Vantage Twentysix

Last updated 12 October 2026

YOUR DATA,
YOUR CALL.

Our privacy policy, in plain words. What we collect, why, and how you stay in control.

THE SHORT VERSION

Who is responsible

The company responsible for your personal data on this website is:

VANTAGE TWENTYSIX SH.P.K.
Nebih Gashi 3, Prishtinë, Kosovo
Unique identification number: 812474071
hello@vantagetwentysix.com

We follow the EU General Data Protection Regulation (GDPR) and Kosovo’s Law No. 06/L-082 on the Protection of Personal Data. For any question about your data, just write to us.

Visiting the website

When you open the website, your browser automatically sends some technical information: your IP address, the date and time, the page you asked for, the page you came from, and your browser and operating system. This is needed to show you the website, keep it secure and fix errors.

We don’t set cookies and don’t use analytics, advertising or social media tracking. That’s why there is no cookie banner.

Legal basis
Legitimate interest in a secure, working website (Art. 6(1)(f) GDPR)
Kept for
A short period in the hosting provider’s server logs, then deleted

Contact form

When you send us a message, we receive your name, email address, company (optional) and your message. We use it only to reply and, if it leads somewhere, to plan a project with you.

Legal basis
Steps before a contract (Art. 6(1)(b)) and our interest in answering enquiries (Art. 6(1)(f) GDPR)
Kept for
Until your enquiry is dealt with, at most 2 years after our last contact. Longer if it becomes a contract

Newsletter

When you sign up, we use your email address to send you news about our work. You can unsubscribe at any time, through the link in every newsletter or by emailing us.

Legal basis
Your consent (Art. 6(1)(a) GDPR)
Kept for
Until you unsubscribe

Job applications

When you apply through our careers page, we receive what you fill in: your name, email, phone, location, the position, your CV and portfolio (as uploaded PDFs or links), your LinkedIn link, your motivation and your answers to the role’s questions (such as experience, salary expectation and start date).

Only the people hiring for the role see it, and we use it only for that hiring process. Please leave out sensitive information, such as health details, unless it’s needed.

Legal basis
Steps before an employment contract (Art. 6(1)(b) GDPR)
Kept for
6 months after the hiring process ends, or longer if you agree we may consider you for future roles. If we hire you, it goes into your personnel file

Services we use

A few providers help us run the website. Each one handles data only on our behalf and for this purpose.

Firebase Hosting
Hosts the website and receives the technical data above. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Adobe Fonts
Delivers our typeface, so your browser connects to Adobe and shares your IP address. No cookies. Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.
Cloud Firestore
Stores what you send through our three forms, in a database in Frankfurt, Germany. Only our team can read it. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google reCAPTCHA
Checks that a form is sent by a person and not a bot, through Firebase App Check. It only runs when you send a form, and Google receives technical data about your browser and device, such as your IP address. Google Ireland Limited, same address as above.
Cloud Storage
Stores the CV and portfolio you upload with a job application, on Google servers in the United States (South Carolina). Only our team can open it, and it is deleted automatically after 6 months at the latest. Google is certified under the EU–US Data Privacy Framework, and the transfer is also covered by the EU Standard Contractual Clauses in Google’s data processing terms (Art. 45 and 46 GDPR). Google Ireland Limited, same address as above.

Some of these providers are based in the USA or have parent companies there. When data leaves the EU, we rely on the EU Standard Contractual Clauses or, where the provider is certified, the EU–U.S. Data Privacy Framework. Ask us if you’d like a copy.

Legal basis
Legitimate interest in running and delivering the website (Art. 6(1)(f) GDPR)

Who else sees your data

Nobody, apart from the providers above. We don’t sell your data or share it with others for their own purposes. The only exceptions are when the law requires it, or when a company in our group needs it to answer your enquiry or fill a role, under the same protections.

Your rights

You can ask us at any time to:

  • show you the data we hold about you
  • correct it
  • delete it
  • limit how we use it
  • give it to you in a portable format
  • stop using it based on our interests

You can also withdraw any consent you gave. Just email hello@vantagetwentysix.com. These rights come from Articles 15 to 21 of the GDPR.

If you think we’ve handled your data wrongly, you can complain to a data protection authority, for example in the EU country where you live or work, or to Kosovo’s Information and Privacy Agency (Agjencia për Informim dhe Privatësi).

Security

The website only runs over an encrypted connection (HTTPS). We protect the data we receive with suitable technical and organisational measures, and only the people who need it have access.

Changes to this policy

We update this page when our website or the law changes. The date at the top always shows the latest version.

QUESTIONS?

Write to us at hello@vantagetwentysix.com.

LET’S TALK.

What do you need?
Team size

We use your details only to reply to your message. See our Privacy Policy.