EMAX Solutions Co Ltd (“EMAX”, “we”, “us”) respects your privacy. This policy explains what personal data we collect when you visit our website at www.emax.cloud, contact us, or use our services, how we use it, and your rights under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Maltese Data Protection Act (Cap. 586).
1Who we are
EMAX Solutions Co Ltd is the controller of the personal data described in this policy.
- Address
- 102, Triq iz Zerniq, Siggiewi SGW1114, Malta
- Company registration number
- C 51754 (registered in Malta)
- Phone
- +356 21 377 217
- info@emax.mt
2Personal data we collect
Depending on how you interact with us, we may collect:
- Contact details: your name, company, email address and phone number, when you use our contact form or email us.
- Newsletter sign-up: your email address, when you subscribe to our newsletter. Newsletter emails are sent through our email service provider, MailerLite.
- Enquiry content: the message and any details you choose to send us, including the service you are interested in.
- Support information: details needed to resolve a support ticket, such as your name, contact details, the system you use and a description of the problem.
- Client account information: details needed to provide our managed services and software, such as user names, email addresses and licence information for your organisation.
- Technical information: your IP address, browser type and pages visited, collected through our web server and cookies, as described in section 7.
We ask you to provide only the information we need. Please do not send sensitive personal data (such as health or financial details) through the contact form.
3How we use your personal data
- To respond to your enquiries and arrange demonstrations.
- To provide, manage and support our software and managed IT services.
- To send you a copy of your enquiry, where you ask for one, and to keep records of our communications.
- To keep our website secure, working properly and easy to use.
- To meet our legal, accounting and regulatory obligations.
- To send you information about our products and services, including our newsletter, only where you have agreed to receive it or where the law allows. You can unsubscribe at any time using the link in every email.
4Legal basis for processing
We process personal data on one or more of the following bases: performing a contract with you or taking steps at your request before entering into one; our legitimate interests, such as running and securing our business and responding to enquiries, where these do not override your rights; compliance with a legal obligation; and your consent, where we ask for it.
5Who we share your data with
We do not sell your personal data. We share it only where necessary, with:
- our staff, on a need-to-know basis;
- trusted service providers who help us run our business, such as email, hosting, scheduling and support platforms, under written agreements that require them to protect your data;
- professional advisers, such as accountants and lawyers, under a duty of confidentiality;
- public authorities, where required by law.
Some of our service providers may process data outside the European Economic Area. Where this happens, we ensure appropriate safeguards are in place, as required by the GDPR.
6How long we keep your data
We keep personal data only for as long as necessary for the purpose it was collected for. Enquiry and correspondence records are normally kept for up to two years after our last contact. Client and contract records are kept for the period required by law, usually at least six years for accounting purposes. When the retention period ends, we securely delete or anonymise the data.
7Cookies and similar technologies
Our website uses only the cookies and browser storage needed for it to work, such as remembering whether you have seen our cookie notice. We do not use advertising or tracking cookies on this website. If we add analytics or other non-essential cookies in future, we will ask for your consent first and update this policy.
8How we protect your data
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Our approach is informed by ISO 27001 principles, and includes access controls, encryption where appropriate, and staff confidentiality obligations. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
9Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, where the law allows;
- restrict or object to our processing;
- receive your data in a portable format, where applicable;
- withdraw your consent at any time, where we rely on it;
- lodge a complaint with the supervisory authority.
To exercise any of these rights, email info@emax.mt. We will respond within one month, as the GDPR requires. We may need to confirm your identity before acting on your request.
10Children
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 16.
11Links to other websites
Our website contains links to third-party sites, such as our support portal. Those sites have their own privacy policies, which we encourage you to read.
12Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it was last changed. Please check it periodically.
13Contact and complaints
If you have questions about this policy or how we handle your data, please contact us at info@emax.mt.
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC), Malta, at idpc.org.mt.