What is Personal Data?
Personal data refers to any information relating to an identified or identifiable natural person, whom the latter can be identified, directly or indirectly, in particular by reference to an identifier. This personal information may be processed – such processing refers to any operation which is performed on personal data such as collection, recording, organisation, structuring and storage.
Information we collect
We only collect personally identifiable information (i.e. information identifying one individual from the other) which would have been provided to us to provide you with our Services or when you receive communications from us, or when you send us an email or other communication. We may also acquire personal data from or through third parties with whom we have an agreement in order to provide our services. Examples of personally identifiable information may include but are not limited to, the name, physical address, email address and phone number.
Processing of Personal Data:
We will process personal data fairly and lawfully, and only to the extent necessary as may be allowed in terms of law or in terms of our agreement or our terms and conditions. When processing your personal data, we will make sure that the processing shall be lawful and only, if and to the extent that at least one of the following applies:
- To provide you with the Services requested and, any ancillary actions related thereto;
- You have given your clear affirmative consent, signifying agreement to the processing of your personal data for one or more specific purposes;
- To send informational newsletters that you have opted-in to;
- Processing is necessary for compliance with a legal obligation to which we are subject;
- Processing is necessary in order to protect your vital interests;
- Processing is necessary to operate, maintain, enhance and provide our Services;
- Processing is necessary for communication purposes;
We may sometimes contract with third party service providers to perform functions or services on our behalf and these third party service providers may have access to your personal information, such as names and email address required to perform their functions. We will make sure that such third party providers have undertaken to use any personal data legitimately and in accordance to our written instructions or agreements.
Rights of Data Subjects
In terms of the aforementioned regulations we protect the fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data.
As a data subject you have the following rights:
- Right to withdraw consent – You have the right to withdraw your consent when your personal data is processed on the basis of your consent. The withdrawal of your consent shall not affect the lawfulness of processing before the withdrawal of your consent.
- Right of access – You have the right to obtain from us confirmation as whether or not personal data concerning you is being processed, and where that is the case, access to the personal data and the additional information as outlined in the regulations. Limitations to this right will only be applicable if provided in terms of law such as anti-money laundering regulations.
- Right to rectification – You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you.
- Right to erasure(‘right to be forgotten’) – You have the right to obtain from us the erasure of your personal data in terms of law. This right is limited by, and subject to all our compliance, regulatory and legal obligations, including anti-money laundering regulations, whereby we are obliged to hold your personal data for such period stipulated at law, after the termination of our relationship or any other such longer time which may be necessary in view of the particular services provided to you,
- Right to restriction of processing– You shall have the right to obtain from us restriction of processing where, in terms of the aforementioned regulations, one of the following applies:
- the accuracy of personal data is contested by yourself for a period enabling us to verify the accuracy of your personal data;
- the processing is unlawful and you oppose to the erasure of your personal data and request the restriction of their use instead;
- we no longer need the personal data, but are required by yourself for the establishment, exercise or defence of legal claims;
- you object to processing pursuant to your right to object pending the verification whether our legitimate grounds override yours;
- Right to data portability– You shall have the right to receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format.
- Right to object–You have the right to object, on grounds relating to your particular situation to processing of your personal data. We shall no longer process your personal data unless we have a compelling legitimate ground for the processing. You have the right to object at any time to the processing of personal data concerning you for direct marketing purposes. You may unsubscribe at any time by clicking on ‘Unsubscribe’ at the bottom the newsletter received.
- Right to lodge a complaint– Should you require any clarification or need to discuss matters relating to data protection, you may contact the Customer Care department by email at firstname.lastname@example.org. As a data subject, you also have a right to lodge a complaint with the Information and Data Protection Commissioner, Level 2, Airways House, High Street, Sliema SLM 1549, Malta through their website https://idpc.org.mt/.
If you would like access to the information that we hold about you, if any of the information that we hold about you is inaccurate or out of date, or if you wish to withdraw your consent to the processing of your data or to restrict or object to us processing it, please let us know by getting in touch via one of the methods set out under the header “Contact Us” below.
If you object to our processing of your personal information, we will respect such requests in accordance with our legal obligations. Your objection may mean that we may not be able to perform the actions necessary to achieve the purposes set out above.
We may be required or entitled to retain your information to comply with legal and regulatory obligations and to protect and exercise our legal rights and legitimate interests.
We are committed to protecting our visitors’ privacy and we will not collect any personal information about you as a visitor unless you provide it voluntarily. When you fill the form on the “CONTACT US” page, we use the personal information submitted in the form only to respond to your message. This personal information will not be kept longer than necessary and will be deleted once the feedback requirement is met.
Links to other Websites
Transfers outside the European Union
We may transfer your personal information outside of Malta. The countries to which your personal information is transferred may not offer an equivalent level of protection for personal information to the laws of Malta. Where appropriate, we will take steps to ensure your information is transferred subject to appropriate safeguards, such as by entering into data transfer agreements. Where we have put data transfer agreements or similar safeguards in place, we may be able to make a copy of this available to you if you contact us via one of the methods set out under the header “Contact Us” below.
How long will we keep your personal information?
We have a data retention policy that sets out how long we keep your information. This policy is based on the type of information, the purpose of collection, and the system within our platforms in which the information is held. We keep your personal information for no longer than we need to in order to carry out those purposes for which your data has been collected.
To prevent unauthorised access, maintain data accuracy, and ensure the appropriate use of information, we have put in place appropriate technical and organisational measures to protect your personal data.
Should you have any questions, comments and requests regarding the processing of your personal data you may contact us through any of the following methods:
By phone: +356 2226 8888
By email: email@example.com
By mail: Malta Retailing Limited: 4, Pinto Road Marsa, Malta