Last updated: 20 October 2026
1. Who is responsible
Toplana Tours handles the personal data you provide for enquiries and tour bookings. Our contact details are listed at the end of this policy. This notice concerns this website and communications with our team.
2. Information you provide
Booking requests contain your name, WhatsApp number, tour, date, guest count, transport choice and optional notes. The contact form uses your name and message. Please provide only information relevant to your request and avoid sensitive medical details in free-text fields. The website does not request payment card details or process online payments.
3. How the forms work
The forms prepare a message in your browser and open WhatsApp with the information in the link. Opening that link makes the prefilled information available to WhatsApp; the message reaches our team when you send it. The website itself has no booking database and does not submit the form to an internal booking server. You can review the message before sending.
4. Why we use data
We use enquiries and booking details to answer questions, check availability, organise transport and tours, communicate changes and handle requests. Processing is based on steps you request before booking, performance of the booking, applicable legal obligations and legitimate interests such as service security. Where consent is required, you may withdraw it. There is no newsletter subscription or automatic marketing sign-up on this website.
5. Technical data and cookies
The hosting service may process connection data such as IP address, browser information, requested pages and server logs to deliver and protect the site. The website uses the toplana_consent cookie to remember your cookie preferences for approximately 180 days. No analytics or advertising tracking is currently integrated. Photos and fonts are served with the site.
6. Recipients and external services
We use WhatsApp for messages, email for correspondence and hosting services to deliver the website. Booking details may be shared with the team or transport providers as needed to arrange your service, or with authorities where required by law. Facebook, Instagram and map links open external services with their own privacy rules. These services may process data outside Albania or your country under their applicable policies and safeguards.
7. Retention and security
We retain correspondence and booking information only as needed to handle your request, deliver the service and meet applicable accounting or legal requirements, including resolving disputes. Retention depends on the purpose and legal obligations; you may ask us for details. Access should be limited to people who need it for the service. No internet transmission or storage system is completely secure.
8. Your choices and rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your data, object to processing and withdraw consent where processing relies on it. Contact us using the details below. We may need information to verify your identity. You may also complain to the competent data protection authority, including the Commissioner in Albania.
9. Children and updates
A parent or guardian should handle bookings involving children and provide only the details needed to arrange the trip. We do not use this site to profile visitors or make automated decisions with legal or similarly significant effects. We may update this policy when the website or processing changes; the date above indicates the latest version.
10. Contact and privacy requests
Contact Toplana Tours with questions about this policy, data retention or your rights.
Toplana ToursSH25, Koman 4013+355 68 373 0333toplanashalariver@gmail.comhttps://shalarivertravel.com/