Privacy Policy

The website www.kafemalta.com collects some personal data of users who browse the website.

In accordance with the commitment and attention we place on personal data and in accordance with articles 13 and 14 of the EU GDPR, www.kafemalta.com provides information on the methods, purposes, scope of communication and dissemination of personal data and users' rights.

Owner of the processing of personal data

EKM ltd

Dragonara Business Center, Dragonara street,

5th floor, St. Julian, STJ 3141

Malta

Email: privacy@kafemalta.com

Phone: +356 79477306

Types of data acquired

www.kafemalta.com collects user data directly or through third parties. The types of data collected are: technical navigation data, usage data, email, name, surname, telephone number, province, country, postcode, city, address, company name, state, cookies and other various types of data. More details on the data collected are provided in the following sections of this same information.

Personal data is deliberately provided by the user by filling in forms, or, in the case of usage data, such as data relating to navigation statistics, they are collected automatically by browsing the pages of www.kafemalta.com.

The data requested by the forms are divided between mandatory and optional; the two types will be indicated separately on each form. In the event that the user prefers not to communicate mandatory data, www.kafemalta.com reserves the right not to provide the service. In the event that the user prefers not to communicate optional data, the service will still be provided by www.kafemalta.com.

www.kafemalta.com uses statistical tools to track user browsing, the analysis takes place through logs. It does not directly use cookies but can use cookies including third party services.

Each use of cookies is detailed in the Cookie Policy (https://www.kafemalta.com /Cookie-Policy.htm) and subsequently in this same information.

The user who communicates, publishes, disseminates, shares or obtains personal data of third parties through www.kafemalta.com assumes full responsibility for them. The user frees the owner of the website from any direct responsibility and towards third parties, guaranteeing that he has the right to communicate, publish, disseminate the same. www.kafemalta.com does not provide services to minors under the age of 18. In the case of requests made for minors, the parent, or whoever holds parental authority, must fill in the data requests.

Methods, places and times of the processing of the acquired data

Methods of processing the acquired data

The owner has designed an IT system suitable to guarantee security measures deemed suitable to prevent unauthorized access, disclosure, modification or cancellation of personal data. The same system makes daily copies, considered sufficiently adequate based on the importance of the data contained.

The user has the right to obtain information regarding the security measures adopted by the owner to protect the data.

Access to data in addition to the owner

Internal staff (such as administrative, commercial, marketing, legal, system administrators) and / or external subjects (such as third party IT service providers, webfarms) have access to personal data collected by www.kafemalta.com. communication agencies, complementary service providers). If necessary, these structures are appointed by the data controller.

The user can ask the data controller at any time for an updated list of data processors.

Communication of any unwanted access to the Privacy Guarantor

The aforementioned IT system is monitored and checked daily by technicians and systems engineers. This does not mean that, even if it is considered a remote possibility, there may be unwanted access. In the event that this occurs, the owner undertakes, as per GDPR, to notify the Privacy Guarantor within the terms established by law.

Places of maintenance of the acquired data

Personal data are kept and processed in the owner's operational and administrative offices, as well as in the webfarms where the servers that host the www.kafemalta.com website reside, or on the servers that make the backup copies. The user's personal data may reside in Italy, Germany and the Netherlands, in any case in countries of the European Community. The user's personal data are never brought or copied outside the European territory.

Retention times of the acquired data

In the case of data acquired to provide a service to the user, (both for a purchased service and on a trial basis) the data are kept for 24 months following the completion of the service. Or until the consent is revoked.

In the event that the owner is obliged to keep personal data in compliance with a legal obligation or by order of authority, the owner can keep the data for a longer time, necessary for the obligations.

At the end of the retention period, personal data will be deleted. After the deadline, it will no longer be possible to access your data, request its cancellation and portability.

Legal basis for the processing of the acquired data

The owner acquires personal data of users in the cases described below.

The treatment is necessary:

- if the user has deliberately accepted the processing for one or more purposes;

- to provide the user with a quote;

- to provide a contract to the user;

- to provide a service to the user;

- so that the owner can fulfill a legal obligation;

- so that the owner can fulfill a task of public interest;

- so that the holder can fulfill an exercise of public authority;

- so that the owner or third parties can pursue their legitimate interests.

