Our Privacy Policy
This Privacy Policy (the “Policy”) has been prepared by CapServices Limited (the “Company”) to meet the requirements of the Data Protection Act (Chapter 586 of the Laws of Malta) and the General Data Protection Regulation (GDPR) (regulation (EU) 2016/679) and it only relates to the collection, protection, disclosure and use of personal data belonging to living individuals. The Policy is applicable to all websites owned and operated by the Company, including www.capservicesmalta.com and does not relate to data which emanates from companies or other entities, although the general principles regarding our collection and use of data is broadly the same irrespective of whoever is the user of our website, or our customers.
This Policy (together with our Website Terms and Conditions of Use and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data.
About Us
CapServices Limited is registered in Malta with company number C84084 and its registered office is at The Hub Annex, Triq Sant’ Andrija, San Gwann, SGN 1612, Malta. The Company is a corporate services provider and we are regulated by the Malta Financial Services Authority. For the purposes of the General Data Protection Regulation (GDPR), we are the data controller of the personal data you submit via our websites.
We are committed to protecting your privacy and the security of the personal data we hold and process on your behalf. This Privacy Policy explains how we collect information, what we use the information for, our legal basis for doing so, and what controls you have. We reserve the right to change this privacy policy from time to time by changing it on the Website. This privacy policy was last updated on 14 October 2019.
1. Information we may collect from you
1.1. We may collect and process the following personal information about you:
1.1.1. General personal details, which may include:
- Your name
- Your contact details (email address and your telephone number)
- Date of Birth
- Marital Status
- Number of Dependants
- Residential Address
- Residential Status
- Employment Details
- Outgoings
1.1.2. Communications you send to us (by telephone, email or otherwise), for example, to report a problem or to submit queries, concerns or comments regarding the Website, our service, or general comments
1.1.3. Surveys that we use for research purposes, which we have asked you to complete, although you do not have to respond to them
Information we collect about you
1.2. With regard to each of your visits to the Website we may automatically collect the following information:
1.2.1. Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system;
1.2.2. Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from the Website (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
1.3. We may receive information about you if you use any of the other websites we operate or the other services we provide.
1.4. The information detailed above will not constitute personal data.
2. What do we do with your data?
We use your personal data for the following purposes:
Providing our services to you
2.1. We need to process certain personal information in order to provide our services to you, including the following:
2.1.1. To enable us to process and submit your Application Form to lenders and/or third-party marketing partners (the “Advertising Partners”);
2.1.2. To enable us to contact you regarding your application or any inquiries
2.1.3. To help us find you the most appropriate product(s)
2.1.4. To ensure that content from our Sites is presented in the most effective manner for you and for your computer
*2.1.5.** To detect, prevent and investigate potential or actual fraud and related activities
2.1.6. To notify you about changes to our products and services
2.1.7. To validate, suppress or enhance data
Contacting you about our services
2.2. If you have given us your contact information, we may use these details to get in touch with you about the services we offer such as by following up on an incomplete registration process or to email you details of offers you may be interested in.
2.3. You may opt out of this at any time by telling us, or if we have contacted you via email, you will be given an option to opt out by clicking the relevant email link.
Improving our services
2.4. We may use your personal data to analyse how you are using our service and to gain insights into how we can improve our products and services.
Customer Support and account administration
2.5. We may use your personal data to provide you with customer support or to investigate complaints or concerns about your account.
2.6. We may use your personal data to provide you with information on related products and services that you may be interested in.
2.7. We will not transfer any of your personal data to third parties for this purpose unless you give us your explicit consent.
3. Who might we share your information with?
We will only use your personal data where the Laws of Malta allow us to. We may use your data in the following circumstances:
3.1 Where you wish to formally engage with us.
3.2 Where you are being provided with services, as requested by you.
3.3 Where it is necessary for our legitimate interests or necessary by the legitimate interests of a third party.
3.4 Where it is necessary for us to comply with our legal obligations to third parties, including to the regulators and government agencies.
3.5 We may share your personal data with advertising networks and social media companies such as Facebook and Google in order to present you with relevant advertisements.
3.6 Our Sites may, from time to time, contain links to and from the websites of our advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
3.7 We will store and process your information on our computers and in any other way we consider appropriate. By “your information” we mean personal and financial information we obtain from you or from third parties, such as credit reference agencies, fraud prevention agencies or other organisations.
3.8 We will use your information to provide our services, for research, assessment and analysis and to develop and improve our services to you and other customers and protect our interests.
3.9. Calls between us may be recorded and/or monitored.
3.10. If you were introduced to us by a third party, we will give them your contact details and sufficient information about you for their accounting and administration purposes.
3.11. Otherwise we will keep information about you confidential.
We are confident that we have selected partners and suppliers that share our same standards and commitment to the same level of privacy.
4. Our lawful basis for processing your personal data
4.1. Under Article 6 of the EU General Data Protection Regulation (GDPR) we are required to tell you about the legal basis under which we collect and process your data.
