Last updated 7th August 2024

This Privacy Policy (the “Policy”) describes how your Personal Data is collected, used, and shared when you visit, make a purchase from https://www.breatheasymalta.com  (the “Site”) or subscribe to the Site’s mailing list. Any capitalized terms used herein without/ definition shall have the meanings assigned to them in the General Data Protection Regulation (EU) 2016/679 (the “GDPR”).

For the purposes of this Policy, “you” are the “User” or the “Data Subject”.

  1. DATA CONTROLLER

The controller of your Personal Data is Breatheasymalta , address at 42 Triq San Pawl Munxar Gozo MXR1489  (the “Controller”).

  1. PURPOSE
    The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:
  1. The personal data we will collect;
  2. Use of collected data;
  3. Who has access to the data collected;
  4. The rights of Site users; and
  5. The Site’s cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

  1. GDPR
    For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the “GDPR”).

We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.

By using our Site users agree that they consent to the conditions set out in this Privacy Policy.

  1. PURPOSES AND LEGAL BASIS FOR PROCESSING

We will only collect and process your Personal Data where we have a legal basis to do so. As a Data Controller, the legal basis for our collection and use of your Personal Data varies depending on the manner and purpose for which we collected it.

We will only collect Personal data from you when:

  1. CATEGORIES OF PERSONAL DATA WE COLLECT

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including:
(i) your name;
(ii) your billing address;
(iii) your shipping address (if different from your billing address and if required)
(iv) your mobile number.
We refer to this information as “Order Information”.

  1. RECIPIENTS OF PERSONAL DATA

We may share your Personal Data with:

(i) Other companies all of which are registered in the European Union and comply with the provisions of the GDPR;

(ii) third party payment processing services to process your payment to us.

(iii) third party service providers that we engage to deliver the Products you have ordered and to manage any returns or exchanges of such Products.

Finally, we may also share your Personal Data to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Your Personal Data will not be transferred to international organisations.

  1. YOUR RIGHTS

If you purchase a product from the Site, you have the right to:
(i) access Personal Data we hold about you;
(ii) ask that your Personal Data be corrected, updated, or deleted;
(iii) restrict and/or object the processing of your Personal Data;
(iv) lodge a complaint with the Supervisory Authority.

If you would like to exercise these rights, please contact us through the contact information above.

  1. DATA RETENTION

Order Information will be retained as long as the User remains a registered customer of the Site. Once the User opts-out, the Order Information is deleted.

Information that has to be retained by law, such as that contained in invoices and tax documents, will be retained as long as required by the applicable legislation.

  1. MISCELLANEOUS

We may update this Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Please visit this page often to familiarize yourself with the changes.

The Site is not intended for individuals under the age of 18.

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

  1. HOW TO ACCESS, MODIFY, DELETE, OR CHALLENGE THE DATA COLLECTED

If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR, please contact our offices:

[email protected]

Breatheasymalta 42 Triq San Pawl Munxar Gozo Malta MXR 1480

  1. COOKIE POLICY
    A cookie is a small file, stored on a user’s hard drive by a website. Its purpose is to collect data relating to the user’s browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this may decrease the quality of your user experience.

We use the following types of cookies on our Site:

  1. Functional cookies
    Functional cookies are used to remember the selections you make on our Site so that your selections are saved for your next visits;
  2. Analytical cookies
    Analytical cookies allow us to improve the design and functionality of our Site by collecting data on how you access our Site, for example data on the content you access, how long you stay on our Site, etc; and
  3. Targeting cookies
    Targeting cookies collect data on how you use the Site and your preferences. This allows us to personalize the information you see on our Site for you.
  1. COMPLAINTS
    If you have any complaints about how we process your personal data, please contact us through the contact methods listed in the Contact Information section so that we can, where possible, resolve the issue.
  2. CONTACT INFORMATION
    If you have any questions, concerns, or complaints, you can contact our offices, at:

[email protected]

Breatheasymalta 42 Triq San Pawl Munxar Gozo Malta MXR 1480