Privacy Policy and Personal Data Protection Statement

1. Introduction and Purpose

This Privacy Policy and Personal Data Protection Statement (“Policy”) has been prepared to explain the principles governing the collection, processing, storage, protection, and, to the extent necessary, sharing of personal data obtained through the website kosovainvestment.com and all related digital service channels.

2. Data Controller

The data controller for personal data processed within the scope of this Platform is: KS Law Consultancy LLC — Prishtinë, Republic of Kosovo.

3. Categories of Personal Data That May Be Processed

Identity Data: Name, surname, date of birth, citizenship, passport/ID number, signature specimen.

Contact Data: E-mail, telephone, WhatsApp number, address, company contact information.

Customer Transaction Data: Type of service purchased, order details, transaction status, support requests.

Financial Data: Payment status, transaction amount, invoice information, payment provider references.

Company Data: Company name, registration number, field of activity, partnership structure, tax number.

Technical Data: IP address, device information, browser type, login time, security logs.

4. Purposes of Processing Personal Data

• Service provision, user account creation, and contract performance
• Communication, support, and information
• Payment, invoicing, and financial record-keeping
• Legal and regulatory compliance
• Security and risk management
• Service quality and operational improvement
• Protection of legal rights and dispute defence

5. Legal Grounds for Processing Personal Data

The legal bases consist of the formation and performance of a contract, fulfilment of a legal obligation, legitimate interest, and, where necessary, explicit consent or the explicit request of the user.

6. Sharing of Personal Data

The Company does not sell personal data and does not share it in an uncontrolled manner. Where required for the provision of services, data may be shared on a purpose-limited basis with official authorities, professional service providers (accountants, lawyers, translators), technical infrastructure providers, and, in cases of legal obligation, with competent authorities.

Payment Data: Payment transactions are processed by Paysera LT, UAB (www.paysera.com). During the payment process, you are redirected to the Paysera platform, where card details and payment information are collected and processed directly by Paysera in a secure environment. Our company does not directly see or store your credit card information. For Paysera's own privacy policy, please visit: www.paysera.com/privacy

7. Cross-Border Data Transfers

Due to the digital service infrastructure, data may from time to time be processed on servers outside Kosovo. The Company takes reasonable technical and organisational measures and takes care not to unnecessarily duplicate data.

8. Retention Period

Personal data is retained for the duration required by the purpose of processing. When the need for retention ceases, data may be deleted, anonymised, or transferred to an archive system.

9. Data Security

The Company implements reasonable technical and administrative measures such as user access controls, password security, backup systems, SSL/TLS security measures, logging, and the principle of data minimisation.

10. Rights of the User

• To learn whether their data is being processed
• To learn the purposes of processing
• To request the correction of incomplete or inaccurate data
• To request the deletion of data where conditions are met
• To request the restriction of data processing
• To withdraw explicit consent

Requests may be submitted to [email protected].

11. Policy Changes

The Company may update this Policy due to reasons such as changes in legislation, expansion of the service model, or changes in technical infrastructure. The current text shall be effective from the date of its publication on the website.

12. Final Provision

By visiting the platform, creating an account, uploading documents, or benefiting from any service, the User acknowledges that they understand their personal data may be processed in accordance with the principles set forth in this Policy.