1. Introduction

Welcome to “The Golden Crown Malta.” This privacy and data protection policy is designed to inform our customers about how we collect, use, store, and protect their personal data, in compliance with the General Data Protection Regulation (GDPR) and applicable Maltese law.

2. Collection of Personal Data

We may collect and process the following personal data:

• Contact Details: Such as your name, email address, phone number, and postal address.
• Booking Details: Information related to your appointments, including date and time, services requested, and any special requests.
• Payment Information: Data necessary for processing payments, which may include credit or debit card details.
• Feedback and Communication: Any communications you have with us, including feedback, inquiries, or complaints.

3. Purpose of Data Collection

We collect and process personal data for the following purposes:

• Service Provision: To manage bookings, provide services, and communicate with you about your appointments.
• Payment Processing: To handle payments and refunds.
• Customer Service: To address any inquiries, requests, or complaints you may have.
• Marketing: With your consent, to send promotional materials or special offers related to our services.
• Legal Compliance: To comply with legal obligations and protect our legal rights.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you have given explicit consent for a specific purpose, such as receiving marketing communications.
• Contractual Necessity: When the processing is necessary for the performance of a contract with you, such as providing our services.
• Legal Obligation: When the processing is required to comply with a legal obligation.
• Legitimate Interests: When processing is necessary for our legitimate interests, provided these are not overridden by your rights.

5. Data Storage and Security

We are committed to ensuring the security of your personal data. We implement appropriate technical and organizational measures to protect against unauthorized access, disclosure, alteration, or destruction of personal data.

Your data will be stored only as long as necessary to fulfill the purposes outlined in this policy or as required by law.

6. Sharing of Personal Data

We do not sell or lease your personal data to third parties. However, we may share your data with:

• Service Providers: Third-party providers who assist us in operating our business, such as payment processors and IT service providers, under strict confidentiality agreements.
• Legal Authorities: When required by law, we may disclose your data to governmental authorities or other entities as necessary.

7. Your Rights

Under GDPR, you have the following rights concerning your personal data:

• Access: The right to access your personal data held by us.
• Rectification: The right to correct any inaccurate or incomplete data.
• Erasure: The right to request the deletion of your personal data, under certain conditions.
• Restriction: The right to request the restriction of processing of your personal data.
• Data Portability: The right to receive your data in a structured, commonly used format and transfer it to another controller.
• Objection: The right to object to the processing of your personal data for certain purposes.
• Withdrawal of Consent: The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact us using the details provided below.

8. Changes to This Policy

We reserve the right to update this privacy policy as necessary. Any changes will be posted on our website, and where appropriate, notified to you by email.

9. Contact Information

For any questions, concerns, or to exercise your rights, please contact us at:

The Golden Crown Malta

Triq San Tumas, Il-Fgura

booking@thegoldencrownmalta.com

+356 77770765