Your privacy, clearly explained.

This policy explains data processing on this website. Separate information about client files and legal representation is provided when engaging the firm.

01 · Who is responsible

The controller is Anton Leka P.F., NUIS/tax number M57516504E, operating under the public name Studio Ligjore Leka / Av. Anton Leka. Registered address according to the certificate dated 2 July 2026: Tresh, Lezhë, cadastral zone no. 3641, property no. 14/101.

For privacy enquiries and data requests: studioligjore.a.leka@gmail.com or +355683508007. Contact offices: Tirana, Rruga “Mine Peza”; Lezhë, Rruga “Frang Bardhi”.

02 · Visits and website security

The website is hosted through ChatGPT Sites / OpenAI, using Cloudflare infrastructure for operation and protection. Technical information such as IP addresses, requests, access times and browser information is processed to deliver and secure the service. Not storing readable IP addresses in the assistant database does not mean that hosting does not process IP addresses or technical logs.

The website does not include its own advertising or marketing tracking mechanisms. Cloudflare may set security cookies such as __cf_bm, which its documentation says expires after 30 minutes of inactivity. Necessary security features do not enable marketing. Links to maps and social networks open external services governed by their own policies.

03 · Contact and WhatsApp

The form prepares your name, matter area, office, preferred time and description in your browser. This website does not store those entries in its database. Clicking “Continue to WhatsApp” includes the text in a link to WhatsApp/Meta and transfers it to that service; you confirm final sending to the lawyer inside WhatsApp.

The text may also remain in your browser or WhatsApp history. Do not include documents, identification numbers, health data or confidential details. Email and calls are also processed by their respective providers. Communications received by the firm are handled for your enquiry and, where necessary, professional and legal obligations.

04 · The AI assistant is optional

Only after you agree to processing and submit a question are the text and conversation context from that session sent to OpenAI for safety screening and a response. Do not include personal or confidential data. You can contact the lawyer directly without using AI.

The application does not store conversation text in its database; it remains in browser page state until reload or navigation away. Requests use store:false, but this does not mean zero provider retention: under its standard configuration OpenAI may retain abuse-monitoring logs for up to 30 days, subject to exceptions in its documentation. Zero Data Retention has not been verified as enabled for this account.

Cloudflare D1 stores counters, request times, costs and HMAC identifiers derived from IP addresses for quota control, not readable IP addresses. These are pseudonymous identifiers, not anonymous data. The limit is 3 attempts per 24 hours and a global USD 10 monthly budget; users on the same network may share a quota. A status check may calculate the technical identifier even without a question being submitted, but does not send a question to OpenAI.

Responses may be inaccurate. They are not legal advice, do not create a lawyer–client relationship and do not guarantee results. Automated restrictions affect AI use only, not the ability to contact the firm; no legal decisions about visitors are made.

05 · Purposes and legal bases

Under Law no. 124/2024, consultation enquiries are handled to take pre-contractual steps you request; security, operation and abuse prevention rely on legitimate interests, balanced against your rights. Separate consent is requested for optional AI question processing. Professional or legal obligations apply where necessary.

You can withdraw consent for future questions by unchecking the option in the assistant or no longer using it. This does not undo previous processing or affect its lawfulness. Contact us to exercise rights regarding data already submitted.

06 · Recipients, transfers and retention

Relevant recipients are the firm, OpenAI for ChatGPT Sites hosting and the separate AI service, Cloudflare as part of the hosting infrastructure, WhatsApp/Meta when you open contact there and email providers when you write to us. OpenAI publishes separate data-processing agreements for hosting and its API, together with a subprocessor list; links appear below. These services may process data outside Albania. We do not promise hosting exclusively in Albania or the EU and do not claim that the firm has a bespoke agreement with Cloudflare. Contact us for information on recipients and safeguards relevant to your processing.

Quota records older than 40 days are cleaned up when a new assistant request is accepted; this is not scheduled deletion and does not guarantee deletion exactly on day 40. The provider has not confirmed a numeric retention period for this Site’s hosting access, security and error logs; clarification has been requested and we do not promise an unconfirmed deletion deadline. The standard Sites document relates processing to delivering, maintaining and supporting the service and post-termination obligations, rather than a specified number of days for every log. Firm communications are retained as necessary to handle the enquiry and meet legal/professional obligations according to the engagement; legal case-file retention is explained separately. This policy is updated when relevant practices are clarified or change.

07 · Your rights and complaints

Subject to the law’s conditions, you may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Email the firm without initially sending an identity document; proportionate identity verification may be requested where necessary.

We normally respond within 30 days; where the law permits an extension due to complexity or the number of requests, we notify you within the initial period. You may complain to Albania’s Commissioner for the Right to Information and Protection of Personal Data through idp.al/ankohu/. No technical measure guarantees absolute security. For confidential information, ask the lawyer directly for an appropriate channel.