We, namely, Arkadia Marketing Limited (“we”/”us”/”our”), a company registered in Malta, bearing company registration number C 11113 and having its registered address at Mizzi Organisation Corporate Office, Testaferrata Street, Ta’ Xbiex, XBX 1407, Malta, are the Organiser and the controller of your personal data.

We are committed to respecting your privacy. If you wish to contact us about our privacy practices please feel free to do so by post on the above mentioned address.

Our Data Protection Officer may be contacted on email at dpo@arkadia.com.mt, by surface mail to Arkadia Marketing Ltd. Fortunato Mizzi Street, Victoria Gozo.

Please read this Privacy Notice carefully to understand our practices with respect to your personal data.

References to “data controller”, “data subject”, “personal data”, “process”, “processed”, “processing” and “Data Protection Officer” in this Privacy Notice have the meanings set out in, and will be interpreted in accordance with applicable laws, including but not limited to the Data Protection Regulation (EU) 2016/679 and the Data Protection Act, Chapter 586 of the Laws of Malta and subsidiary legislation thereto, as may be amended from time to time.

1. Updates

We may update this Privacy Policy in our sole discretion including as result of a change in applicable law or processing activities. Any such changes will be communicated to you prior to the commencement of the relevant processing activity.

2. What amounts to personal data?

The term “personal data” refers to all personally identifiable information about you, such as your name, surname, locality, mobile number and/or email address.

3. How do we collect personal data?

Your personal data will be typically exclusively collected from the relevant online registration form that you submit to us.

4. What personal data do we process?

The personal data we collect and process are the data you have provided us in the relevant online registration form that you have submitted.


5. How do we use your personal data?

We will use the personal data that you provide to us by virtue of the online registration form to carry out marketing in respect of the information you have specifically selected, using any of the following methods:

Mobile; and
Email.

You can change your mind and may withdraw your consent to the processing of your personal data for marketing purposes at any time by following the opt-out links on any marketing message sent to you and/or by contacting us at any time.

Withdrawal of your consent does not affect the lawfulness of the processing based on your consent prior to the withdrawal.

We may ask you to confirm or update your marketing preferences if there are changes in the law, regulation, or the structure of our business.

6. Legal Bases of Processing Personal Data

We typically process your personal data on the basis of the contractual relationship established with you through your acceptance of this Privacy Policy.

On the basis of our legitimate interests or compliance with legal obligations, as applicable, we may also process your personal data for the purposes of establishing, exercising or defending legal proceedings.

7. Recipients

We may share your personal data with third party recipients who are:

- selected individuals within our company, on a need-to-know basis;
- any service providers that may have access to your personal data in rendering us with services necessary for disseminating
  information
 - third parties to whom disclosure may be required as a result of legal obligations imposed on us.
- Unless specifically instructed and consented by you, we do not share your personal data with any entity located outside of the EU or EEA.

8. Automated Decision-Making and Profiling

Your personal data will not be used for any decision solely taken on the basis of automated decision-making processes, including profiling, without human intervention.

9. Data Retention

We retain your personal data exclusively for the period which is lawfully permissible to retain your personal data. Thereafter, your personal data shall be immediately and irrevocably destroyed.

Since we have a contractual relationship with you, we may retain your personal data for up to five (5) years from date it is submitted.

Any personal data which we may hold on the basis of your consent shall be retained exclusively until when you withdraw your consent.

10. Your Rights

For as long as we retain your personal data, you have certain rights in relation to your personal data including:

Right of Access – you have the right to ascertain the personal data we hold about you and to receive a copy of such personal data;
Right to Complain – you have the right to lodge a complaint regarding the processing of your personal data with the supervisory authority for data protection matters. In Malta this is the Information and Data Protection Commissioner (contact details provided below);
Right to Erasure – in certain circumstances you may request that we delete the personal data that we hold about you;
Right to Object – you have a right to object and request that we cease the processing of your personal data where we rely on Our, or a third party’s legitimate interest for processing your personal data;
Right to Portability – you may request that we provide you with certain personal data which you have provided to us in a structured, commonly used and machine-readable format. Where technically feasible, you may also request that we transmit such personal data to a third party controller indicated by you;
Right to Rectification – you have the right to update or correct any inaccurate personal data which we hold about you;
Right to Restriction – you have the right to request that we stop using your personal data in certain circumstances, including if you believe that we are unlawfully processing your personal data or the personal data that we hold about you is inaccurate;
Right to withdraw your consent – where our processing is based on your consent, you have the right to withdraw your consent. Withdrawal of your consent shall not affect the lawfulness of the processing based on your consent prior to the withdrawal of your consent; and
Right to be informed of the source – where the personal data we hold about you was not provided to us directly by you, you may also have the right to be informed of the source from which your personal data originates.
Please note that in terms of the applicable laws, your rights in relation to your personal data are not absolute.

You may exercise the rights indicated in this section by contacting us or our Data Protection Officer at the details indicated above.

11. Keeping you data secure

We shall keep your personal data secure and shall commit to take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, including against accidental loss, destruction, storage or access. Your personal data may be stored in paper files or electronically on our technology systems or on technology systems of our IT service providers.

12. Complaints

If you have any complaints regarding our processing of your personal data, please note that you may contact us or our Data Protection Officer at the details indicated above. You also have a right to lodge a complaint with the Office of the Information and data Protection Commissioner in Malta (www.idpc.gov.mt).