1. Introduction & Data Controller
Showsignalmatesmi Yachts Ltd ("we", "us", or "our"), registered in Malta with company number C-89412-M and registered office at Marina Waterfront, Triq il-Lanċa, Marsamxett Harbour, Valletta VLT 1820, Malta, operates the domain Showsignalmatesmi.yachts. We act as Data Controller regarding all personal information collected via our website, contact forms, and digital interactions.
We adhere strictly to the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the Maltese Data Protection Act (Chapter 586 of the Laws of Malta), and applicable international standards including the California Consumer Privacy Act (CCPA).
2. Personal Data We Collect
We may collect and process personal data in the following categories:
- Directly Provided Information: When you submit inquiries through our contact forms or email us directly, we capture your name, email address, topic of interest, and the textual content of your correspondence.
- Technical and Device Data: When navigating our website, our web servers collect standard protocol headers, including masked IP addresses, browser types, operating systems, referring URLs, and timestamps.
- Cookie and Interaction Data: Pseudonymous identifiers stored via browser cookies, strictly subject to your preferences as detailed in our Cookie Policy.
3. Legal Bases for Processing (GDPR Article 6)
We process your personal information only when lawful bases exist:
- Consent (Art. 6(1)(a)): Where you provide express consent, such as opting into non-essential analytics cookies or voluntary contact requests.
- Legitimate Interests (Art. 6(1)(f)): Necessary for administering site security, preventing malicious fraud, and troubleshooting network infrastructure.
- Legal Obligations (Art. 6(1)(c)): Fulfilling mandatory statutory retention requirements under Maltese commercial or financial law.
4. Third-Party Processors & International Transfers
We do not sell, rent, or trade your personal data. We engage vetted technical processors for cloud hosting, DNS management, and operational security. These providers are bound by strict Data Processing Agreements (DPAs) requiring adherence to EU data protection standards.
If data is stored or processed outside the European Economic Area (EEA), such transfers rely exclusively on European Commission Standard Contractual Clauses (SCCs) or designated adequacy decisions.
5. Data Retention Periods
Personal contact communications are retained only for as long as necessary to address your specific inquiry, typically up to twenty-four (24) months from our last contact, after which records are permanently deleted or irreversibly anonymized. Technical access logs are purged on a rolling 90-day cycle.
6. Your Statutory Rights
Under GDPR and equivalent privacy frameworks, you retain full rights regarding your data:
- Right of Access: Request confirmation and copies of personal data held about you.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Request deletion of data where retention is no longer justified.
- Right to Restriction of Processing: Restrict data usage under specific contestation periods.
- Right to Data Portability: Receive your provided data in a structured, machine-readable format.
- Right to Object: Object at any time to processing grounded in legitimate interests.
7. Data Protection Officer (DPO) Contact
To exercise any statutory right or submit questions regarding this policy, contact our designated privacy compliance team at:
Data Protection Officer
Showsignalmatesmi Yachts Ltd
Triq il-Lanċa, Marsamxett Harbour, Valletta VLT 1820, Malta
Email: [email protected]
You also have the right to lodge a complaint with the supervisory authority for data protection in Malta: The Office of the Information and Data Protection Commissioner (IDPC), Floor 2, Airways House, High Street, Sliema SLM 1549, Malta (idpc.org.mt).