This statement outlines the privacy policy for Malta Retailing Limited (C75302) who is the controller of your personal data.

Privacy Policy

Our privacy policy is fully compliant with the General Data Protection Regulation (Regulation EU 2016/679) the Data Protection Act Chap 586 of the Laws of Malta and we shall only process personal data where this is lawful.

What is Personal Data?

Personal data refers to any information relating to an identified or identifiable natural person, whom the latter can be identified, directly or indirectly, in particular by reference to an identifier. This personal information may be processed – such processing refers to any operation which is performed on personal data such as collection, recording, organisation, structuring and storage.

Information we collect

We only collect personally identifiable information (i.e. information identifying one individual from the other) which would have been provided to us to provide you with our Services or when you receive communications from us, or when you send us an email or other communication. We may also acquire personal data from or through third parties with whom we have an agreement in order to provide our services. Examples of personally identifiable information may include but are not limited to, the name, physical address, email address and phone number.

Processing of Personal Data:

We will process personal data fairly and lawfully, and only to the extent necessary as may be allowed in terms of law or in terms of our agreement or our terms and conditions. When processing your personal data, we will make sure that the processing shall be lawful and only, if and to the extent that at least one of the following applies:

1. To provide you with the Services requested and, any ancillary actions related thereto;
2. You have given your clear affirmative consent, signifying agreement to the processing of your personal data for one or more specific purposes;
3. To send informational newsletters that you have opted-in to;
4. Processing is necessary for compliance with a legal obligation to which we are subject;
5. Processing is necessary in order to protect your vital interests;
6. Processing is necessary to operate, maintain, enhance and provide our Services;
7. Processing is necessary for communication purposes;

We may sometimes contract with third party service providers to perform functions or services on our behalf and these third party service providers may have access to your personal information, such as names and email address required to perform their functions. We will make sure that such third party providers have undertaken to use any personal data legitimately and in accordance to our written instructions or agreements.

Rights of Data Subjects

In terms of the aforementioned regulations we protect the fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data.

As a data subject you have the following rights:

1. Right to withdraw consent – You have the right to withdraw your consent when your personal data is processed on the basis of your consent. The withdrawal of your consent shall not affect the lawfulness of processing before the withdrawal of your consent.
2. Right of access – You have the right to obtain from us confirmation as whether or not personal data concerning you is being processed, and where that is the case, access to the personal data and the additional information as outlined in the regulations. Limitations to this right will only be applicable if provided in terms of law such as anti-money laundering regulations.
3. Right to rectification – You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you.
4. Right to erasure(‘right to be forgotten’) – You have the right to obtain from us the erasure of your personal data in terms of law. This right is limited by, and subject to all our compliance, regulatory and legal obligations, including anti-money laundering regulations, whereby we are obliged to hold your personal data for such period stipulated at law, after the termination of our relationship or any other such longer time which may be necessary in view of the particular services provided to you,
5. Right to restriction of processing– You shall have the right to obtain from us restriction of processing where, in terms of the aforementioned regulations, one of the following applies:

• the accuracy of personal data is contested by yourself for a period enabling us to verify the accuracy of your personal data;
• the processing is unlawful and you oppose to the erasure of your personal data and request the restriction of their use instead;
• we no longer need the personal data, but are required by yourself for the establishment, exercise or defence of legal claims;
• you object to processing pursuant to your right to object pending the verification whether our legitimate grounds override yours;

6. Right to data portability– You shall have the right to receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format.
7. Right to object–You have the right to object, on grounds relating to your particular situation to processing of your personal data. We shall no longer process your personal data unless we have a compelling legitimate ground for the processing. You have the right to object at any time to the processing of personal data concerning you for direct marketing purposes. You may unsubscribe at any time by clicking on ‘Unsubscribe’ at the bottom the newsletter received.
8. Right to lodge a complaint– Should you require any clarification or need to discuss matters relating to data protection, you may contact the Customer Care department by email at customercare@spar.com.mt. As a data subject, you also have a right to lodge a complaint with the Information and Data Protection Commissioner, Level 2, Airways House, High Street, Sliema SLM 1549, Malta through their website https://idpc.org.mt/.

If you would like access to the information that we hold about you, if any of the information that we hold about you is inaccurate or out of date, or if you wish to withdraw your consent to the processing of your data or to restrict or object to us processing it, please let us know by getting in touch via one of the methods set out under the header “Contact Us” below.

If you object to our processing of your personal information, we will respect such requests in accordance with our legal obligations. Your objection may mean that we may not be able to perform the actions necessary to achieve the purposes set out above.

We may be required or entitled to retain your information to comply with legal and regulatory obligations and to protect and exercise our legal rights and legitimate interests.

Website

We are committed to protecting our visitors’ privacy and we will not collect any personal information about you as a visitor unless you provide it voluntarily. When you fill the form on the “CONTACT US” page, we use the personal information submitted in the form only to respond to your message. This personal information will not be kept longer than necessary and will be deleted once the feedback requirement is met.

Cookies

We use cookies on this website to enable parts of the website to function properly. However, in order to ensure that your personal data is not collected unnecessarily, we have changed our website retention data settings so that no personal data is gathered through our website. This means that no online identifiers, such as IP addresses and cookie identifiers will be gathered when you are vising our website.

Nonetheless,if you no longer want your browser to accept new cookies or if you want to disable the use of cookies altogether, you may do so from your browser settings.

Links to other Websites

Our site has a number of links to other local and international organisations. In some cases, for the benefit of the visitor, it may be required that we link to other web sites of other organisations after permission is obtained from them respectively. It is important for you to note that upon linking to another site, you are no longer on our site and you become subject to the privacy policy of the new site.

Transfers outside the European Union

We may transfer your personal information outside of Malta. The countries to which your personal information is transferred may not offer an equivalent level of protection for personal information to the laws of Malta. Where appropriate, we will take steps to ensure your information is transferred subject to appropriate safeguards, such as by entering into data transfer agreements. Where we have put data transfer agreements or similar safeguards in place, we may be able to make a copy of this available to you if you contact us via one of the methods set out under the header “Contact Us” below.

How long will we keep your personal information?

We have a data retention policy that sets out how long we keep your information. This policy is based on the type of information, the purpose of collection, and the system within our platforms in which the information is held. We keep your personal information for no longer than we need to in order to carry out those purposes for which your data has been collected.

Data Security

To prevent unauthorised access, maintain data accuracy, and ensure the appropriate use of information, we have put in place appropriate technical and organisational measures to protect your personal data.

Changes to this privacy policy

If there are any changes to this privacy policy, we will replace this page with an updated version. It is therefore in your own interest to check the “Privacy Policy” page any time you access our web site so as to be aware of any changes which we may affect from time to time. This privacy policy was last updated on the 29/04/2019.

Contact Us

Should you have any questions, comments and requests regarding the processing of your personal data you may contact us through any of the following methods:

By phone: +356 2226 8888

By email: customercare@spar.com.mt

By mail: Malta Retailing Limited: 4, Pinto Road Marsa, Malta