http___fintexcon.com_politika-na-poveritelnost_1.xml
https___www.visitmalta.com_en_privacy-policy-and-cookie-policy_.xml
1.1 1.2 2.1 3.1 4.1 5.1 5.2 6.1 7.1 8.1 9.1 10.1 11.1 12.1 12.2 13.1 13.2 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 26.1 26.2 27.1 28.1 29.1 29.2 29.3 29.4 30.1 30.2 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 48.2 49.1 50.1 51.1 51.2 51.3 51.4 52.1 52.2 52.3 53.1 53.2 53.3 54.1 54.2 54.3 55.1 55.2 55.3 55.4 56.1 56.2 57.1 57.2 57.3 58.1 58.2 59.1 59.2 60.1 61.1 62.1 63.1 64.1 65.1 65.2 66.1 67.1
Знаем, че сте загрижени за Вашите лични данни и тяхната употреба, затова ние ги управляваме отговорно. Тази Политика на поверителност ще Ви помогне да разберете какви лични данни събираме, защо ги събираме и какво правим с тях. Кой ги събира? Всякаква лична информация подавана или събирана от нашия уеб сайт се управлява от Финтекс Консултинг ООД. Настоящата Политика на поверителност се отнася до лични данни, събирани от нашия уеб сайт във връзка с услугите и продуктите, които предлагаме. Тази Политика също се прилага към нашето маркетингово съдържание, включващо оферти и реклами за наши продукти и услуги, които ние (или доставчик на услуги от наше име) ви изпращаме през други уеб сайтове, платформи и приложения, съобразно начина, по който използвате информацията в сайта ни. Тези трети страни обикновено имат собствена Политика на поверителност и Ви препоръчваме да се запознаете с нея, преди да ги посещавате. Какви лични данни събираме? Не сте длъжни да предоставяте личните данни, които искаме от Вас, но ако изберете да не ги споделите, ние няма да можем да се свържем с Вас и да ви предоставим продукт или услуга, която сте потърсили от нас или да отговорим на Вашите въпроси. Ние събираме лични данни от различни източници, вкл.: - Лични данни, които ни предоставяте директно от формите ни за контакт, - Лични данни, които събираме автоматично и - Лични данни, които събираме от други източници. Под лични данни се разбира всяка информация, която може да се използва, за да Ви идентифицира директно или индиректно като конкретна личност. Тази дефиниция включва лични данни, събирани офлайн от наши офиси за работа с клиенти, кампании на директен маркетинг, игри, състезания и онлайн чрез наши сайтове и приложения, брандирани страници в платформи на трети страни или приложения на трети страни. Ние ще изискаме и Ваши лични данни, когато се свържете с нас. Може да обединим тези данни с друга информация, за да подобрим нашите продукти, услуги, съдържание и реклама. За какви цели използваме Вашите лични данни? Ние събираме, обработваме и разкриваме Вашите лични данни за следните специфични и ограничени нужди: - За да обработим Ваши плащания, ако поръчате наш продукт; да Ви предоставим информация за статуса на поръчката; да обработим Ваши запитвания, желания и оплаквания; - За да обработим и отговорим на Ваши запитвания или да се свържем с Вас, за да отговорим на Вашите въпроси или желания; - За да развиваме и подобряваме нашите продукти, услуги, методи на комуникация и функционалност на нашия уеб сайт; - За нуждите на състезания и промоции, в които сте взели участие; - За да ви предоставяме информация и управляваме Вашите регистрации и/или абонамент за нашия бюлетин или друг вид комуникация; - За да установим самоличността на лица, които се свързват с нас по телефона, електронен път или друг начин; - За да научим за интересите, желанията и променящите се нужди на клиентите, да подобрим нашия уеб сайт или настоящи продукти и услуги, както и да създадем нови; - За да предоставим персонализирани продукти, комуникация и таргетирана реклама, както и да Ви препоръчаме конкретни продукти, подходящи за Вас. Когато събираме и използваме лични данни за целите, споменати по-горе или за други цели, ние ще Ви уведомим преди или по време на събирането им. Ако е приложимо, ще потърсим Вашето съгласие за обработване на личните Ви данни. Ако дадете съгласие за обработване, Вие имате право да оттеглите съгласието си по всяко време. Ще обработим данните Ви и когато изготвяме договор, в който Вие вземате страна. Необходимо е например да обработим личните Ви данни, за да ви предоставим продукт или услуга, които сте заявили. С кого споделяме лични данни? В глобалния бизнес ние споделяме Ваши лични данни вътрешно-фирмено и с трети страни, с които имаме сключени договорни отношения в следните случаи: Трети страни, доставчици на услуги. За да обработим Ваше запитване или поръчка, да Ви доставим мостри, услуги или материали, заявени през нашия уеб сайт, ние споделяме Вашите лични данни с доставчици на услуги, които работят от наше име като компании, които: поддържат нашия уеб сайт, обработват плащания, анализират данни, предоставят пощенски и куриерски услуги. Те имат достъп до лични данни, необходими за изпълнение на техните услуги, но нямат право да ги използват за други цели. Освен това те са длъжни да обработват тези лични данни в съответствие с тази Политика на поверителност и в съответствие с действащите закони и регулации за защита на лични данни. Правно разкриване. Ние може да предоставим или разкрием Ваши лични данни към трети страни: - За да изпълним