The user can request clarifications from the data controller at any time on the legal basis of each treatment.

Purpose of the processing of the acquired data

User data is collected by the owner for the following purposes:

- provide technical and commercial information;

- provide free service trials to users;

- provide quotes to users;

- orders;

- invoicing;

- send expiration notices on services;

- send data removal notices;

send newsletters.

Eventually the data can also be processed for:

contact the user, statistics, user behavior analysis and session recording, content display and interaction of external applications, spam protection, payment management, interaction with social networks, advertising.

The user can request clarifications on the purposes of each treatment to the data controller at any time.

Specific details on the acquisition and use of personal data

To contact the user

Contact forms

The user can fill in the contact / information request form (s), entering their data and consenting to their use to respond to requests of a nature indicated in the form header.

Personal data that could be collected: ZIP code, city, surname, email address, country, name, telephone number, province, company name.

Newsletter or SMS

The user can subscribe to the website newsletter www.kafemalta.com. Messages containing technical, informative, commercial and / or promotional information may be sent to the email address specified by the user.

Registration for the newsletter is done with double opt-in.

The user is sent an email (to the email address indicated) with a link inside to click to confirm that the user is really the owner of the email address.

The same service can be done via SMS.

Personal data that could be collected: ZIP code, city, surname, email address, country, name, telephone number, province, company name.

To manage payments

The website www.kafemalta.com uses payment services to make payments by credit card, bank transfer or other means. The website www.kafemalta.com does not collect or acquire the data used for payment. The payment data are collected and acquired directly by the payment service manager (for example by the credit card or PayPal institution, etc.)

These services can send messages to the user, for example email or sms of payment notifications.

The data acquired and the use of the same by third party services are regulated by the respective Privacy Policy to which please refer.

PayPal

Service Provider: PayPal, Inc.

Purpose of the service: to make online payments

Personal data collected: types of data as specified in the privacy policy of the service

Place of processing: as specified in the privacy policy of the service

Stripe

Service Provider: Stripe, Inc.

Purpose of the service: to make online payments

Personal data collected: types of data as specified in the privacy policy of the service

Place of processing: as specified in the privacy policy of the service

For heat mapping and session recording

Heat mapping and session recording are services that are used to determine the areas of a web page where the cursor passes and which are subject to mouse clicks to identify the areas of greatest interest. They analyze and monitor traffic and user behavior. They can record sessions for later analysis.

The data acquired and the use of the same by third party services are regulated by the respective Privacy Policy to which please refer.

Smartlook

Service provider: Smartsupp.com, s.r.o.

Purpose of the service: heat mapping and session recording

Personal data collected: cookies, usage data, types of data as specified in the privacy policy of the service

Place of processing: Czech Republic

For interaction with external applications (including social networks)

www.kafemalta.com includes in its pages plugins and / or buttons to interact with social networks and / or external applications.

With regard to social networks, even if the user does not use the service on the web page, it is possible that the service acquires traffic data.

The data acquired and the use of the same by third party services are regulated by the respective Privacy Policy to which please refer.

Facebook: "Like" button and social widgets

Service provider: Facebook, Inc.

Purpose of the service: interaction with the Facebook social network

Personal data collected: cookies, usage data

Place of processing: United States

Cookies used (https://www.facebook.com/about/privacy/cookies)

Adhering to the Privacy Shield

For spam protection

These services acquire data from users and through various logic distinguish the traffic of real users from that of potential spam threats.

The data acquired and the use of the same by third party services are regulated by the respective Privacy Policy to which please refer.

Google reCAPTCHA

Service provider: Google, Inc.

Purpose of the service: spam protection service

Personal data collected: cookies, usage data

Place of processing: United States

Cookies used (https://policies.google.com/technologies/types?hl=it)

Adhering to the Privacy Shield

For statistics

These services are used by the data controller to analyze the traffic made by users on the website www.kafemalta.com.

The data acquired and the use of the same by third party services are regulated by the respective Privacy Policy to which please refer.

