 2026

NMC Soft respects the privacy of visitors to our website and is committed to handling data in a transparent, limited, and secure manner.

This Privacy Policy explains what data may be processed when you use our website, how we use it, in which cases external service providers may be involved, and what rights you may have regarding your data.

This Policy applies only to the use of our website and does not apply to third-party websites, platforms, or services that may be linked from our site.

1. The nature of our website

Our website is a corporate and informational site. Its purpose is to present the company, its services, projects, professional information, and ways to contact NMC Soft.

We do not require the creation of a user account, we do not offer dedicated areas for clients or registered users, and we do not request payment data through this website.

However, the site may contain contact forms or information-request forms, through which visitors may voluntarily provide us with limited personal data so that we can respond to their requests.

2. Data we may collect through forms

When you fill out a contact form on our site, we may collect the data you voluntarily enter into the form.

Depending on the form, this data may include:

first and last name;
company name;
email address;
phone number;
the message or description of your request;
any other information you choose to include in your communication.

This data is collected only when you choose to send it through the site's forms or through other contact channels.

Please do not include sensitive personal data or information that is not necessary for handling your request in the forms.

3. Data we do not collect

Through this website, we do not request or collect:

data for creating user accounts;
passwords or login credentials;
payment data;
personal identification documents;
sensitive personal data;
financial information;
data for use of a client area or closed platform.

If, in the future, the site includes new features that require additional processing of personal data, this Policy will be updated in line with those changes.

4. Purpose of using data from forms

The data you send us through the contact forms is used only for the purposes for which it was provided.

These purposes may include:

responding to your request;
communicating with you regarding our services;
preparing a response, proposal, quote, or additional information, when requested by you;
managing communication with potential clients, partners, or interested parties;
keeping a reasonable record of communication, where necessary for legal, administrative, or business purposes.

We do not use the data sent through the forms to send you unsolicited marketing communications, except where you have given your clear consent or where this is permitted by applicable law.

5. Standard technical data

During your visit to our site, as with most websites, certain standard technical data may be processed automatically.

This data may include:

IP address;
browser type and version;
device type;
operating system;
referring page, if any;
date and time of access;
pages visited within our site;
technical data about interaction with the site.

This data is used for the normal functioning of the site, security, technical maintenance, statistical analysis, and improving the user experience.

We do not use this data to individually identify visitors, except where this is necessary for site security, preventing abuse, or complying with legal obligations.

6. Analytics and statistics

We may use analytics services, such as Google Analytics or similar services, to understand in general terms how our site is used.

These services may help us analyze:

the number of visitors;
the most visited pages;
the average duration of a visit;
the traffic source;
the type of devices and browsers used;
the technical performance of the site;
how visitors interact with the site's content.

The data collected through these systems is used in a statistical and aggregated form. We do not use analytics to identify individual visitors and we do not create personal profiles of visitors.

Depending on the technical configuration, the providers of these services may process technical data, including the IP address or similar online identifiers.

Where possible, we use configurations that limit the identification of visitors, such as anonymization, data minimization, or limiting the retention period.

7. Cookies and similar technologies

Our site may use cookies or similar technologies for technical, functional, and analytical purposes.

Technical cookies may be necessary for the normal functioning of the site.

Analytical cookies may be used to measure the use of the site and to improve its content, structure, and performance.

We do not use cookies for targeted advertising and we do not use the site to build marketing profiles of visitors.

Visitors can limit or block cookies through their browser settings. Limiting certain cookies may affect the functioning or statistical measurement of the site.

8. External service providers

For the operation and maintenance of our site, we may use external service providers.

These providers may include:

hosting providers;
email service providers;
security services;
analytics systems, such as Google Analytics or similar;
technical tools for managing contact forms;
other technical services necessary for the operation of the site.

These providers may process technical data or data sent through the forms only to the extent necessary to provide the relevant services.

We do not sell, rent, or transfer visitors' personal data to third parties for commercial purposes.

Personal data sent through the contact forms is not shared with third parties, except where this is necessary to:

handle your request;
provide technical services that support the operation of the site;
comply with legal obligations;
protect the rights, property, or legitimate interests of NMC Soft;
prevent abuse, technical attacks, or unauthorized use of the site.

Any processing by external providers is carried out only to the extent necessary and in accordance with the purposes described in this Policy.

10. Data retention

Data sent through the contact forms is kept only for as long as necessary to handle your request and to manage the related communication.

In some cases, data may be kept for a longer period where this is necessary for legal, administrative, or accounting purposes, or to protect our legitimate interests.

Technical and statistical data is kept only for as long as necessary for the purposes for which it was collected, such as the functioning of the site, security, technical analysis, and improving the user experience.