договорни задължения; - Когато вярваме, че законът ги изисква за добро; - По искане от правителствени служби, провеждащи разследване; - За да засечем и предотвратим измама или технически или други злоупотреби със сигурността; - За да отговорим на спешен случай - За да защитим правата, собствеността, сигурността или защитата на трети страни, посетители на сайта ни или обществото. Вътрешен обмен на данни Ние споделяме лични данни вътрешно-фирмено или с трети страни за нуждите, описани в настоящата Политика на поверителност. Ние изпращаме данни, събрани само в ограничена правна зона, като Европейската Икономическа Област (EEA) или Азиатско-Тихоокеанското Икономическо Сътрудничество (APEC), към държави, които имат закони за защита на личните данни и се счита, че предоставят необходимите нива на защита в правните зони за следните цели: - За да изпълним Ваши инструкции; - За да се съобразим с правно задължение; - За да работим с наши дилъри, които помагат в разпространението на нашия бизнес и услуги. Как пазим данните Ви? Ние се отнасяме сериозно към сигурността на вашите лични данни. Полагаме всички усилия, за да защитим личните ви данни от неправилна употреба, намеса, загуба, неоторизиран достъп, промяна и разкриване. Нашите мерки включват използване на система за контрол на достъпа, инвестиране в най-новите възможности за защита на мрежите, които ползваме, крипитане, псевдонимизиране и анонимизиране на лични данни, когато е възможно. Достъп до вашите лични данни е разрешен на наши служители и дилъри, когато е необходимо и на трети лица само при наличие на договорни отношения. Колко дълго пазим вашите лични данни? Ние ще пазим личните ви данни толкова дълго, колкото е необходимо за нуждите да бъдат съхраняани. Например, когато прави покупка онлайн при нас, ние пазим данни, свързани с покупката ви, за да можем да изпълним конкретния договор, който възниква при тази покупка, ние ще запазим данните ви за периода, който ни е необходим, за да отговорим на възможни оплаквания, запитвания или притеснения, свързани с поръчката. Ние активно ще преглеждаме вашите лични данни, които съхраняваме и ще ги изтриваме сигурно или в някои случаи ще ги анонимизираме, ако няма легална или бизнес нужда или нужда за потребителя те да бъдат запазени. Какви са Вашите права? Вашите права във връзка с обработката на вашите лични данни. Вие може да упражните тези права по всяко време. По-долу предоставяме списък с тези права и как може да се възползвате от тях. Може да пражните правата си чрез изпращане на имейл или чрез попълване на запитване чрез формата за контакт на страницата Контакти в нашия сайт. - Право на информираност. Имате право да ви бъде предоставена ясна, прозрачна и лесно разбираема информация за това как използваме вашите лични данни и какви са вашите права. Затова ние предоставяме тази информация в този Документ. - Право на достъп и поправка. Имате право на достъп, поправка и обновяване на вашите данни по всяко време. Ние разбираме важността на това и ако искате да упражните това право, моля свържете се с нас. - Право на пренос на данни. Личните данни, които ни предоставяте, са преносими. Това означава, че могат да бъдат премествани, копирани или трансферирани електронно при определени обстоятелства. - Право да бъдете забравени. При определени обстоятелства, вие имате правото да изискате вашите данни да бъдат изтрити. Ко желаете да изтрием вашите лични данни, които съхраняваме, моля уведомете ни и ние ще предприемем мерки да отговорим на Вашата молба според изискванията на закона. Ако вашите лични данни, които съхраняваме, вече не са необходими за никакви цели и не сме задължени по закон да ги пазим, ще направим всичко, което можем да ги изтрием, унищожим или перманентно да ги анонимизираме. - Право на ограничено обработване. При определени обстоятелства, имате право да ограничите обработката на вашите лични данни. - Право на възражение. При определени обстоятелства, имате право да възразите относно определени начини на обработване, вкл. Обработване за директен маркетинг (т.е. получаване на информационни имейли от нас или да се свързваме с вас за различни възможности или оферти, които биха представлявали интерес за вас). - Право да внесете оплакване до супервайзър. Имате право да подадете оплакване директно до всеки локален супервайзър за това как обработваме вашите лични данни. - Право да оттеглите съгласието си. Може да оттеглите съгласието си за обработка на вашите лични данни по всяко време като се свържете с нас. Повече информация и съвети относно вашите права може да получите от Регулатора за защита на лични данни във Вашата държава. Как да се свържете с нас? Можете да се свържете с нас чрез посочените контакти в страницата ни. Ако имате някакви въпроси или притеснения относно нашата Политика на поверителност или относно обработката на данни или ако искате да подадете сигнал/оплакване за възможно нарушение на местните закони за лични данни, моля изпратете ни имейл или попълнете формата за контакт на страницата Контакти в нашия сайт. Как обновяваме политиката си на поверителност? Ние ще обновяваме тази Политика на поверителност, когато е необходимо, за да отговорим на обратната връзка с клиенти и при промени на нашите продукти и услуги. Когато внасяме промени в този Политика на поверителност, ние ще променяме дата на „последна промяна “ в края на тази страница. Ние може да ограничим правата ви в тази политика на поверителност без Ваше съгласие. Последна промяна: март 2020
1.1 2.1 3.1 3.2 3.3 3.4 3.5 4.1 5.1 6.1 7.1 7.2 7.3 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 32.2 32.3 33.1 33.2 34.1 34.2 34.3 34.4 35.1 36.1 37.1 37.2 38.1 39.1 40.1 41.1 41.2 42.1 43.1 44.1 45.1 46.1 47.1 47.2 48.1 49.1 49.2 50.1 51.1 51.2 51.3 51.4 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 60.2 61.1 62.1 63.1 63.2 64.1 65.1 65.2 65.3 66.1 67.1 67.2 68.1 69.1 69.2 69.3 70.1 71.1 71.2 72.1 73.1 74.1 74.2 75.1 75.2 75.3 76.1 77.1 78.1 79.1 80.1 80.2 81.1 82.1 83.1 84.1 85.1 86.1 87.1 88.1 89.1 90.1 90.2 91.1 92.1 93.1 94.1 94.2 95.1 96.1 97.1 98.1 99.1 100.1 101.1 101.2 101.3 101.4 102.1 103.1 103.2 104.1 105.1 105.2 106.1 107.1 108.1 109.1 110.1 111.1 111.2 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 121.1 122.1 123.1 124.1 125.1 125.2 126.1 127.1 128.1 128.2 128.3 129.1 130.1 130.2 130.3 130.4 131.1 131.2 132.1 133.1 134.1 134.2 134.3 135.1 136.1 137.1 138.1 139.1 140.1 141.1 142.1 143.1 144.1 145.1 146.1 147.1 147.2 147.3 148.1 149.1 149.2 149.3 149.4 150.1 151.1 151.2 151.3 151.4 152.1 153.1 153.2 154.1 154.2 154.3 155.1 156.1 156.2 157.1 158.1 159.1 160.1 161.1
Introduction This policy (together with our Terms Of Use policy) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Your privacy is very important to us. We are committed to ensuring that when you use our service, you know what personal data we collect about you and how we use it. This privacy policy is a statement that describes how we will collect and use your personal data. We want this data policy to be as clear, simple, and fully transparent as possible. Your rights regarding your personal data are set out in the section “Your legal rights” below. In processing your personal data we will comply with the General Data Protection Regulations (EU) 2016/679, the Data Protection Act 2018 – Chapter 586 of the Laws of Malta (and any regulations made thereunder), and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (as amended), as well as any other data protection laws that apply from time to time (together with the “Data Protection Laws“). Who We Are In this Privacy Policy, references to ‘VisitMalta, ‘we’, or ‘us’ or ‘our’ mean Malta Tourism Authority, with its registered office at Building SCM 01, Suites 301-306, SmartCity Malta, Ricasoli SCM 1001, Kalkara, Malta. The Malta Tourism Authority is the data controller of your personal data under the Data Protection Laws in relation to personal data collected by our brands. As data controller we determine the purposes and means of processing the personal data that we collect and are responsible for your data. We are registered with the Office of the Information and Data Protection Commissioner (IDPC). How is your Personal Data Collected? Personal data you give us through our websites and applications. We collect your personal data through: - Our websites and mobile applications for VisitMalta - Emails you send to us, or that we send to you; - Our online conversations with you; and - Your use of social media to follow us, including “like” buttons and similar functions made available by social media platforms. We will collect your personal data when you: - create and place an order; - sign up to create an account or log in to your account; - when you subscribe to our newsletters or to mailing lists or VisitMalta event guides; - when you subscribe to a waiting list for an event; or - when you send an email, phone, or online request to our customer service team; The personal data we collect may include the following identity and contact data: - First name and surname - Email address - Postal and billing address - Phone number - Gender - Date of birth - Nationality - Photo ID (e.g passport or driver’s license ID) When you browse our website, we automatically collect identifiers such as cookies and IP addresses and other technical data, such as browser type and version and operating system and platform, location data and login data, as well as usage data including information about how you use our website, products and services (“Technical Data”). When you make a booking with us, our third-party payment provider will collect and process your transaction data including the details of the purchases of festival packages or event tickets that you make on our site, including your payment details – bank account and/or encrypted payment card details. We may collect technical data about your computer, including (where available) your IP address, operating system, and browser type, for system administration, and for compiling aggregated (statistical) data. Aggregated data about our user’s browsing actions and patterns do not identify any individual and so is not considered personal data in law. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree to us doing so. Cookies contain information that is transferred to your computer’s hard drive. A list of all the cookies that we use and what we use them for are set out in our “Cookie Policy”. We will ask you for your consent to our use of cookies when you visit our site. If you do not consent, some parts of our website may become inaccessible or not function properly. If you wish to manage how cookies are collected or block them altogether, please refer to our “Cookie Policy” for information on how to do this. Personal data we collect if you get in touch or interact with us: If you contact us through our customer services department, we may keep a record of that correspondence as well as the identity and contact data that you provide to us. If you tell us that you have a health concern or reduction in mobility that could affect your experience, we will ask you for details. We will ask for your explicit consent to collect and process this data. We may also ask you for personal data when you enter a competition or promotion sponsored by VisitMalta. We may also ask you to complete surveys that we use for research and analytics purposes only, although you do not have to respond to them, and we will ask for you to provide personal data when you submit the survey. How we use your Personal Data We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: - In order to perform the contract, we are about to enter into or have entered into with you. - Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. - Where we need to comply with a legal obligation. We set out below how we use your personal data and our lawful basis for doing so: When answering your enquiries: When you get in touch with us with an enquiry about event tickets or a festival package, or any other subject, we will use your personal data to service your request and respond to your enquiry. Answering your enquiry is necessary, in order to step at your request prior to entering into a contract; Notifying you about important changes or technical developments to our websites, our mobile apps, or to our services (e.g. changes of features or enhancements for your security): We will notify you of important changes or developments to our sites, apps or services in order to keep you fully informed about our services. This is necessary in order to service your enquiry, contract with us or for our legitimate interests; Arranging and Fulfilling your event Booking: When you purchase an event ticket or package from us, we will use your personal data to make arrangements for your booking and otherwise as necessary to fulfil the contract for your booking. This may include identity and contact data as described in section 2 above. When required by the travel providers (such as the event organiser, promoter, hotels, transport company) in order to confirm your booking and to fulfill their part of your contract, your personal data may be shared with them, as detailed in the section below entitled: ‘Who is my personal data shared with?’. We may also share your data with third parties who provide services to us in connection with making your bookings such as payment providers, and ticketing providers. In order to arrange your booking and fulfill your contract, the processing we will undertake includes: - processing your payment card through a third-party payment provider; - processing your booking through our in-house or third-party ticketing providers; - contacting you by email to confirm your booking; - contacting you to fulfill your booking, personalise your event tickets by adding the names of your party, and delivering your tickets or coupons to you by email or post; - contacting you to make sure you receive the instructions and information to access the event and any other service you’ve purchased with us; - contacting you to verify your identity when you need to change your order details (traveller name, delivery address…); - contacting you to try to resolve your complaints and any requests made to our customer services: pre-sale enquiries for information, post-sale refund enquiries, cancellations, upgrades, or modifications to the order details; In order to process your booking, we will use any health and mobility information that you provide to us to enable us (and the organiser of your event) to ensure your health, safety, and welfare during the event, which is our legal responsibility. We will ask for your explicit consent for our use of this information at the time of requesting it only for this purpose. Where you provide names of children for the purpose of purchasing children’s tickets to events, we will use these only for the purpose of fulfilling your booking and for no other purpose. To verify your identity, to prevent or detect unlawful behaviour, or to protect or enforce legal rights As a matter of fraud prevention, we may need to verify your personal data with your bank or credit card provider and to any relevant investigatory authority to ensure against fraudulent transactions including identity theft. This is necessary to protect both ourselves and our customers against fraud and other criminal activity. For Security Purposes We may use your information