Privacy Policy
Last updated: [●] June 2025
Your privacy is important to us. It is MYN’s policy to respect your privacy regarding any information we may collect from you across our website, https://mynmalta.com/ .
1. Data Controller
The data controller responsible for processing personal data is:
MYN in Rabat
17, Arcadia, Triq Bir L-Iljun c/w Triq il-Mithna, Rabat, Malta
Email: [email protected]
Phone: +356 27333331
2. Types of Data Collected
Through the website https://mynmalta.com/ we may collect the following types of data:
i. Log data
When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page and other details.
ii. Device Data
We may also collect data about the device you’re using to access our website. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.
iii. Personal Data
We may also ask for personal information, such as your:
• Name
• Social media profiles
• Date of birth
• Phone/mobile number
• Home/Mailing address
• Payment information
• Contact Number
iv. Boking Data
When you access our external booking system, you may be requested to include information about your stay with us, such as dates and preferences.
3. Purposes and Legal Basis for Processing
We will process your personal information lawfully, fairly and in a transparent manner. We collect and process information about you only where we have legal bases for doing so.
These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:
• It is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (for example, when we provide a service you request from us);
• it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our services, and to protect our legal rights and interests;
• you give us consent to do so for a specific purpose (for example, you might consent to us sending you our latest offers); or
• we need to process your data to comply with a legal obligation.
Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time (but this will not affect any processing that has already taken place).
We do not keep personal information for longer than is necessary. While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security. If necessary, we may retain your personal information for our compliance with a legal obligation or in order to protect your vital interests or the vital interests of another natural person.
4. Collection and Use of Information
We may collect, hold, use and disclose information for the following purposes and personal information will not be further processed in a manner that is incompatible with these purposes:
• to enable you to customise or personalise your experience of our website;
• to enable you to access and use our website and associated applications and to improve our website;
• to contact and communicate with you, even after your contact requests;
• for internal record keeping and administrative purposes;
• for analytics, market research and business development, including to operate and improve our website and associated applications;
• to offer additional benefits to you;
• for advertising and marketing, including to send you promotional information about our products and services and information about third parties that we consider may be of interest to you; and
• to comply with our legal obligations and resolve any disputes that we may have.
4. Data Processing and Storage
Data is processed using manual and electronic tools, in accordance with the principles of lawfulness, fairness, transparency, minimization, and security. Data is stored for the time strictly necessary to achieve the purposes for which it was collected, and in compliance with applicable laws.
5. Disclosure of personal information to third parties
We may disclose personal information to:
• Data Sistemi S.r.l., the provider of the online booking system (BookNowHotel), acting as a data processor. Their privacy policy is available at: https://www.datasistemi.eu/agreements/terms-conditions-privacy.pdf
• other third party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, ad networks, analytics, error loggers, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators;
• our employees, contractors and/or related entities;
• credit reporting agencies, courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided to you;
• courts, tribunals, regulatory authorities and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.
6. Data Transfers Outside the EEA
Personal data is primarily processed within the European Economic Area (“EEA”). However, the personal information we collect may also be stored and processed in countries where we, our partners, affiliates, or third-party service providers maintain operations.
By providing us with your personal information, you consent to the potential disclosure of such data to entities located outside the EEA. Any transfer of personal data from within the EEA to jurisdictions outside the EEA will be safeguarded through appropriate mechanisms, such as Standard Contractual Clauses approved by the European Commission or other legally recognized measures that ensure adequate protection in line with the General Data Protection Regulation (“GDPR”).
Where we transfer personal information from a non-EEA country to another country, you acknowledge that third parties in other jurisdictions may not be subject to similar data protection laws to the ones in our jurisdiction (being Malta). There are risks if any such third party engages in any act or practice that would contravene the data privacy laws in our jurisdiction and this might mean that you will not be able to seek redress under our jurisdiction’s privacy laws.
7. Data Subject Rights
Under the GDPR, users have the right to:
• Choice and consent: By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal information in accordance with this privacy policy. If you are under 16 years of age, you must have, and warrant to the extent permitted by law to us, that you have your parent or legal guardian’s permission to access and use the website and they (your parents or guardian) have consented to you providing us with your personal information. You do not have to provide personal information to us, however, if you do not, it may affect your use of this website or the products and/or services offered on or through it.
• Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.
• Restrict: You may choose to restrict the collection or use of your personal information. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below. If you ask us to restrict or limit how we process your personal information, we will let you know how the restriction affects your use of our website or products and services.
• Access and data portability: You may request details of the personal information that we hold about you. You may request a copy of the personal information we hold about you. You may request that we erase the personal information we hold about you at any time. You may also request that we transfer this personal information to another third party.
• Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date.
• Notification of data breaches: We will comply laws applicable to us in respect of any data breach.
• Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us on the email address below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint. In Malta you can submit a complaint with the Information and Data Protection Commissioner via https://idpc.org.mt/file-a-complaint/.
• Unsubscribe: To unsubscribe from our e-mail database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.
To exercise these rights, users may contact: [email protected]
8. Website Maintenance
This website is managed by a webmaster responsible solely for technical maintenance. The webmaster does not access personal data for purposes other than those strictly related to security and proper functioning of the website.
9. Cookies
This website uses technical cookies necessary for proper operation, and—subject to the user’s consent—analytical cookies to gather anonymous usage statistics. For further details and to manage preferences, please see our Cookie Policy.
10. Business Transfers
If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may continue to use your personal information according to this policy.
9. Limits of our policy
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.
10. Changes to this policy
At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about changes via our website. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.
If we make a significant change to this privacy policy, for example changing a lawful basis on which we process your personal information, we will ask you to re-consent to the amended privacy policy.