The specific retention periods may depend on the technical configurations of the site, the hosting providers, and the analytics services used.

When data is no longer necessary for the purposes for which it was collected, it is deleted, anonymized, or kept only if required by law.

11. Security

We take reasonable technical and organizational measures to protect the site and the data that may be processed during its use.

These measures are intended to protect data from unauthorized access, unauthorized use, alteration, loss, or destruction.

However, no method of transmission over the internet or electronic storage is completely secure. For this reason, we cannot guarantee absolute security, but we are committed to using appropriate and proportionate measures to protect information.

12. Links to external sites

Our site may contain links to external sites that are not operated by us.

If you click a third-party link, you will be directed to that party's site. We have no control over the content, privacy policies, or practices of external sites and are not responsible for how those sites handle your data.

We recommend reading the privacy policy of every external site you visit.

13. Your rights

Depending on the applicable personal data protection legislation, you may have the right to request:

information about the personal data we hold about you;
access to your personal data;
correction of inaccurate or incomplete data;
deletion of your data, where its retention is no longer necessary;
restriction of the processing of data;
to object to the processing of data in certain cases.

To exercise these rights, you can contact us using the contact details published in this Policy.

We may request additional information to verify your identity before processing the request, where this is necessary and reasonable.

14. WhatsApp Messaging Service

14.1 Who is responsible for your data

NMC Soft provides businesses ("Clients") with a service that lets them receive and answer WhatsApp messages, including automated replies, through the WhatsApp Business Platform operated by Meta.

When you message a Client (for example a shop, a workshop or a restaurant), that Client is the data controller. NMC Soft acts as a data processor on the Client's behalf and processes your data only according to the Client's instructions and our agreement with them.

When you message a WhatsApp number operated by NMC Soft itself, NMC Soft is the data controller.

14.2 Data we process

your WhatsApp phone number and profile name;
the content of the messages you exchange, including any files, images or voice messages you choose to send;
information you provide in the conversation, such as your name, email address, booking or request details;
technical data about messages: date and time, delivery and read status, message identifiers.

We do not receive your WhatsApp contacts, your other chats, or your location unless you share it in the conversation.

14.3 Why we process it

to deliver your messages to the Client and send you their replies;
to generate automated replies and help the Client manage requests, bookings and follow-ups;
to hand a conversation over to a person at the Client when needed;
to keep the service secure, prevent abuse and fix errors;
to comply with legal obligations.

Legal bases: performance of the service you requested from the Client; the legitimate interest of the Client and of NMC Soft in running and securing the service; your consent where required by law.

14.4 Automated replies

Replies may be generated by artificial intelligence systems using the information the Client has made available (for example opening hours, services and prices). Automated replies do not make legal or similarly significant decisions about you, and you can always ask to speak with a person. We do not use the content of your messages to train AI models.

14.5 Service providers

We rely on providers that process data on our behalf under written agreements: Meta Platforms (WhatsApp Business Platform), cloud hosting and database providers, and providers of the AI models used to generate replies. Some of them may process data outside the European Economic Area; in that case transfers are covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses. A current list of providers is available on request.

14.6 How long we keep data

Conversation data is kept for as long as the Client uses our service and for no more than 12 months after your last message, unless the Client instructs us otherwise or a longer period is required by law. After that it is deleted or anonymised.

14.7 Your rights

You can request access to your data, its correction or deletion, restrict or object to its processing, and receive a copy of it. If you messaged a Client, you can contact the Client directly or write to us and we will pass your request on. You can stop receiving messages at any time by blocking the number in WhatsApp or by writing to us. You also have the right to lodge a complaint with the competent data protection authority.

To request deletion of your data, see: Data deletion request

14.8 Security

Data is transmitted over encrypted connections and access is restricted to authorised personnel and systems.

14.9 Contact

NMC Soft, Rruga "Muhamet Gjollesha", building next to Ring Center, Entrance 2, 6th Floor, Apartment No. 16, Tirana, Albania

Email: online@newmedia.al

Phone: +355 67 40 52 561

EU representative under Article 27 GDPR: Alessandro Matteo Angilella, alessandro.angilella@pec-legal.it

15. Marketing communications

We do not use the contact forms to send you unsolicited marketing communications.

If, in any case, the option to subscribe to marketing communications is requested or offered, this will be done only with your clear consent or in accordance with applicable law.

You can withdraw your consent for such communications at any time, where these communications are offered.

16. Changes to this Policy

We may update this Privacy Policy from time to time, for example to reflect technical changes to the site, changes in the services we use, or legal requirements.

The updated version will be published on this page.

Continued use of the site after the changes are published constitutes acknowledgment of the updated version of the Policy.

17. Contact

If you have questions about this Privacy Policy or how data is handled when using our site, you can contact us at: