What COMMIT collects through this site, why, who sees it, and the choices you have.

Last updated: 23 September 2026

Who is responsible

COMMIT Estate & Holdings, based in Tirana, Albania, is responsible for the personal information described in this notice. For any question about it, email info@commit.al.

What we collect

  • What you send through the contact or seller form: your name, email address, topic and message and, for a sale, the property's location, type and your preferred timeline. If you ask about a listing, we record which one.
  • What you share with an adviser afterwards, by email, phone or in person, to find, buy, sell or rent a property.
  • The technical information your browser sends with every request, such as your IP address, browser type and the pages requested.

The site does not ask for sensitive information such as health, religion or bank details. Please do not include it in your message.

Why we use it

  • To answer your enquiry and take the steps you ask for before any agreement, such as arranging a viewing or valuing your property.
  • To contact you about that enquiry, with the consent you give in the form. You can withdraw it at any time.
  • To run and protect the site and prevent abuse, which is our legitimate interest.
  • To meet our legal obligations, such as accounting, tax and anti-money-laundering rules once a transaction goes ahead.

We do not sell your information, and we send you marketing only if you ask for it.

Who can see it

Your enquiry is recorded in COMMIT's client management system and assigned to an adviser, usually the one responsible for the property you asked about. Only COMMIT staff who need it can access it. We may use software, including AI-assisted tools, to organise enquiries and prepare draft replies. An adviser reviews every reply, and no decision with legal or similarly significant effects is made about you by automated means alone.

Service providers process information on our behalf and under our instructions. Vercel hosts and delivers the site. Supabase stores its records and photographs in Frankfurt, Germany. Our email and messaging providers carry our replies. We share your information with a buyer, seller, developer, notary or public authority only when a transaction requires it or the law obliges us.

Transfers outside Albania

Some of our providers are based outside Albania, including in the European Union and the United States. When your information is transferred or accessed there, we rely on the safeguards required by law, such as standard contractual clauses.

How long we keep it

  • Enquiries that do not lead to a transaction: up to 24 months after our last contact, then deleted or anonymised.
  • Clients who buy, sell or rent through COMMIT: for the length of the relationship, then for as long as accounting, tax and anti-money-laundering law requires.
  • Technical request information: for a short period, by our hosting providers, for security and troubleshooting.

Your rights

Under Albanian data protection law and, where it applies, the EU General Data Protection Regulation, you can:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct or complete it;
  • ask us to delete it, or to restrict how we use it;
  • object to its use for our legitimate interests;
  • receive the information you gave us in a portable format;
  • withdraw your consent at any time, without affecting what was done before.

To use any of these rights, email info@commit.al. We reply within one month and may first ask you to confirm your identity. If you think we have not handled your information properly, you can complain to Albania's Information and Data Protection Commissioner (idp.al).

Your device

The public site sets no cookies and uses no advertising trackers or analytics. It stores your selected Buy, Sell or Invest perspective, property purpose and slider position in local storage on your device, so the site can remember them on your next visit. The staff sign-in area uses only the cookies needed to keep staff signed in.

Your purpose and perspective slider are stored on this device to personalise future visits. Personal enquiry details are not saved.

Your personal brief

The concierge uses your selections to create a rules-based brief. If you choose “Discuss with COMMIT”, the brief is passed to the contact page in the URL. Avoid adding sensitive information to this URL; it can remain in browser history. Contact details are entered only on the contact page and are not saved locally.

Maps & external links

The property map loads satellite imagery from Esri, and a street map from OpenStreetMap when you switch to it. These services receive technical requests, including your IP address, when the map loads. No personal location is requested.

If an enquiry cannot be sent, the page offers an email draft instead, which your own email provider then processes under its terms. Instagram, email applications and linked websites have their own privacy practices.

Security

The site is served over an encrypted connection, the enquiry form limits repeated submissions, and client records can be reached only through individual staff accounts with role-based access. If a breach affects your information, we will notify you and the authority as the law requires.

Children

The site is intended for adults. We do not knowingly collect information from anyone under 18.

Changes to this notice

We update this notice when our services or the law change. The date at the top shows the current version.