1. Introduction

This Cookie Policy provides detailed information on how Boiken Sh.p.k. (hereinafter referred to as the “Company”) uses cookies and similar tracking technologies when users access or interact with its website and/or digital platform (the “Platform”) associated with the touristic resort “Kep Merli”.

This Policy is an integral part of the Company’s overall data protection framework and must be read in conjunction with the Privacy Policy. The use of cookies is carried out in full compliance with Law no. 124/2024 “On personal data protection” and applicable best practices aligned with European data protection standards.

By accessing the Platform, users are informed about the use of cookies and, where required by law, are requested to provide their consent.

2. Definition of Cookies and Similar Technologies

Cookies are small text files that are placed and stored on a user’s device (computer, smartphone, or other internet-enabled device) when visiting a website. These files allow the website to recognize the user’s device and store certain information regarding their preferences, browsing behaviour, or previous interactions.

In addition to cookies, the Company may use similar technologies such as pixels, tags, scripts, and local storage objects, which perform comparable functions, including tracking user activity and enabling certain features of the Platform.

3. Categories of Cookies Used

The Platform uses different categories of cookies depending on their purpose and functionality.

Strictly necessary cookies are essential for the operation of the Platform and enable core functionalities such as navigation, access to secure areas, and submission of forms. Without these cookies, the Platform cannot function properly.

Performance and analytical cookies are used to collect aggregated information about how users interact with the Platform, including pages visited, time spent, and technical errors encountered. This information is used exclusively to improve the performance and usability of the Platform and does not identify users directly.

Functional cookies allow the Platform to remember choices made by users, such as language preferences or other settings, in order to provide a more personalized experience.

Where applicable, marketing or targeting cookies may be used to deliver relevant content or advertisements and to measure the effectiveness of such content. The use of such cookies is subject to explicit user consent.

4. Consent Mechanism

Cookies that are strictly necessary for the functioning of the Platform may be placed without prior consent. However, all other categories of cookies, including analytical and marketing cookies, require the user’s prior, informed, and explicit consent.

Upon first access to the Platform, users are presented with a cookie banner or consent management tool that allows them to accept all cookies, reject non-essential cookies, or customize their preferences.

Consent must be freely given, specific, informed, and unambiguous. Users have the right to withdraw or modify their consent at any time through the available cookie settings.

5. Purpose of Cookies

The Company uses cookies for several legitimate purposes, including ensuring the proper functioning and security of the Platform, analysing user behaviour in order to improve services, remembering user preferences, and facilitating communication between the user’s device and the Platform.

Cookies also help the Company detect and prevent fraudulent or unauthorized activities and maintain the integrity of its systems.

6. Data Collected Through Cookies

Cookies may collect certain types of data, including IP address, device identifiers, browser type, operating system, geographic location (approximate), date and time of access, pages visited, and interactions with the Platform.

Where such data qualifies as personal data, it is processed in accordance with the Privacy Policy and applicable legal requirements.

The Company does not use cookies to collect personal data beyond what is necessary for the purposes described in this Policy.

7. Third-Party Cookies

The Platform may use third-party services that place cookies on the user’s device, such as analytics providers, hosting services, or embedded content providers.

In such cases, these third parties act either as independent data controllers or as processors on behalf of the Company. The Company takes reasonable steps to ensure that such third parties comply with applicable data protection laws and provide adequate safeguards for personal data.

However, the Company does not have direct control over third-party cookies, and users are encouraged to review the respective privacy and cookie policies of such third parties.

8. Retention of Cookies

Cookies are stored for different durations depending on their type. Session cookies are temporary and are deleted automatically when the user closes their browser. Persistent cookies remain on the user’s device for a predefined period or until manually deleted.

The Company ensures that cookies are not retained for longer than necessary to achieve their intended purpose.

9. Management and Control of Cookies

Users have full control over the use of cookies and may manage their preferences at any time. This can be done through the cookie consent tool available on the Platform or through the settings of their web browser.

Most browsers allow users to block or delete cookies, as well as to receive notifications when cookies are being placed. However, restricting or disabling certain cookies may affect the functionality and performance of the Platform.

10. Security Considerations

The Company implements appropriate technical and organizational measures to ensure that any data collected through cookies is protected against unauthorized access, loss, or misuse.

Despite these measures, users are advised to take appropriate precautions when using online services, including safeguarding their devices and using secure networks.

11. Changes to this Cookie Policy

The Company reserves the right to amend or update this Cookie Policy at any time in order to reflect changes in legal requirements, technological developments, or operational practices.

Any updated version shall be published on the Platform and shall become effective from the date of publication. Continued use of the Platform after such updates shall be deemed as acceptance of the revised Policy.