Privacy Policy

This policy explains what happens to personal data when you visit What To Do In Malta. It is written to be read, not to be survived. If anything here is unclear, email us and we will explain it.

Who is responsible

What To Do In Malta (whattodoinmalta.com) is the data controller for the purposes of the EU General Data Protection Regulation. You can reach us at admin@whattodoinmalta.com.

What we collect

• Nothing automatically, unless you opt in. We run no advertising tags and no tracking pixels, and we set no cookies of our own. Google Analytics is loaded only if you accept it on the cookie banner; decline or ignore the banner and no request is made to Google at all. See the cookie policy.
• Two things stored in your browser. The places you save with the heart button, and your answer to the cookie banner. Both stay on your device, are readable by nobody but your own browser, and are never transmitted to us.
• Email you send us. If you email us, we receive your address and whatever you write. We use it to reply to you and nothing else. We do not add you to a mailing list.
• Server logs. Our hosting provider records standard technical request data, including IP address, for security and to keep the site running. We do not use these logs to identify or profile individual visitors.

Legal basis

Analytics relies on your consent, and only your consent: you can withdraw it at any time with "Cookie settings" at the foot of any page, which is exactly as easy as giving it was. Replying to an email you sent us relies on our legitimate interest in responding to correspondence. Our host's security logging relies on their and our legitimate interest in operating a secure service.

Who else sees your data

• Vercel, our hosting provider, processes requests to serve the site and keeps short-lived technical logs.
• Google Analytics, but only after you accept it. It then receives your IP address, in truncated form, and how you moved around the site. It is a US company and transfers rely on its standard contractual clauses. Nothing reaches it if you decline.
• Booking partners you choose to click through to: Tiqets, Klook, KKday and WeGoTrip. Following a marked link hands you to their site, where their own privacy policy applies and they may set a cookie to credit the booking to us. Nothing is shared with them unless you click, and we never receive personal data back from them. See the affiliate disclosure.
• Our email provider handles messages you send us.

We do not sell personal data, and we do not share it with anyone for marketing.

How long we keep things

Email correspondence is kept only as long as it is useful for the matter it relates to, and then deleted. Server logs are retained on our host's standard schedule.

Your rights

Under the GDPR you can ask us to:

• confirm what personal data of yours we hold, and give you a copy;
• correct anything inaccurate;
• delete it;
• restrict or object to how we use it;
• provide it in a portable format.

Email admin@whattodoinmalta.com and we will respond within one month. If you are unhappy with our response, you can complain to your national data protection authority. In Malta that is the Office of the Information and Data Protection Commissioner.

Children

This site is aimed at adults planning travel. We do not knowingly collect data from children.

Withdrawing consent

"Cookie settings" at the foot of every page reopens the banner, whatever you answered before. Declining after having accepted stops any further analytics immediately. Clearing your browser data also erases the stored answer, and you will simply be asked again.

Changes to this policy

Any change will be reflected in the "last updated" date above. Material changes will be flagged on the homepage.