1. Data Controller Information
Crewpicnicbreez Media Ltd ("Crewpicnicbreez", "we", "our", or "us"), a company organized and existing under the laws of Malta with Company Registration Number C-98421 and registered address at Level 3, St. George's Business Plaza, Dragonara Road, St. Julian's STJ 3143, Malta, acts as the Data Controller under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Data Protection Act (Cap. 586 of the Laws of Malta).
2. Categories of Data We Collect
We collect personal data strictly when you visit our website, submit an inquiry via our contact form, or interact with our digital features:
- Directly Provided Information: Your name, email address, inquiry topic, and message content submitted through our contact interfaces.
- Technical & Usage Data: Internet Protocol (IP) addresses, browser type, device specifications, operating system, pages visited, and referring URLs collected via server logs.
- Cookie Data: Session tokens and preference choices stored on your browser in accordance with our Cookie Policy.
3. Lawful Bases for Processing
In compliance with Article 6 of the GDPR, we process your personal information under the following legal frameworks:
- Consent (Art. 6(1)(a)): For non-essential performance and analytics cookies where you have provided explicit opt-in consent via our banner.
- Contractual & Pre-Contractual Steps (Art. 6(1)(b)): To respond to your direct inquiries and communication requests submitted through the contact form.
- Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraudulent server access, and ensure responsive technical rendering.
- Legal Obligations (Art. 6(1)(c)): To comply with statutory bookkeeping, regulatory reporting, and law enforcement requests under Maltese jurisdiction.
4. Third-Party Processors & International Transfers
We do not sell, rent, or trade your personal data. We engage vetted technical service providers (such as European cloud hosting infrastructure, email routing systems, and diagnostic tools) bound by strict Data Processing Agreements (DPAs) incorporating European Standard Contractual Clauses (SCCs) where international transfers outside the EEA occur.
5. Data Retention Periods
Contact form submissions and inquiry correspondence are retained for a maximum duration of twenty-four (24) months from the date of final resolution, after which they are securely purged. Technical server logs are retained on a rolling cycle of thirty (30) days for forensic security purposes.
6. Your Statutory Rights (GDPR & CCPA)
Subject to applicable statutory exemptions, you hold the following privacy rights:
- Right of Access: Request confirmation and copies of your personal data processed by us.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal information where retention is no longer justified.
- Right to Restrict Processing: Request suspension of processing under disputed circumstances.
- Right to Data Portability: Obtain your data in a structured, machine-readable format.
- Right to Object: Contest processing based on legitimate interests at any time.
- Non-Discrimination: California residents exercising rights under the CCPA/CPRA will not receive discriminatory service or degraded performance.
7. Data Protection Officer (DPO) Contact
To exercise your rights or submit a privacy query, contact our designated privacy officer at:
Data Protection Officer
Crewpicnicbreez Media Ltd
Level 3, St. George's Business Plaza, Dragonara Road, St. Julian's STJ 3143, Malta
Email: [email protected]
If you believe your personal data has been handled unlawfully, you have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) of Malta (idpc.org.mt).