1. Who we are
The data controller is ITS SYSTEMS, NIPT M62905204D, Bulevardi Aqif Pasha, Elbasan, Albania. Privacy contact: privacy@its.al.
ITS Bileta is the POS app of the ITS Control Center platform for public transport operators in Albania.
2. What the app does
The app issues tickets, fiscalises and prints them, records sales and synchronises with the platform. It is not a public app and shows no advertising.
3. Data we process
- Work account — name, sign-in identifier and role, created by the operator.
- Session — the authentication token stored on the device.
- Trusted device — the public key generated on the device (ECDSA in Android Keystore) and the device model.
- Operational data — issued tickets, fares, journeys, lines and reports.
- Fiscal data — the elements fiscal law requires for each ticket.
- Technical data — IP address and request logs.
4. Trusted device and app lock
A device becomes trusted after a successful sign-in so the password is not required every time. The private key stays in the Android Keystore and is never sent to the server.
The app locks automatically after 5 minutes of inactivity. If enabled, unlocking uses fingerprint or face; biometrics are verified by Android and the result never leaves the device.
5. Legal bases (GDPR)
Processing relies on the contract with the operator (Art. 6(1)(b)), the fiscal legal obligation (Art. 6(1)(c)) and our legitimate interest in system security (Art. 6(1)(f)).
6. Retention
Tickets and fiscal data are kept for the periods set by Albanian fiscal law.
Server technical logs contain the IP address, method, requested path (without search parameters), response code, size and duration. They rotate daily and are kept for 14 days, then deleted automatically.
7. Your rights
You may request access, correction and, where the law allows, erasure; you may object to processing and lodge a complaint with the Albanian Commissioner for the Right to Information and Protection of Personal Data. Requests go through the operator or to privacy@its.al.
8. Children
The app is a work tool for people aged 18 and over and is not directed at children.
9. Permissions
- Internet — for synchronisation and fiscalisation.
- Biometrics — only if you enable fingerprint unlock.
- Printer / Bluetooth — only when printing a ticket.
10. Changes
When the policy changes it is published on this page with a new date.
11. Contact
ITS SYSTEMS · privacy@its.al · info@its.al