The purpose of this Privacy Notice is to inform You of how the Drako Limited (the “Company” “We” “Us” “Our”) collects, processes, uses, stores and protects Your Personal Data as well as the rights You have with respect to the processing of Your Personal Data. The Company is the Data Controller is respect of the Personal Data We collect and We are committed to protecting and respecting your privacy.
By visiting this website (the “Website”) and using Our Services, You acknowledge reading and fully considering this Privacy Notice.
The Company acknowledges that in collecting Your Personal Data, We are bound by the laws of Malta and will process Your Personal Data in accordance with the GDPR. For any further request or query about how We use Your Personal Data, You may address Us/Our Data Protection Officer through the following email address: [email protected].
Any notice, demand, request or other communication which You address to the Companies shall either be sent by certified mail, return receipt requested, or by e-mail. All communication done by e-mail shall be deemed received on the business day following the day of transmission.
Definitions
Capitalised terms in this Notice shall have the meaning assigned to them under the GDPR and construed accordingly. Furthermore, the following definitions shall apply:
GDPR – the General Data Protection Regulation (EU) 2016/679, of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC, as amended, replaced or superseded and in force from time to time.
Services – the provision of information relating to FBMDS’s website (the “Website”).
User – any person who visits or accesses the Website or makes use of the Services on the Website (“You”, “Your”).
Subject Matter
This Privacy Notice sets out the terms and conditions which the Company follows in order to protect the privacy of Our Users. It describes the conditions under which We collect and process Your Personal Data and ensure security and confidentiality.
The Company reserves the right to amend and update this Privacy Notice, whenever it deems appropriate, and any changes thereof shall come in force and effect from the instance they appear online on the Website. Any substantial modifications to this Privacy Notice will communicated to You.
Principles of Data Processing
We fully respect Your fundamental rights and consider the protection of Your Personal Data to be a priority. Accordingly, when processing Your Personal Data, We respect the following basic principles:
We submit Your Personal Data only to lawful and fair processing, and We maintain complete transparency vis-à-vis the way We handle Your Personal Data.
We collect and process Your Personal Data only for specified, explicit, and legitimate purposes as outlined in this Privacy Notice and We do not process it further in any manner incompatible with these purposes.
We process Your Personal Data only to the extent that it is necessary and appropriate to the purposes for which it is collected.
We make reasonable efforts to ensure that Your Personal Data is accurate and updated, taking all reasonable steps to immediately delete or correct it in case of inaccuracy.
We process Your Personal Data in a manner that guarantees its security by using appropriate technical and organizational measures.
In general, We comply with all applicable laws and statutory obligations as Data Controller of Your Personal Data.
Types of Personal Data We Process
Companies collect and processes the following types of Personal Data:
At the point You visit, access and use the Website - “Technical Data”:
IP Address;
End user device data;
General communication data; and
Browsing data.
At the point of Your make contact with us for/when You: (i) general enquiries or sales enquiries, (ii) apply for a job through the application form; (iii) approach Us or have been approached by us either as our partner or client – “Communication Data”:
Name and Surname; and
E-mail address.
Any other Personal Data directly provided by You during Your interaction with Us.
Purposes and Legal Basis for Data Processing
Companies may process Your Personal Data to fulfill its obligations for the following purposes:
Administration and development of the Website and the Services;
Enhancement of user experience, including the provision of personalized Services and improvement of the Website and the Services;
Development of new products, services, utilities and offerings; and
Communicating with You in case You contact Us or in case We need to provide You with important information or request Your feedback.
Companies may process Your Personal Data only with Your lawful consent for the following purposes of:
Commercial communication, marketing and advertising of Our Services, related party services via e-mail, internet, mail, social media and/or any other appropriate communication channels as set out in a notice when requesting such consent; and
Processing sensitive data during the recruitment process (if and when applicable).
You have the right to withdraw Your consent at any time in writing to Our contact details mentioned in this Notice. Withdrawal of Your consent does not affect the lawfulness of the treatment of Your data prior to its revocation.
