Last updated 12 October 2026
YOUR DATA,
YOUR CALL.
Our privacy policy, in plain words. What we collect, why, and how you stay in control.
THE SHORT VERSION
- NO COOKIESNothing is stored in your browser, so there’s no cookie banner.
- NO TRACKINGNo analytics, no ads, no social media pixels.
- NEVER SOLDWe only see what you send us, and it stays with us.
- YOURS TO DELETEAsk us any time to see, correct or delete it.
Who is responsible
The company responsible for your personal data on this website is:
VANTAGE TWENTYSIX SH.P.K.Nebih Gashi 3, Prishtinë, Kosovo
Unique identification number: 812474071
hello@vantagetwentysix.com
We follow the EU General Data Protection Regulation (GDPR) and Kosovo’s Law No. 06/L-082 on the Protection of Personal Data. For any question about your data, just write to us.
Visiting the website
When you open the website, your browser automatically sends some technical information: your IP address, the date and time, the page you asked for, the page you came from, and your browser and operating system. This is needed to show you the website, keep it secure and fix errors.
We don’t set cookies and don’t use analytics, advertising or social media tracking. That’s why there is no cookie banner.
- Legal basis
- Legitimate interest in a secure, working website (Art. 6(1)(f) GDPR)
- Kept for
- A short period in the hosting provider’s server logs, then deleted
Contact form
When you send us a message, we receive your name, email address, company (optional) and your message. We use it only to reply and, if it leads somewhere, to plan a project with you.
- Legal basis
- Steps before a contract (Art. 6(1)(b)) and our interest in answering enquiries (Art. 6(1)(f) GDPR)
- Kept for
- Until your enquiry is dealt with, at most 2 years after our last contact. Longer if it becomes a contract
Job applications
When you apply through our careers page, we receive what you fill in: your name, email, phone, location, the position, your CV and portfolio (as uploaded PDFs or links), your LinkedIn link, your motivation and your answers to the role’s questions (such as experience, salary expectation and start date).
Only the people hiring for the role see it, and we use it only for that hiring process. Please leave out sensitive information, such as health details, unless it’s needed.
- Legal basis
- Steps before an employment contract (Art. 6(1)(b) GDPR)
- Kept for
- 6 months after the hiring process ends, or longer if you agree we may consider you for future roles. If we hire you, it goes into your personnel file
Services we use
A few providers help us run the website. Each one handles data only on our behalf and for this purpose.
- Firebase Hosting
- Hosts the website and receives the technical data above. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Adobe Fonts
- Delivers our typeface, so your browser connects to Adobe and shares your IP address. No cookies. Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.
- Cloud Firestore
- Stores what you send through our three forms, in a database in Frankfurt, Germany. Only our team can read it. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Google reCAPTCHA
- Checks that a form is sent by a person and not a bot, through Firebase App Check. It only runs when you send a form, and Google receives technical data about your browser and device, such as your IP address. Google Ireland Limited, same address as above.
- Cloud Storage
- Stores the CV and portfolio you upload with a job application, on Google servers in the United States (South Carolina). Only our team can open it, and it is deleted automatically after 6 months at the latest. Google is certified under the EU–US Data Privacy Framework, and the transfer is also covered by the EU Standard Contractual Clauses in Google’s data processing terms (Art. 45 and 46 GDPR). Google Ireland Limited, same address as above.
Some of these providers are based in the USA or have parent companies there. When data leaves the EU, we rely on the EU Standard Contractual Clauses or, where the provider is certified, the EU–U.S. Data Privacy Framework. Ask us if you’d like a copy.
- Legal basis
- Legitimate interest in running and delivering the website (Art. 6(1)(f) GDPR)
Your rights
You can ask us at any time to:
- show you the data we hold about you
- correct it
- delete it
- limit how we use it
- give it to you in a portable format
- stop using it based on our interests
You can also withdraw any consent you gave. Just email hello@vantagetwentysix.com. These rights come from Articles 15 to 21 of the GDPR.
If you think we’ve handled your data wrongly, you can complain to a data protection authority, for example in the EU country where you live or work, or to Kosovo’s Information and Privacy Agency (Agjencia për Informim dhe Privatësi).
Security
The website only runs over an encrypted connection (HTTPS). We protect the data we receive with suitable technical and organisational measures, and only the people who need it have access.
Changes to this policy
We update this page when our website or the law changes. The date at the top always shows the latest version.
QUESTIONS?
Write to us at hello@vantagetwentysix.com.