1. Introduction
Progon CX ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information you provide when using our website or services. It is governed by the Law of the Republic of Kosovo No. 06/L-082 on Protection of Personal Data, which is closely aligned with the EU General Data Protection Regulation (GDPR).
2. Data Controller
The data controller responsible for your personal data is:
Progon CX
Ferizaj, Kosovo
contact@progoncx.org
3. Data We Collect
We may collect the following personal data when you interact with our website or contact us:
- Full name
- Work email address
- Company name
- Service interest and any information you include in your message
We do not collect sensitive personal data (such as health, financial, or identity document information) through this website.
4. How We Use Your Data
We use your personal data for the following purposes:
- To respond to your enquiry or request for information
- To provide and improve our services
- To maintain records of communications
- To comply with legal obligations
5. Legal Basis for Processing
We process your personal data on the following legal bases:
- Legitimate interests — to respond to your enquiries and manage our business relationship
- Consent — where you have freely given consent by submitting a contact form
- Legal obligation — where required by applicable law
6. Third-Party Services
We use Formspree (formspree.io) to process contact form submissions. When you submit a form, your data is transmitted securely to Formspree and forwarded to our email. Formspree operates under its own Privacy Policy, which we encourage you to review at formspree.io/legal/privacy-policy.
We do not sell, rent, or share your personal data with any other third parties for marketing purposes.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Contact form submissions are typically retained for up to 24 months unless an ongoing business relationship is established.
8. Cookies
Our website does not currently use tracking cookies or third-party analytics tools. If this changes in the future, this policy will be updated accordingly.
9. Your Rights
Under Kosovo's data protection law and the GDPR, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure — to request deletion of your personal data
- Right to restrict processing — to request that we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests
- Right to withdraw consent — at any time, where processing is based on consent
To exercise any of these rights, please contact us at contact@progoncx.org. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data transmissions via our website are encrypted using SSL/TLS.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.
12. Contact & Complaints
If you have any questions about this policy or wish to exercise your rights, please contact us at contact@progoncx.org.
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Kosovo Information and Privacy Agency (IPA) or the relevant supervisory authority in your country of residence.
