Privacy Policy
Last updated: September 29, 2026
Introduction
Musée ("we," "us," or "our") operates the website musee.al and provides digital services including AI integration, automation, web and mobile development, growth marketing, and creative production. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or engage our services. We are committed to protecting your privacy in accordance with the Albanian Law on the Protection of Personal Data (Law No. 9887, dated 10.03.2008, as amended), the General Data Protection Regulation (GDPR) where applicable, and other relevant data protection legislation. By using our website or services, you consent to the data practices described in this policy.
Information We Collect
We store the information you submit through our contact form, including your name, email, phone, company and message. When you request an audit, we process the website address or public profile you provide and save the report. Providing an email to receive the report is optional. PDF tools process files locally in your browser; those files are not uploaded to our server. Our traffic measurement stores only daily pageview totals per page, without visitor identifiers or query parameters. Infrastructure providers may keep operational and security logs, including IP addresses.
How We Use Your Information
We use the information we collect for the following purposes: to respond to your inquiries and provide the services you request; to communicate with you about projects, proposals, and service delivery; to improve our website, tools, and services based on usage patterns and feedback; to send you marketing communications (only with your explicit consent, and you can opt out at any time); to analyze website traffic and user behavior through aggregated, anonymized analytics; to comply with legal obligations and protect our legitimate business interests; and to detect, prevent, and address technical issues, fraud, or security concerns. We do not sell your personal information to third parties. We do not use your data to train AI models unless you explicitly engage us for a project that requires it, in which case data handling is governed by a separate project agreement.
Cookies and Traffic Measurement
We use cookies for staff sign-in and session management in the internal dashboard. Our traffic measurement counts pageviews without analytics cookies or tracking individual visitors. This version of the website does not use Google Analytics or marketing cookies. You can manage cookies in your browser settings; blocking session cookies may prevent dashboard sign-in.
Data Sharing and Third Parties
We may share your information with the following categories of third parties, only to the extent necessary: service providers who assist us in operating our website and delivering our services (hosting providers, email services, analytics tools, CRM systems); professional advisors including lawyers, accountants, and auditors where necessary; law enforcement or regulatory authorities when required by applicable law; and business partners in connection with a merger, acquisition, or sale of assets (in which case you would be notified of any change in data handling). All third-party service providers are contractually required to handle your data in accordance with this privacy policy and applicable data protection laws. We conduct due diligence on the data practices of our service providers.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: encryption of data in transit using TLS/SSL; secure storage of data with access controls and encryption at rest; regular security assessments and updates; employee training on data protection practices; and incident response procedures in the event of a data breach. While we take reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but we are committed to maintaining industry-standard protections.
Your Rights
Under applicable data protection laws, you have the following rights regarding your personal data: the right to access your personal data and obtain a copy of the information we hold about you; the right to rectification of inaccurate or incomplete personal data; the right to erasure of your personal data (the "right to be forgotten") in certain circumstances; the right to restrict processing of your personal data; the right to data portability, allowing you to receive your data in a structured, commonly used format; the right to object to processing of your personal data for direct marketing or based on legitimate interests; and the right to withdraw consent at any time where processing is based on your consent. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days. If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Albanian Information and Data Protection Commissioner or the relevant supervisory authority in your jurisdiction.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms. For questions about this Privacy Policy or our data practices, please contact us at [email protected].