Privacy Notice
How HEXATECH SH.P.K. collects, uses, discloses, and protects personal data in connection with this website and our business activities. Last updated: 21 April 2026.
Controller.
HEXATECH SH.P.K., Rruga Agim Ramadani, Hy. C3, Nr. 2, 10000 Prishtina, Republic of Kosovo. NUI: 811493600. We act as the data controller for the personal data we collect through this website and in our business activities.
Data Protection Officer.
You can contact our Data Protection Officer at info@hexatech.biz (attention: Data Protection Officer) and at the postal address above, marked for the attention of the Data Protection Officer. A dedicated DPO email address will be published on this page once appointed.
Categories of personal data we process.
- Contact details you provide via our website forms or in correspondence (name, organisation, email, phone)
- Professional information you share in the context of enquiries, partnerships, or procurement
- Technical data (IP address, browser, device information) for site operation and security
- Cookies and similar technologies as described in our Cookie Policy
- For verified-counterparty access to defence content: identity, affiliation, purpose, and contact-verification data
Lawful bases.
We process personal data on the following lawful bases under GDPR Article 6 and Kosovo Law No. 06/L-082 Article 5:
- Consent — for non-essential cookies and for optional communications.
- Performance of a contract — for processing necessary to supply goods, services, or advisory engagements.
- Legal obligation — for compliance with tax, corporate, export-control, and other regulatory obligations.
- Legitimate interest — for site security, counterparty due diligence, aggregated analytics, and responding to enquiries, subject to balancing against your rights and freedoms.
Your rights.
You have the right to:
- access, rectify, erase, or restrict processing of your personal data;
- object to processing based on legitimate interest;
- data portability where the processing is based on consent or contract;
- withdraw consent at any time, without affecting the lawfulness of prior processing;
- lodge a complaint with the Information and Privacy Agency of the Republic of Kosovo, or with a relevant EU supervisory authority.
Contact us at info@hexatech.biz to exercise these rights. We respond to requests within 30 days.
Retention and security.
We retain personal data only for as long as necessary for the purposes described here and as required by law. We apply appropriate technical and organisational measures — including access controls, encryption in transit, logging, and staff training — to protect personal data against unauthorised access, loss, or alteration.
International transfers.
Where we transfer personal data outside the Republic of Kosovo or the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses, adequacy decisions, or other recognised transfer mechanisms. Details of specific transfers are available on request.
Cookies and analytics.
We use privacy-respecting analytics and do not deploy third-party advertising trackers. See our Cookie Policy for details of cookies set by this site.
Updates.
We may update this Privacy Notice. The current version is published on this page with the last-updated date. This version: 21 April 2026.