Privacy Policy

1. Who is responsible for your data

The data controller is Sharp Minds, Ferizaj, Kosovo ("Sharp Minds", "we", "us"). For any question about this policy or about your personal data, write to arditlimani96@gmail.com or use the contact form.

We process personal data in line with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Kosovo's Law No. 06/L-082 on Protection of Personal Data, which is modelled on the GDPR.

2. What data we collect and why

2.1 Contact form

When you send us a message through the contact form we collect your name, work email address, company name, the service you are interested in, your intended start date, your message and, if you choose to provide them, your phone number and country. We use this data to answer your enquiry and to prepare a proposal. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

2.2 Job applications

When you apply through the application form we collect your name, email address, phone number, the position, your years of experience, your cover letter and, optionally, a link to your portfolio or CV and any additional notes. We use this data to assess your application and to contact you about roles. Legal basis: steps taken at your request prior to entering into an employment contract (Art. 6(1)(b) GDPR) and, where we keep your application for future roles, your consent (Art. 6(1)(a) GDPR).

2.3 Newsletter checkbox

If you tick the box on the contact form asking to be kept informed, we will occasionally email you about Sharp Minds news and insights. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by replying to any such email or writing to us.

2.4 Server logs

Our hosting provider records technical information for every request to the website: IP address, date and time, requested page, browser type and referring page. These logs are used to keep the site secure and available and are deleted by the hosting provider according to its standard retention schedule. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

3. Cookies and tracking

This website does not set cookies and does not use analytics, advertising or social media trackers. It does not store information in your browser. Fonts and all other assets are served from our own domain, so opening a page does not send a request to any third party. Because no consent is required for anything the site does, there is no cookie banner.

If we add analytics or other third-party tools in the future we will update this policy first and ask for your consent where the law requires it.

4. Who receives your data

We do not sell personal data. We share it only with the service providers we need to run the website and answer you:

• Hostinger, which hosts the website and keeps the server logs described above.
• EmailJS, which transmits the contents of the contact and application forms from your browser to our mailbox. EmailJS does not store form contents beyond what is needed for delivery.
• Our email provider, where the messages you send us are stored.

We may also disclose personal data where the law requires it or to protect our legal rights, and to a successor in the event of a merger or sale of the business.

5. International transfers

Sharp Minds is based in Kosovo. Some of the providers listed above process data in the European Union or the United States. Where personal data leaves the European Economic Area we rely on the safeguards provided for in the GDPR, in particular the European Commission's Standard Contractual Clauses, or on an adequacy decision where one applies.

6. How long we keep your data

• Contact enquiries: up to 24 months after our last exchange, unless a contract follows, in which case the data is kept for the duration of the relationship and the retention periods required by tax and commercial law.
• Job applications: 12 months after the application, unless you ask us to delete it earlier or a longer period is agreed with you.
• Newsletter consent: until you withdraw it.
• Server logs: according to the hosting provider's retention schedule, typically no longer than 30 days.

7. Your rights

Under the GDPR and Kosovo law you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased where there is no longer a legal ground to keep it;
• restrict processing in certain circumstances;
• receive the data you provided to us in a structured, machine-readable format;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting processing carried out before withdrawal;
• lodge a complaint with a supervisory authority.

To exercise any of these rights, email arditlimani96@gmail.com. We respond within one month. The supervisory authority in Kosovo is the Information and Privacy Agency. If you are in the EU you may also contact the data protection authority of your own country.

8. Security

The website is served over HTTPS only. Form data is encrypted in transit. Access to the mailbox that receives enquiries and applications is limited to the people who need it and protected with two-factor authentication. No method of transmission over the internet is completely secure, but we apply appropriate technical and organisational measures to protect the data we hold.

9. Children

Our services are aimed at businesses and adult job seekers. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We update this policy when our processing changes. The date at the top shows the latest version. Material changes will be highlighted on this page.