This Privacy Policy applies to the portal maltaexporters.mt and/or any website, sub-website and/or associated domains (and/or sub-domains) of maltaexporters.mt (the “Site“).

The services provided by TradeMalta (C-67993) (the “Company” / “Data Controller” / “We” / “Us” / “Our“), the owners of the Site, process Personal Data relating to an identifiable natural person whose information when acting as representative of a legal entity such as a limited liability company, is stored on our database(s), and may be published and made publicly available if the company submitting to our services meets the eligibility criteria set by TradeMalta, as outlined in our Terms of Service.

The processing of such data is carried out in accordance with applicable Data Protection Laws and this Privacy Policy. If a company does not meet the criteria for publication, the submitted data will be retained for a limited period for internal review purposes, after which it will either be deleted, in line with this Privacy Policy and relevant legal obligations.

The General Data Protection Regulation (GDPR) is designed to give individuals greater control over their personal data. Under this regulation, personal data refers to any information that identifies or can identify a natural person (a “Data Subject“). Identifiers may include names, contact details, identification numbers, location data, and other unique attributes. Anonymised data that cannot be traced back to an individual is not considered personal data.

The GDPR also defines special categories of personal data, which include sensitive information such as racial or ethnic origin, political opinions, religious beliefs, health data, and biometric identifiers. If we ever need to process such data, we will do so in strict compliance with the GDPR and applicable security measures.

As a data subject, you are entitled to certain rights under the Data Protection Laws:

To exercise any of these rights, please contact us as detailed in Section 20. We will respond to all legitimate requests within one (1) month. Additional information to verify your identity may be requested. You will not incur fees unless your request is manifestly unfounded, repetitive, or excessive. None of the rights above are absolute and may be subject to limitations based on our legal obligations.

This website serves as a business directory showcasing Malta-based companies that are engaged in or seeking to export goods and/or services. While legal entities such as limited liability companies do not fall under the scope of personal data protection, information about their representatives (such as directors or authorised persons) may be considered personal data.

In cases where individuals are identifiable, we treat their information in accordance with Data Protection Laws, ensuring all applicable rights and protections. Processing activities include the collection, storage, use, and disclosure of such data as necessary to operate our services.

As part of the business directory, certain personal data of company representatives, such as names and contact details, may be publicly visible online. This is done to facilitate business connections and provide international exposure, in line with the purpose of our services. If you have concerns about the publication of your data, you may contact us as outlined in Section 20.

By registering a company profile, businesses provide their explicit consent for their data to be processed and displayed publicly.

This Privacy Policy governs the collection of Personal Data pertaining to the following individuals:

1. Website Visitors – individuals visiting our website who may voluntarily provide personal data when contacting us through our Contact Form.
2. Mailing List Subscribers – individuals who subscribe to our mailing list.
3. Visitors at our Premises – individuals visiting our Premises for any reason, inclusive of meetings or the provision of services.
4. Third Parties generally – individuals with whom we do not have a direct contractual relationship, typically including prospective service providers and individuals who contact the company with enquiries.
5. Individual Shareholders, Company Officers, Company Representatives and/or Executives of prospective companies that are engaged in or seeking to export goods and/or services – individuals who are generally owners and/or legal and judicial representatives of such companies.

If you share Personal Data about another individual with us, it is your responsibility to ensure that you have the appropriate consent to do so. Our services and website are intended for business professionals. We do not collect, process, or store personal data of individuals under the age of 18.

Depending on the case, we may collect, use, store and transfer the following kinds of Personal Data:

• Company Data: company name, registration number, registered address, general contact details (e.g., business email address and phone number). This data is used for directory listing purposes. Company data is not considered personal data unless linked to an identifiable individual.
• Identification Data: personal details such as name, surname, title, date of birth, and where necessary supporting identification documents (e.g., identity card or passport). For company representatives: name, job title, and contact details.
• Contact Data: postal address, email address, telephone and/or mobile number.
• Cookie Data: information collected via cookies used on our website, as explained in our Cookie Policy.

It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your Personal Data changes during your relationship with us.

• Website Visitors: we collect Identification Data and/or Contact Data submitted via the ‘Contact Us’ form on our website. Our website does not collect personal data through cookies beyond what is described in our Cookie Policy.
• Mailing List Subscribers: we collect Identification Data and Contact Data as submitted when you subscribe to our mailing list.
• Visitors at our Premises: our front desk may manually collect proportionate and necessary Identification Data and/or Contact Data upon entry.
• Third Parties generally: Identification Data and Contact Data are usually collected through direct interaction, including via telephone enquiries or through representatives/agents acting on behalf of another entity.

We will process your personal data only when legally permitted under data protection laws. Depending on the specific purpose, we may rely on more than one lawful basis for processing.

We may share information, including personal information, with our third-party service providers who help us with hosting, maintenance, application development, backup, storage, payment processing, analytics and other services. These providers may have access to personal information solely for providing these services to us. We do not permit them to use this data for their own marketing purposes.

Company Data and Company Representative data, once published in the Directory, becomes publicly available to all users.

For the purpose of processing applications in line with the International Trade Incentive Scheme Guidelines, the General Block Exemption Regulations, or the de minimis Regulations, TradeMalta shall share data provided via an application with other Government Entities, subject to satisfying at least one of the grounds listed under the GDPR.

