Last reviewed: 17th January 2022
Last updated: 17th January 2022
This privacy notice was developed because We want you to feel confident about the privacy and security of your personal information. Please read it carefully, so that you are aware of how and why We are using such information and what your rights are under the data protection legislation.
- APPLICABILITY OF PRIVACY NOTICE
This privacy notice has been drafted in accordance with the provisions of the General Data Protection Regulation – Regulation (EU) 2016/679 (the “GDPR”) and applies in all instances when We act as a controller of personal data relating to users of Our website.
For the purposes of this privacy notice, the terms “Us”, “We” and “Our” refer to ISBT Holdings Ltd, Ewropa Business Centre, Level 3 – 701, Dun Karm Street, Birkirkara, Malta, Registration number: C98281. The terms “you” and “your” refer to the data subject, being the person in relation to whom We hold personally identifiable information.
We can make changes to this privacy notice from time to time. We will identify the changes We have made on this page. In circumstances where a change will materially change the way in which We collect or use your personal information or data, We will send a notice of this change to you and you shall have a right to object to any such update and/or amendment or withdraw your consent.
- PERSONAL DATA
The terms “personal data” or “personal information” mean any information about an individual for which that person can be identified. It does not include data where the identity has been removed (anonymous data).
You may visit Our website without revealing any information about yourself. We may however, collect and process personal data that you voluntarily give Us when you use Our website. For example, you may use this Website to contact Us with questions and comments. When you fill out the contact Us form on Our website, you provide Us with personal information such as your name and email address. When contacting Us, you may also wish to opt in to receive news and updates from Us. You can limit or restrict the receipt of these communications via the “Unsubscribe” link embedded within such marketing emails.
In addition to the information you provide when you use Our website, We may use technology to collect aggregated data such as statistical data. Aggregated data may be derived from your personal data but is not considered personal data in terms of the GDPR as this data does not directly or indirectly reveal your identity. For example, We may aggregate your usage of Our website to calculate the percentage of users accessing a specific website feature. However, if We combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, We treat the combined data as personal data which will be treated in accordance with this notice.
- HOW WE USE YOUR DATA
When you fill the contact Us form on this website, We use the personal information submitted in the form only to respond to your message or act on your request. Marketing communications are only sent to you on the basis of your explicit consent. This personal information will not be kept longer than necessary and will be deleted once the feedback requirement is met.
The provision of your personal data is not a statutory or contractual requirement. You are not obliged to provide Us any personal data and it is your choice whether to provide such personal data to Us.
Only minimal personal data is collected when you fill the contact Us form on this website, namely your name and email address. Without provision of such personal data, We will not be in a position to respond to your message or act on your request.
You may withdraw your consent to the processing of your personal data at any time. Such withdrawal does not affect the legality of any processing based on your consent prior withdrawal.
- THIRD PARTY LINKS
This website may include links to third-party websites, plug-ins and applications. It is important to note that clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies.
- DATA SHARING
As a general rule, any information gathered through the use of Our website is used solely by Us and, save as otherwise permitted herein and/or required by law, will not be transferred to third parties.
We may, however, have to share your personal data with the parties set out below:
- selected individuals within Our company;
- Our intra-group companies and affiliates; and
- Our agents and third parties that provide services to Us.
We require all third parties, who act as Data Processors, to respect the security of your personal data and to treat it in accordance with the law. We do not allow Our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with Our instructions.
- DATA SECURITY AND DATA RETENTION
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, We limit access to your personal information to employees, agents, contractors and other third parties on a need to know basis. They will only process your personal information on Our instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained from Our Data Protection Officer (“DPO”).
This personal information will not be kept for longer than necessary and will be deleted once the feedback requirement is met and in any case, it shall not be kept for longer than 5 years, unless We are required to keep that information due to a statutory obligation imposed on Us and/or due to accepted standards (including where processing may be necessary for the establishment, exercise or defence of legal claims)
- DOWNLOAD INFORMATION AND DATA ANALYTICS
If you read or download information from Our site, We automatically collect and store the following information:
- The requested web page or download;
- Whether the request was successful or not;
- The date and time when you accessed the site;
- The Internet address of the web site or the domain name of the computer from which you accessed the site;
- The operating system of the machine running your web browser and the type and version of your web browser.
We use the information that We gather in order to evaluate the website’s usage, content, navigability and composition. This statistical analysis allows Us to improve Our website, to generally make your internet experience more enjoyable and to provide a value-added service. We may engage third party processors to conduct such data analytics on Our behalf, and if We do, We will ensure that such processors handle personal data in line with the applicable law and according to Our instructions.
Download information and data analytics information which constitute personal data will only be retained for as long as is necessary, and in any case, no longer than 6 years, unless We are required to keep that information due to a statutory obligation imposed on Us and/or due to accepted standards (including where processing may be necessary for the establishment, exercise or defence of legal claims).
- YOUR RIGHTS
For as long as We retain your personal data, you have certain rights in relation to your personal data including:
- Right of access – you have the right to ascertain the personal data We hold about you and to receive a copy of such personal data;
- Right to complain – you have the right to lodge a complaint regarding the processing of your personal data with the supervisory authority for data protection matters. In Malta this is the Information and Data Protection Commissioner (contact details provided below);
- Right to Erasure – in certain circumstances you may request that We delete the personal data that We hold about you;
- Right to Object – you have a right to object and request that We cease the processing of your personal data where We rely on Our, or a third party’s legitimate interest for processing your personal data;
- Right to Portability – you may request that We provide you with certain personal data which you have provided to Us in a structured, commonly used and machine-readable format. Where technically feasible, you may also request that We transmit such personal data to a third party controller indicated by you;
- Right to Rectification – you have the right to update or correct any inaccurate personal data which We hold about you;
- Right to Restriction – you have the right to request that We stop using your personal data in certain circumstances, including if you believe that We are unlawfully processing your personal data or the personal data that We hold about you is inaccurate;
- Right to withdraw your consent – where Our processing is based on your consent, you have the right to withdraw your consent. Withdrawal of your consent shall not affect the lawfulness of the processing based on your consent prior to the withdrawal of your consent; and
- Right to be informed of the source – where the personal data We hold about you was not provided to Us directly by you, you may also have the right to be informed of the source from which your personal data originates.
Please note that in terms of the applicable laws, your rights in relation to your personal data are not absolute.
You may exercise the rights indicated in this section by contacting Us or Our Data Protection Officer at the details indicated below.
Given that the legal basis for Our processing of your personal information is consent, you have the right to withdraw that consent at any time by sending an e-mail to email@example.com. Withdrawal will not affect the lawfulness of processing before the withdrawal.
If you consider that Our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. In Malta the supervisory authority is the Information and Data Protection Commissioner; link: https://idpc.org.mt/en/Pages/contact/complaints.aspx.
- DATA PROTECTION OFFICER
Our Data Protection Officer will be available to respond to any data protection related requests and queries you may have. If you wish to contact Our DPO you may do so by sending an e-mail to firstname.lastname@example.org.
You may also contact Us:
- by post to the postal address above;
- using Our website contact forms;
- by telephone on +44 (0) 208 133 2907;
- by e-mail on email@example.com