Registry Data Notice

1. Who this is for

You are reading this because you may be named — as an owner or representative — in a business record published on ARBK Atlas. For sole proprietors, the business record itself relates to you as an individual.

2. Where the data comes from

The data originates from the public business registries maintained by the Kosovo Agency for Business Registration (ARBK) and the Albanian National Business Center (QKB). These are official public records. We re-publish the same information and refresh it from the source; we do not alter the underlying registry data.

3. What we process

The categories published in the registry record: business name and identifiers, owner and representative names, role/position, ownership shares, registered address, status, sector, capital, and any contact details (phone, email, website) that appear in the public record. The identifiers we store are business registration numbers (NUI), not personal national identity numbers.

4. Why and on what legal basis

We process this data under legitimate interests (Art. 6(1)(f)) — namely transparency of the public business registry and enabling due diligence, KYB/verification, counterparty and credit-risk assessment, and fraud prevention by our users. We have carried out a balancing test and keep a written Legitimate Interests Assessment on file.

We do not permit the data to be used for unlawful or unsolicited direct marketing; our customers are contractually bound to the same restriction.

5. Automated signals & profiling

We compute operational due-diligence signals (such as a risk score, shell-company likelihood, address-concentration and owner-influence indicators, and beneficial-ownership chains) solely from public registry attributes. These describe the legal entity and are not credit assessments, regulatory findings, or solely-automated decisions producing legal effects on you within the meaning of Article 22. You may object to profiling that relates to you and request human review (see your rights below).

6. Who we share it with

The data is accessible to users of the platform and to API/export customers, who are bound by our Terms to process it lawfully as independent controllers. Individual owner profile pages are excluded from search-engine indexing and our sitemap and are restricted to authenticated paid users. See our subprocessors list for the infrastructure providers we use.

7. How long we keep it

For as long as the corresponding public registry record exists, refreshed from the source. If you obtain a removal (see below), your redaction is permanent and is not restored by later updates.

8. Your rights

You have the rights of access, rectification, erasure, restriction, and to object to processing based on legitimate interests. In particular, if you are named as an owner or representative you can ask us to remove or correct the information about you via our business removal process or by email. We action verified requests within 30 days, the redaction is durable, and we propagate removals to API/export customers via our suppression feed.

You also have the right to lodge a complaint with a supervisory authority — in Kosovo, the Information and Privacy Agency (AIP), aip.rks-gov.net.

9. How to contact us

For any request relating to your data, email [email protected]. We aim to acknowledge within 72 hours and respond within 30 days.