to protect your security as well as the security of our company, employees, customers, third parties and/or our/their property (including events you may attend and our websites, networks and systems) as permitted by law. We will protect the integrity of your personal data, and the integrity of our business by backing up your data, and by securely destroying that data when we no longer need it. This is necessary to protect our legitimate business interests as well your interests. Making contact to ensure you have completed your booking: If you make a booking enquiry with us online but your checkout process was incomplete, we may use personal data that you have previously provided via your enquiry in order to contact you to let you know that your booking was not completed. By contacting you we can take steps to ensure that we service your request and help you finalise the transaction. When you use Cashless Wristbands: VisitMalta utilises Hyperwallet payment services to refund the remaining balance of your cashless wristbands after the event. Such payment services are subject to the Hyperwallet Terms of Service and the Hyperwallet Privacy Policy. Lawful basis: Performance of our contract with you. Creating a customer profile and personalising our websites in order to provide a better and more relevant service to our customers: VisitMalta uses personal data for website and customer analytics and personalisation on-site. We also use cookies and other tracking technologies for this purpose: - Site analytics: we may use personal data to analyse and optimise how our websites are used to ensure that our customers have a good experience when purchasing our products and services. - Customer analytics: we may use personal data to analyse customers’ profiles and behaviour on our sites to ensure that we always offer the best products and services to you. - On-site personalisation: we may use personal data to ensure that content from our sites are presented in the most effective manner for you and for your computer. The content that you see on our sites may be personalised based on the user location, user language, user browsing history or purchase history. We regard these analytics and personalisation processes as necessary for our legitimate business interests to allow us to better understand our customers’ preferences and behaviours so that we can develop and grow our business. However you can opt out of certain analytical cookies and other tracking technologies that we use – see our “Cookie Policy“ for details. VisitMalta may use internal tools as well as third-party technology partners to do this, as detailed in the section below entitled: ‘Who is my personal data shared with?’. Advertising our Products and Services: In order to advertise our products we may: - through use of cookies and other technologies, display advertising to you that may be of interest when you browse other sites (see our “Cookie Policy”). - VisitMalta uses cookies and anonymous identifiers to build audiences for the purpose of retargeting (displaying an ad on other sites after you’ve visited our site) or targeting similar customers. - The basis of processing your data in this way is based on your consent. VisitMalta may use internal tools as well as technology partners to do this, as detailed in the section below entitled: ‘Who is my personal data shared with?”. Please see our “Cookie Policy” for full information on the cookies that we use and how to opt-out of them if you wish to do so. Direct Marketing: We would like to use your personal data to contact you by email with the following marketing material. - Email newsletters from VisitMalta – a weekly digest of exclusive information about the latest events published every Friday. - Email alerts based on your events interests and favourites, on your purchase history or web behaviour. - On-sale and lineup announcements. - Ticket pre-sales for events for which you have previously purchased tickets through VisitMalta. - Details of other products and services. VisitMalta may use internal tools as well as technology partners to do this, as detailed in the section below entitled: ‘Who is my personal data shared with?”. If you use our Apps, we may use push notifications to highlight when we have added new offers and promotions that may be of interest to you. Lawful Basis: your consent. You are able to opt out at any time by contacting us at [email protected] or by simply clicking on the unsubscribe link in any email marketing communication that we send to you. We may use data analytics to define types of customers for our services and to inform our marketing strategy as necessary for our legitimate business interests where the customer has consented to the cookies or other identifier. Third-Party Promotions: We will not share your personal data with third parties for their own marketing and promotional purposes unless you have given us your explicit consent in writing. If you opt in to any third-party communications, you can opt out at any time by following instructions in the third-party communications received. Competitions: If you have