Privacy Policy

The data controller responsible for your personal data is:

• Aksion Zone
• Rruga Tre Dëshmorët, Senik 24050, Republic of Kosovo
• Phone / WhatsApp: +383 49 329 503
• Email: edisonzulfaj@outlook.com

When you book an activity, we collect the information you provide in the booking form:

• your full name;
• your email address;
• your phone number;
• your WhatsApp number (optional);
• booking details (activity, date, time, number of participants and add-ons such as the BBQ option);
• your preferred language, used to send emails in your language;
• a promo, combo or referral code, if you use one.

When you contact us through the contact form, we collect your name, contact details and the content of your message.

When you visit the website, we collect limited technical data (such as pages visited and approximate region) through privacy-friendly, cookieless analytics. This data is aggregated and cannot be used to identify you.

Online payments are processed by Raiffeisen Bank Kosovo through its RaiAccept payment service. Your card details are entered directly on the bank's secure payment page — we never receive, process or store your card number. Raiffeisen Bank processes your payment data under its own privacy policy, available at www.raiffeisen-kosovo.com.

We receive from the bank only a confirmation of whether your payment succeeded, together with the order reference and amount, so that we can confirm your booking.

We use your personal data to:

• process and manage your booking (performance of a contract);
• send booking confirmations, the email verification link, payment links and reminders;
• contact you if something about your booking changes;
• respond to your questions and requests;
• keep records required by accounting and tax legislation (legal obligation);
• prevent fraud and misuse of promotions and keep the website secure (legitimate interest).

We do not use your data for automated decision-making and we do not send marketing emails without your consent.

We share your data only with the service providers we need to run our booking service:

• Raiffeisen Bank Kosovo (RaiAccept), for processing online payments;
• our email delivery provider, which sends booking confirmations on our behalf;
• our hosting provider, which hosts the website and its database.

These providers act as data processors on our instructions. We may also disclose data where required by law or by a competent authority. We never sell your personal data.

Booking records are kept for as long as necessary to provide the service, and afterwards for the period required by accounting and tax legislation. Contact-form messages are kept until your inquiry is resolved. Data that is no longer needed is deleted or anonymized.

The website uses only technically necessary cookies and browser storage — for example to remember the progress of your booking while you complete it and to keep administrators logged in. We do not use advertising or cross-site tracking cookies.

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• ask for your data to be deleted;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise these rights, contact us using the details above. You also have the right to lodge a complaint with the Information and Privacy Agency of the Republic of Kosovo.

Our activities have minimum age requirements and bookings may only be made by adults (18+). We do not knowingly collect personal data from children online. Participation of minors is arranged by their parent or guardian, who provides the booking data.

We protect your data with appropriate technical and organizational measures, including encrypted connections (HTTPS), access controls and hosting with reputable providers. Payments are handled entirely by Raiffeisen Bank's secure payment infrastructure.

We may update this Privacy Policy from time to time. The current version, with its "last updated" date, is always published on this page. Significant changes will be announced on the website.

For any question about privacy or your personal data, contact us at edisonzulfaj@outlook.com or +383 49 329 503.