Privacy Policy

1. Data Controller

This Website is operated by Robert Arrigo & Sons Limited (“Robert Arrigo”, “we”, “us” or “our”), which acts as the data controller in respect of personal data collected through this Website.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification and contact details provided by you, such as your name, email address, telephone number and company details.
• Information contained in any enquiry, request or communication submitted through the Website.
• Technical information relating to your use of the Website, including IP address, browser type, device information and usage data.

You are not required to provide personal data merely to browse the Website; however, certain services or contact functions may require you to provide personal information.

3. Purposes of Processing and Legal Basis

We process personal data for the following purposes:

Responding to enquiries

To respond to requests, questions and communications submitted through the Website.

Legal basis: taking steps prior to entering into a contract and our legitimate interest in managing communications.

Business relationship management

To manage and maintain relationships with customers, suppliers, business partners and other professional contacts.

Legal basis: our legitimate interest in conducting and developing our business activities.

Website administration and security

To ensure the proper functioning, security and improvement of the Website and to detect or prevent misuse.

Legal basis: our legitimate interest in maintaining a secure and efficient Website.

Compliance with legal obligations

To comply with applicable legal, regulatory and administrative requirements.

Legal basis: compliance with legal obligations.

4. Disclosure of Personal Data

We may disclose personal data to third-party service providers supporting the operation and maintenance of the Website and, where required, to competent public authorities, regulators, courts or law enforcement bodies.

Personal data will not be disclosed to third parties except where necessary for the purposes described in this Privacy Policy or where required by applicable law.

5. International Data Transfers

Where personal data is transferred outside the European Economic Area, appropriate safeguards will be implemented in accordance with applicable data protection legislation, including the use of recognised transfer mechanisms where required.

Where required by law, individuals may request further information regarding the safeguards implemented in relation to international transfers.

6. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and record-keeping obligations.

Once retention is no longer necessary, personal data will be securely deleted, anonymised or otherwise disposed of in accordance with applicable legal requirements.

7. Your Rights

• Request access to your personal data.
• Request rectification of inaccurate or incomplete personal data.
• Request erasure of your personal data.
• Request restriction of processing.
• Object to the processing of your personal data.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent.

Requests may be submitted using the contact details provided above.

8. Complaints

If you believe that your personal data has been processed in breach of applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority. In Malta, the competent authority is:

Office of the Information and Data Protection Commissioner (IDPC)
Airways House, High Street, Sliema SLM 1549, Malta
Website: idpc.org.mt

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or operational changes. Any updated version will be published on the Website together with the date of revision.