For the purpose of monitoring of aid under the de minimis Regulations and General Block Exemption Regulations, or where legally required, any data provided as part of an application may be shared with the European Commission.

Given that TradeMalta has been, and could be in the future, a beneficiary of EU funds, your data might also be shared with and processed by the Managing Authority and other Third Parties involved in implementation, monitoring and control as stipulated in the Manual of Procedures for Structural Funds.

As part of our business operations, we work with third parties such as service providers and subcontractors who may also act as data Processors. In certain situations we may need to share your personal data with them for the purposes explained in Section 9:

We will not share your personal data with anyone outside the parties mentioned above without your consent, except where disclosure is necessary to comply with a court order or legal requirement, support the administration of justice, respond to a legal request, report suspected fraud or criminal activity, protect your vital interests, or fulfil your specific requests. We ensure that any third parties with whom we share personal data uphold strict security measures and comply with data protection laws. Data Processors may only process your data for specific purposes in accordance with our instructions.

We may assign or transfer this policy, as well as information collected from you, including personal data, to any person or entity that acquires all or substantially all of our business, stock or assets, or with whom we merge.

In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may disclose personal information to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. We may also share such information if we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Service Agreement, or as otherwise required by law.

We may share data, including personal data, with any member of TradeMalta.

The publicly available data includes company details such as the business name, industry sector, description of products and services, contact information (email and phone number), website URL, and social media profiles (e.g., LinkedIn). Additionally, the directory may display company representative information, including their name, job title, and professional contact details. This data is provided voluntarily by companies during registration and is made publicly accessible to enhance visibility and promote business connections.

We are committed to protecting the security of your personal data. This site uses Secure Sockets Layer (SSL) to ensure secure transmission of your personal data. You should be able to see the padlock symbol in your browser’s address bar, and the URL will begin with https://, depicting a secure webpage. SSL applies encryption between two points such as your PC and the connecting server; any data transmitted during the session will be encrypted and decrypted only at the receiving end.

We collect Personal Identifiable Information (PII) through an encrypted SQL database accessible only through multi-factor authentication (MFA) by authorised personnel, providing an added layer of protection. Only authorised personnel with valid access credentials can view or modify this data.

As effective as modern security practices are, no physical or electronic security system is entirely secure. We cannot guarantee the complete security of our database, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet. Any transmission of personal data is at your own risk. Once we receive your personal data, we use appropriate security measures to prevent unauthorised access or disclosure.

We will retain your personal information for as long as is needed to fulfil the purpose outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it, or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store it and isolate it from any further processing until deletion is possible.

As a general principle, we do not transfer personal data to persons or entities located outside the European Union (EU) or the European Economic Area (EEA). However, should such a transfer become necessary, it will only occur under the following circumstances:

• To fulfil contractual or pre-contractual obligations between you and us;
• For IT software support, security, or system maintenance;
• To comply with legal or regulatory obligations;
• For the establishment, exercise, or defence of legal claims; or
• For any other lawful purpose where such a transfer is permitted under applicable data protection laws.

In such cases, we will strive to transfer personal data only to countries within the EU/EEA or to jurisdictions deemed by the European Commission to provide an adequate level of data protection. Should a transfer outside the EU/EEA be required, we shall ensure that a lawful basis exists and that appropriate safeguards are implemented.

Our website uses cookies to enhance functionality and analytics. For more detailed information, including what cookies are and how and why we process such data, please read our Cookie Policy.

Should you wish to submit an enquiry regarding your personal data, have your personal data corrected, or request access to the personal data we hold about you, please contact us using the details below.

We will respond to subject access requests within one (1) month, in accordance with Article 12 GDPR. If additional time is required due to complexity, we will notify you within this period. If we are legally unable to fulfil a request, we will inform you of the reasons for refusal and your right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) Malta.

We reserve the right to refuse requests or charge a reasonable fee if requests are manifestly unfounded, repetitive, or excessive.

All requests must be submitted in writing and must include your full name, address, email address, and a clear description of the information sought or the correction requested. To ensure the security of your data, we may require additional verification, such as proof of identity, before processing your request.

We are committed to addressing any concerns you may have regarding the processing of your personal data and encourage you to contact us directly in the first instance if you believe we have not adhered to applicable data protection laws.

Nonetheless, should you feel wronged by our data protection practices, you may file a complaint with the data protection supervisory authority in your country of residence. In Malta, the relevant authority is:

This website may, at times, contain links to third-party websites, plug-ins, or applications (“Third-Party Sites“). Engaging with these links may allow third parties to collect or share your personal data. We do not control, endorse, or assume responsibility for the privacy practices, policies, or content of any Third-Party Sites. We strongly recommend reviewing the privacy policies of any Third-Party Site you visit or interact with to understand how your data may be processed.

We reserve the right to amend this Privacy Policy periodically. The most recent revision date will be indicated at the beginning of this document. Any changes will become effective immediately upon posting the updated policy on this website. Where required by applicable law, we will seek your explicit consent for any alterations to the way we collect, use, or disclose your Personal Data. In all other cases, your continued use of this website following the publication of changes will constitute your acceptance of the revised Privacy Policy. We recommend that you review this page periodically for updates.

This Privacy Policy is governed and construed in accordance with the Laws of Malta.