Privacy Policy

Introduction

This Privacy Policy explains how grendavoli.top Ltd ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website at grendavoli.top or use our digital operations monitoring services. We are committed to protecting your privacy and ensuring transparency about how we handle your personal data.

Data Controller Information

grendavoli.top Ltd is the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws. Our company is registered in Malta with registration number C96587 and VAT number MT58741296. Our registered address is Triq in-Naxxar 64, Valletta VLT 6222, Malta.

Data We Collect

The data we collect depends on how you interact with our website and services. We collect the following types of personal information:

Information You Provide Directly

• Contact Information: When you contact us through our website forms or email, we collect your name, email address, phone number, company name, and any message content you provide.
• Account Information: If you create an account for our services, we collect your name, email address, company details, and account preferences.
• Communication Records: We maintain records of our communications with you, including emails, phone calls, and support tickets.

Information Collected Automatically

• Website Usage Data: We collect information about how you use our website, including pages visited, time spent on pages, and navigation patterns.
• Technical Information: We collect your IP address, browser type and version, operating system, and device information.
• Cookies and Tracking Data: We use cookies and similar technologies to collect information about your browsing behaviour and preferences.

How We Use Your Information

We use your personal data for the following purposes, based on legitimate interests, contractual necessity, or your consent:

Service Provision

• To provide our digital operations monitoring services and respond to your enquiries
• To create and manage your account and provide customer support
• To communicate with you about our services and respond to your requests

Business Operations

• To improve our website functionality and user experience
• To analyse usage patterns and optimise our services
• To comply with legal obligations and protect our business interests

Marketing and Communications

• To send you information about our services (with your consent)
• To provide updates about our company and industry developments
• To personalise your experience on our website

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Where processing is necessary to comply with legal requirements

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: We work with trusted third-party service providers who help us operate our website and provide our services
• Legal Requirements: We may disclose your information if required by law or to protect our rights and interests
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction

International Data Transfers

As we operate within the European Union, your data is primarily processed within the EU. If we transfer data outside the EU, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request that we correct inaccurate or incomplete personal data
• Right to Erasure: You can request that we delete your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your personal data
• Right to Data Portability: You can request that we provide your data in a structured, machine-readable format
• Right to Object: You can object to our processing of your personal data in certain circumstances
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details provided below.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Our data retention periods are as follows:

• Contact enquiries: We retain contact form submissions for 3 years for customer service purposes
• Account data: We retain account information for the duration of your relationship with us plus 7 years for legal and tax purposes
• Website analytics: We retain anonymised analytics data for 26 months
• Marketing data: We retain marketing consent records until consent is withdrawn plus 3 years for compliance purposes

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

Supervisory Authority

If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In Malta, this is the Information and Data Protection Commissioner (IDPC).