Google Analytics

Service provider: Google, Inc.

Purpose of the service: web analysis service provided. This service collects the user's personal data to monitor and analyze the use of the website www.kafemalta.com, generate reports and also use them for other Google services. Google may use the collected data to personalize its advertisements.

Personal data collected: cookies, usage data

Place of processing: United States

Opt-Out (https://tools.google.com/dlpage/gaoptout?hl=it)

Adhering to the Privacy Shield

To view content from external websites

These services are used to display content external to the website on the pages of the website, with the possibility of interaction.

Even if the user does not use the service on the web page, it is possible that the service acquires traffic data.

The data acquired and the use of the same by third party services are regulated by the respective Privacy Policy to which please refer.

Google Fonts

Service provider: Google, Inc.

Purpose of the service: service to display external fonts on your website

Personal data collected: types of data as specified in the privacy policy of the service

Place of processing: United States

Adhering to the Privacy Shield

YouTube Video Widget

Service provider: Google, Inc.

Purpose of the service: service to view and interact with external videos on your website

Personal data collected: cookies, usage data

Place of processing: United States

Adhering to the Privacy Shield

Rights of the interested party

The user has all the rights provided for by art. 12 of the EU GDPR, the right to check, modify and integrate (rectify), delete their personal data by accessing their reserved area. Once all data has been deleted, the access account to the reserved area is closed.

Specifically, he has the right to:

- know if the owner holds personal data relating to the user (Article 15 Right to access);

- modify or integrate (rectify) inaccurate or incomplete personal data (Article 16 Right of rectification);

- request the cancellation of one or part of the personal data kept if one of the reasons provided for by the GDPR exists (Right to Cancellation, 17);

- limit the processing only to part of the personal data, or completely revoke the consent to the processing, if one of the reasons provided for by the Regulation exists (Article 18 Right to limit the processing);

- receive a copy of all personal data held by the owner, in an organized common use format, and also readable by an automatic device (Article 20, Right to Portability);

- object in whole or in part to the processing of data for marketing purposes, for example to oppose and receive advertising offers (Article 21 Right to object). Users are reminded that they can oppose the processing of data used for advertising purposes, without giving any reasons;

- oppose the processing of data automatically or not for profiling purposes (so-called Consent).

How a user can exercise their rights

The user can exercise his / her rights set out above by communicating a request to the data controller EKM ltd at the addresses indicated above.

The request to exercise one's right has no cost. The owner undertakes to process requests as quickly as possible, and in any case within one month.

The user has the right to lodge a complaint with the Personal Data Protection Authority. Contact details: garante@gpdp.it, http://www.gpdp.it (http://www.gpdp.it).

Cookie Policy

It is recommended that you also consult the Cookie Policy in detail (https://www.kafemalta.com /Cookie-Policy.htm).

Additional information on data processing

Defense in court

In case of recourse to the court for abuse by the user in the use of www.kafemalta.com or the services connected to it, the owner has the right to disclose the user's personal data. It is also obliged to provide the aforementioned data at the request of the public authorities.

Request for specific information

The user has the right to request specific information from www.kafemalta.com on the services available on the website and / or the collection and use of personal data.

Data collection for system logs and maintenance

www.kafemalta.com and / or third-party services (if any) may collect the user's personal data, such as the IP address, in the form of a system log. The collection of this data is linked to the operation and maintenance of the website.

Information not contained in this policy

The user has the right to request additional information not present in this Policy regarding the processing of personal data from the data controller at any time. The owner can be contacted via the contact details.

Support for "Do Not Track" requests

"Do Not Track" requests are not supported by www.kafemalta.com.

The user is invited to consult the Privacy Policy of the third party services listed above to find out which ones support this type of request.

Changes to this Privacy Policy

The owner has the right to modify this document by notifying users on this same page or, if applicable, through the contacts in his possession. The user is therefore invited to periodically consult this page. To confirm the actual modification, consult the date of the last modification indicated at the bottom of the page.

The owner will take care of collecting users' consent again in the event that the changes to this document concern data processing for which consent is required.

Privacy privacy policy updated on 28/08/2021 16:00