entered a competition or prize draw that we have organised, we will use the personal data that you have provided to us in order to contact you to let you know whether you have won a competition or prize draw that you have entered and so allow us to both perform the contract for the prize and as necessary for our legitimate interests to allow us to encourage customer demand and develop our business. For administrative and record-keeping purposes: We will process your personal data to administer and protect our business and may include personal data in our internal reports and sales analysis, accounting, transactional and VAT records including auditing requirements as necessary for our legitimate business interests. Complying with our legal and regulatory obligations or as otherwise permitted by law: In limited circumstances we may use your information for other purposes where required or permitted by law, such as where we have a legal right or duty to use or disclose your information (for example an investigation by a public authority or in a legal dispute). Whenever we rely on legitimate interests as a legal basis for processing, we will only do so if that processing is in your interests, our legitimate business interests or the interests of a third party. We must have carefully evaluated whether such interests are overridden by your interests, privacy and fundamental rights and freedoms and you have a right to object to such processing if you so wish. See the Legal Rights section below. Please bear in mind that if you object in this way, you may affect our ability to carry out these tasks, which may impact on your benefit. Who we disclose your Personal Data To Your personal data may be disclosed to and processed by our employees provided that they have a job-related need to know the personal data in order to carry out the processing for the purposes set out in this policy. Personal data provided to VisitMalta may be processed by employees of VisitMalta in line with this policy. We will also share your personal data with: - our third-party consultants, (sub-)contractors, suppliers or other service providers who may access your personal information when providing services (including but not limited to IT support services) to us e.g. for instance, we may share your data with email marketing companies who help us to email or mail our newsletter to you and other people who help us provide our websites, our apps, and related services to you. This includes information technology experts who design and host our websites and our apps, and general service companies. - auditors or contractors or other advisers auditing, assisting with or advising on any of our business purposes; - our successors in title or our prospective sellers or buyers of our business when we have a merger or re-organisation. - with event organisers: - If you purchase a ticket from us, or any other services connected to an event, we may share your personal data with the event organiser (e.g. we will share your data with event organisers to enable them to allow entry to the events and to run the events). - If you have given consent to receive marketing communications from the promoter of the event at the moment of purchase, they may send you marketing communications and other promotional information by email, SMS, post, phone, social media. - Event organisers may also collect analytics and advertising cookies on the VisitMalta from their own events. They may use this data to track and analyse customer behaviour and retarget via display or search ads. In order to arrange your booking and to fulfill your contract, as detailed in the section entitled “How we use your personal data” above, your personal data may be shared with external companies such as: - payment providers; - ticketing providers; - customer services providers; - administration services providers; - suppliers such as festival promoters/organisers, hotels and transportation companies. - tickets resale partners, to ensure that your booking is eligible for a resale listing (providing you decide first to resell it with them) When we use analytics and on-site personalisation to improve your customer experience, as detailed in the section entitled “How we use your personal data?”, your personal data may be shared with external companies such as: - technology partners who provide data analysis. - technology partners who provide data collection and processing. - technology partners who provide secure data storage. As detailed in the section entitled “How we use your personal data”, your personal data may be shared with marketing technology companies such as Facebook, Google, Twitter and Snapchat for VisitMalta’s own marketing and advertising purposes. When you use our mobile applications: Our Apps run on third-party software platforms, for example, Apple’s iOS platform which powers Apple’s iPhone and Google’s Android platform which powers Android-based smartphones. If you use any of our Apps, your usage of those Apps is also subject to the relevant mobile app platform provider’s terms and conditions and privacy policy. You should review