Privacy Policy
Last updated: January 2026
Two Step Apartments (“we”, “our”, or “us”) respects your privacy and is committed to protecting the personal data of visitors and guests who use our website. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or contact us through our forms.
By using our website, you agree to the practices described in this Privacy Policy.
1. Who We Are
Two Step Apartments is a short-term accommodation (Airbnb-style apartments) located in Tirana, Albania. Our website is used to showcase our rooms and allow potential guests to contact us for availability and inquiries.
Contact details:
- Phone: +355 69 781 1132
- Address: Rruga Tafaj, in front of “Partizani” High School, 1001 Tirana, Albania
2. Information We Collect
We only collect personal information that you voluntarily provide to us through our website contact forms.
a) Room Inquiry Form
When you fill out the room inquiry form, we may collect:
- Name and surname
- Room you are interested in
- Message or additional details you choose to share
b) General Contact Form
When you use the general contact form, we may collect:
- Name and surname
- Phone number
- Email address
- Message
We do not collect sensitive personal data, and we do not intentionally collect data from minors.
3. How We Use Your Information
The personal data you provide is used only for legitimate business purposes, including:
- Responding to your inquiries or messages
- Providing information about room availability and services
- Communicating with you regarding your request
- Improving our customer service
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Your consent, given when you submit a form
- The necessity to take steps prior to entering into a rental or booking agreement
- Our legitimate interest in responding to inquiries and managing guest communication
5. Data Protection and Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
We use data protection practices to guarantee the security of the information submitted through our website. Access to personal data is limited to authorized persons only.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws. When the data is no longer needed, it is securely deleted.
7. Sharing of Data
We do not sell, rent, or trade your personal information to third parties.
Your data may only be shared if required by law or legal authorities, or if necessary to protect our rights and safety.
8. Cookies and Tracking
Our website does not use cookies for marketing or profiling purposes. If basic technical or functional cookies are used, they are only intended to ensure the proper functioning of the website.
9. Your Rights
In accordance with applicable data protection laws (including GDPR, where applicable), you have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Withdraw your consent at any time
- Object to or restrict certain processing activities
To exercise any of these rights, please contact us using the details provided below.
10. Third-Party Links
Our website may contain links to third-party platforms (such as Airbnb or booking services). We are not responsible for the privacy practices or content of those external websites.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, you may contact us at:
- Phone: +355 69 781 1132
- Address: Rruga Tafaj, in front of “Partizani” High School, 1001 Tirana, Albania
