Privacy Policy

1. Introduction

For this website and other associated services, the Data Controller is Erdal Trading Ltd., headquartered at 53, Office 2, Sir Adrian Dingli Street, Sliema SLM 1902, Malta, VAT Number: MT 23287936, Company Registration Number: C 75283 (“Erdal”, "we", "us", or "our").

This Notice outlines how we collect, use, store, and protect your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), and the Data Protection Act (Chapter 586 of the Laws of Malta).

2. Data we collect

We primarily collect data related to legal entities, however, in certain cases, we also collect personal data of individuals, most commonly when they act as representatives of legal entities (clients, service providers, contractors) or consultants.

  • Identification and contact details: Name, gender, job title, company name, address, email address, phone number.
  • Website and technical data: Cookies, browsing behavior, IP address, device type, browser type, language preferences, and website usage details.
  • Other data: Any additional personal information received through inquiries or correspondence.

3. Legal basis for processing

The processing of your personal data serves various purposes, supported by the following legal bases under GDPR:

  • Contractual obligations (Art. 6.1.b GDPR): Necessary for contracts or business relationships.
  • Legal obligations (Art. 6.1.c GDPR): Required to comply with legal and regulatory requirements.
  • Legitimate interests (Art. 6.1.f GDPR): For efficient business operation and security, provided it doesn’t override your rights.
  • Consent (Art. 6.1.a GDPR): Where processing is based on freely given, specific consent (which can be withdrawn at any time).

4. Data sharing

We may share your data with:

  • Service providers: IT, accounting, legal, and other necessary services.
  • Regulatory/legal authorities: When legally required to disclose information.

All third parties are contractually required to ensure confidentiality and compliance with applicable data protection laws.

5. International data transfers

If personal data is transferred outside the European Economic Area (EEA), we implement appropriate safeguards such as Standard Contractual Clauses in accordance with Chapter V of the GDPR.

6. Data retention

We retain your data only as long as necessary for the purposes outlined or as required by law. After the retention period, data is securely deleted or anonymized.

7. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure, and review these measures regularly.

8. Your rights

Under the GDPR, you may exercise the following rights:

  • Right to access – Request a copy of your data.
  • Right to rectification – Correct inaccurate or incomplete data.
  • Right to erasure – Request deletion of your data in specific circumstances.
  • Right to restrict processing – Request limited processing in certain cases.
  • Right to object – Object to processing based on legitimate interests.
  • Right to data portability – Request your data in electronic format (if processed by automated means and based on consent).
  • Right to withdraw consent – Withdraw your consent without affecting prior lawful processing.

You can exercise your rights free of charge, and we will respond within one month. You may also lodge a complaint with the supervisory authority:
Email: idpc.info@idpc.org.mt

9. Contact information

If you have questions or wish to exercise your rights, contact us at:
Erdal Trading Ltd.
53, Office 2, Sir Adrian Dingli Street, Sliema SLM 1902, Malta
Email: info@erdal-trading.com

10. Changes to this document

We may update this Privacy Notice periodically to reflect changes in practices or legal requirements. The revised version will be published on our website.