their terms and conditions and privacy policy to ensure you understand what information (if any) they will gather about you, how they will use that information, and what you may be able to do if you are unhappy about it. Before sharing any of your personal data with external providers, we require our providers to sign an agreement confirming that your data will be kept secure in accordance with the Data Protection Laws. We will not share your personal data with any external company for that company’s marketing purposes without your prior consent. Our site may, from time to time, contain links to and from the websites of our partners and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. Security of your Personal Data We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted. Certain parts of our site are password protected and where we have given you (or where you have chosen) a password that enables you to access such parts of our site, you are responsible for keeping this password confidential and you must not share it with any other person or service. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. International transfers: When we share data with third parties (see section “Who we need to share your personal data with?”), the data that we collect from you may be transferred to, and stored at, a destination outside of the European Economic Area (‘EEA’). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your bookings, the processing of your payment details, the provision of support services including marketing services. Whenever we transfer your personal data outside of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: - We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. - Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. - Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US. Please email us at [email protected] if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA. How long we keep your personal data for: We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us at [email protected]. Cookies and website analytics data are retained according to the durations detailed in our “Cookie Policy” Your Legal Rights Your rights under the Data Protection Laws in relation to your personal data include (but are not limited to) the following: You have the legal right to ask us to supply you with a copy of the personal data that we hold about you at any time free of charge. This could include booking information relating to your tickets or packages that you have booked with us. Further copies may incur a reasonable fee and also if your request is clearly unfounded, repetitive or excessive (we may refuse to comply with your request in these circumstances). You can also ask us to rectify any errors in your personal data or complete any incomplete data that we hold or you can update your own details at any time by accessing your online account. Where you have given your consent to our processing of your data, you have the right to withdraw your consent at any time. If you withdraw your consent and there is no other legal ground for us to process your data, you can ask us to erase your personal data. You can also require us to erase your data if we have processed your data unlawfully or if the law requires us to erase your data. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. You may also restrict the processing of your data: This enables you to ask us to suspend the processing of your personal data if: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. You may request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Additionally, we bind ourselves to notify you, without undue delay, should there occur a breach of your personal data. If you wish to exercise any of your legal rights, please file your request with our Help Centre by filing a request in our Help Centre at this link or writing to our Privacy Manager at [email protected]. Any questions concerning personal data should be addressed to the Privacy Manager by email to [email protected] or by post to Malta Tourism Events, Building SCM 01, Suites 301-306, SmartCity Malta, Ricasoli SCM 1001, Kalkara. Additionally, you can adjust your preferences at any stage via your online VisitMalta account. You have the right to make a complaint at any time to the Office of the Information and Data Protection Commissioner (IDPC). the supervisory authority for data protection issues (https://idpc.org.mt/). We would, however, appreciate the chance to deal with your concerns before you approach the IDPC so please contact us in the first instance. Changes to this Privacy Policy We reserve the right to modify or amend this Policy at any time and will display the effective date at the end of this Policy. Previous versions can be obtained by contacting us. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. The last update to this privacy policy was published on the 01/04/2021. Contact Us Any general questions regarding this privacy policy should be addressed to [email protected] Any questions regarding this privacy policy relating to ticketing should be addressed to [email protected]