You can, as well, opt-out of receiving marketing communications from us by following the unsubscribe instructions included in each of our marketing communications.
Companies may process Your Personal Data based on its legitimate interest for the following purpose:
Defending the Company against any legal claims.
Data Recipients
For the execution of the purposes mentioned in this Privacy Notice, We may provide access or transmit Your Personal Data to the following recipients (“Data Processors”):
Our internet and data hosting providers for hosting purposes; and
Third-party providers for the smooth operation of Website and Our information and communication systems.
The processing of Your Personal Data by Our Data Processors is done under a contract compelling Data Processors to the same level of data protection provided under this Privacy Notice.
In case your Personal Data is transferred with any third parties outside of the European Union, We will take all reasonable steps possible such as entering into the Standard Contractual Clauses issued by the European Commission to ensure that Your data is treated as securely as it is within the European Union and in accordance with this Privacy Notice and applicable legislation.
In the event that We are required by a court or other administrative authority, pursuant to an investigation relating to unlawful activities and in any other case that We are legally bound to do so, Companies may transfer Your Personal Data to public authorities to the extent specified by law.
Without prejudice to what is stated in this Privacy Notice, We do not disclose and transmit Your Personal Data to external third parties without your consent, unless permitted by law or by a specific contractual agreement with you. Compliance with the law, responding to legal requests, preventing harm and protection of our rights.
We may share Your Personal Data to any member of our group of companies (means subsidiaries, affiliate, holding and its subsidiaries) to the extent necessary for the purposes, and on the legal basis, set out in this Privacy Notice.
Data Security and Confidentiality
In order to ensure the proper use and integrity of Your Personal Data and to prevent unauthorised or accidental access, processing, deletion, alteration or other use, the Company applies internal policies and takes all appropriate organizational, technical and procedural security measures, as well as technical standards, in accordance with applicable laws and regulations.
The processing of Your Personal Data by the Company is performed to ensure confidentiality and security. Taking into consideration the latest developments, the cost of implementation and the nature, scope, context and purposes of the processing, as well as the risks for Your rights and freedoms, which are applicable in each circumstance.
Your Personal Data is processed solely by authorised personnel of Companies, bound by strict obligations of confidentiality.
Retention of Personal Data
We retain Your Personal Data for as long as is necessary to fulfill the relevant purposes of processing explained in this Notice, in accordance with the Data Minimisation and Storage Limitation principles.
Furthermore, the Company may retain Your Personal Data after the expiration of the relevant processing purposes based on Our legitimate interest to defend Companies against any potential legal claims, before any competent court or public authority.
After the period of retention, Your Personal Data is erased from Our databases and systems. For more information about data retention terms in relation to specific Personal Data, please contact Us at [email protected].
Your Rights
You have the right:
To request access to Your Personal Data and information related to its processing and obtain a copy thereof.
To request for the rectification of any inaccuracies or any missing Personal Data of Yours.
To request the erasure of Your Personal Data.
To request the restriction of the processing of Your Personal Data in cases explicitly provided for by law.
To request the portability of Your Personal Data to another Data Controller in a structured, commonly used and machine-readable format.
To object to the processing of Your Personal Data in cases explicitly provided for by law.
To object to a decision taken solely based on automated processing, including profiling, which has an impact on You or significantly affects You.
Any requests relevant to the above Section 10.1 must be addressed in writing to [email protected].
If You feel that Your rights are infringed, You have the right to file a complaint with the Malta Office of the Information and Data Protection Commissioner at the following website https://idpc.org.mt/en/Pages/contact/complaints.aspx.
Your Obligations
By using Our Website and by providing Your Personal Data, You acknowledge that You are required to provide Your actual, accurate and complete data as requested by Companies. Furthermore, You must inform Us of any changes to Your information so as to ensure it is kept up-to-date and accurate.
Cookies
Our Website uses cookies. For more information please review Our Cookie Notice.