Privacy Policy
Last updated 9 September 2026
This policy describes what mims.al does with personal data. The site itself is static and carries no advertising; the only measurement it loads is analytics you have agreed to.
Who is responsible
MIMS, based in Tirana, Albania, is the data controller for this website. You can reach us at [email protected] for anything in this policy, including a request to exercise the rights described below.
What the site collects automatically
Nothing until you say so. mims.al is a set of pre-built static files, and it loads no analytics or advertising until you have agreed to it. Fonts are served from this domain rather than from a font provider, so simply viewing a page does not disclose your visit to anyone else.
Our hosting provider records ordinary technical information when a page is served, such as your IP address, the time of the request and your browser's user agent. This is standard server logging, used to operate and secure the service and to investigate faults. We do not use it to build a profile of you.
Your theme preference
If you use the light/dark switch, your choice is saved in your browser's local storage under the key "theme". This never leaves your device, is not sent to us, and is not shared with anyone. Clearing your browser's site data removes it.
When you contact us
If you email us or use a contact form, we receive what you send: typically your name, your email address and your message. We use it to reply and to discuss the work you are asking about, and for nothing else. We do not sell it, and we do not add you to a marketing list.
Where a contact form is enabled, it submits through a third-party form provider, which processes the message on our behalf in order to deliver it to us.
When you use the contact form
The form is protected by Google reCAPTCHA v3, which scores how likely a submission is to be automated. It loads only once you start filling the form in, not when the page opens, and it reports to Google under their own privacy policy.
Your submission is delivered to us by Brevo, our transactional email provider, acting on our instructions. It contains what you typed: your name, your email address, your message and your phone number if you gave one. We keep the resulting correspondence, not a copy of the form.
The map on the contact page is not loaded until you ask for it. If you choose to show it, OpenStreetMap serves the tiles and will receive your IP address. The address and the directions links work without ever loading it.
How long we keep things
Enquiry correspondence is kept while the conversation is active and for as long as needed afterwards to meet our legal and accounting obligations. Server logs are kept for a short period by our hosting provider under their retention schedule.
Legal basis
Where the GDPR applies, we rely on legitimate interests to operate and secure the website and to answer enquiries, and on the necessity of performing a contract where you become a client.
Analytics runs on consent alone. It is not loaded before you give it, withdrawing it is as easy as giving it, and declining costs you nothing — the site works identically either way.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or object to how we use it, and ask us to transfer it to you or someone else. Write to [email protected] and we will respond within one month.
If you are not satisfied with our answer, you can complain to the Information and Data Protection Commissioner in Albania, or to your local supervisory authority if you are in the EU or EEA.
Other people's trademarks
This site shows the names and logos of organisations we have worked for, in order to describe that work. Those marks belong to their owners and are used to identify the projects, not to imply any endorsement.
Changes
If this policy changes we will update the date at the top of this page. Material changes will be described here rather than made quietly.