4.2. We will only collect and process your personal data in accordance with one of the below lawful bases:
** Performance of a contract: This is where the processing is necessary for a contract we have with you, or you have asked us to take specific steps before entering into a contract, such as providing you with a quote. This lawful basis covers the following purposes:
Providing our services to you
** Our legitimate interests: This is where we collect and process data in accordance with our “legitimate interests”. Our legitimate interests include:
- Improving our service
- Providing you with marketing information about our services
- Providing you with customer support and administering your account
- Providing you with information about related products and services offered by CapServices Limited
- Providing you with information about related products and services offered by our commercial partners
** Consent: You may be given the option to explicitly consent to share your data with selected third parties for marketing purposes or to sign up for related products and services. This will be via a separate notice via the website. We will never assume that we have your consent unless you have explicitly opted in, and you can withdraw your consent at any time by sending an email to [email protected].
** Compliance with our legal obligations: We may be required to process or share your personal data in compliance with a legal obligation, such as in response to a request by law enforcement or when investigating a civil claim.
5. Data storage and international transfers
5.1. All information you provide to us is, as far as reasonably practicable, stored on our secure servers. Any financial information, such as credit/debit card numbers will be encrypted using SSL and 3-D Secure technology. We ask you not to permit anyone to use your name.
5.2. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Sites; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
5.3. It may also be necessary to transfer your personal information outside the European Economic Area (which currently comprises the Member states of the European Union plus Norway, Iceland and Liechtenstein), where any of Our Partners are either based outside the EEA, or where they use data processors based outside the EEA. Where this is the case, we have in place data-transfer agreements, which incorporate certain standard model protection clauses. We will take all necessary steps in order to ensure that the correct security measures are taken, and that your personal data is treated securely and in accordance with this Privacy Policy.
6. IP addresses and cookies
This website uses cookies. View our Cookie Policy for a full list of the cookies that we use and third party cookies.
6.1. We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.
6.2. A “cookie” is a small electronic file that collects information when someone visits a website. A cookie can identify the pages that are being viewed, and this can assist us to select the pages that the viewer sees. Some cookies only exist whilst viewers are online, but “persistent” cookies — which are not session-based — remain on the viewer’s computer, so that he or she can be recognised as a previous visitor when he or she next visits our website. This allows us to collect information about a viewer’s browsing habits whilst on our Sites, and this can be useful in assisting us to monitor and improve our services.
6.3. The Company may release browsing data and information gathered using cookies in the aggregate, such as publishing a report on trends in the usage of the Sites. The report will only contain statistical data and will not identify any individual.
6.4. We do not store sensitive information such as account numbers or passwords in “persistent” cookies, and cookies in themselves, do not contain enough information to identify you. You will only acquire a personal identity in relation to your browsing habits after you have formally provided us with your personal data for the purposes outlined at 2 above.
6.5. In addition to using cookies, we might also use web tools to collect information about your browsing activities whilst on our Sites. In this respect the information that is provided is similar to the information supplied by cookies, and we use it for the same purposes.
6.6. Any information that we acquire about you using cookies or web tools is subject to the same restrictions and conditions as any other information we collect about you.
6.7. Some of our advertisers may also use cookies or web tools that are set by other people such as advertising agencies, or the businesses to which the advertisements in question relate. We do not have access to any information that might be collected in this way, and, if you are concerned, you should contact the advertiser for more information.
6.8. You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our Sites. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our Sites.
6.9. The Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 requires that cookies can only be placed on a computer where the user has given their express consent. You can choose to accept or decline cookies when you first access our Sites. We require you to indicate your choice via an automated “pop-up” box, which explains the cookies we use and what we use them for. If you decline to accept our use of cookies or set your web browser to decline their use, you will have only limited functionality in the use of our Sites.
7. Your rights
The right to be informed You have the right to be informed over what personal data we hold and how we are using it. This information is contained within this privacy notice.
The right of access You have the right to request a copy of the personal data we hold under the GDPR by making a “subject access request” to us in writing. We will comply with all valid subject access requests within 30 days, unless the request is particularly complex; in this case we will contact you within 30 days with further information. You will not be charged for making a subject access request unless we reasonably deem this to be a manifestly unfounded or excessive request, in which instance you will be charged a reasonable fee based on the administrative costs of providing the information.
The right to rectification If some of the personal data we hold is inaccurate or incomplete, you can request that we rectify our records by writing to us. We will comply with all requests within 30 days unless the request is particularly complex; in this case we will contact you within 30 days with further information.
The right to erasure If you have consented to particular uses of your personal data, you have the right to withdraw this consent at any time.
The right to restrict processing You have the right to restrict the processing of your personal data in certain circumstances, such as when you object to us using your data in accordance with our legitimate interests or when you contest the accuracy of the data we hold on you.
The right to data portability You have the right to “portability” of your personal data that we have collected with your consent or in performance of a contract that is used in automated decision-making. This means that you can request copies of all the personal data we hold for this purpose in a structured, commonly used, and machine-readable form, and we will supply this to you free of charge on request. We will respond to these requests within one month, unless the request is particularly complex, in which case we will inform you of how long it will take as soon as possible.
The right to object You have the right to object to the processing of your personal data in certain circumstances.
Rights in relation to automated decision making and profiling You have a right to object to automated decision making, to express your point of view, ask for human intervention, and to be provided with an explanation of the decision with your option to challenge it. The right is not absolute and is not applicable for the entering into a consumer credit agreement.
The right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with us directly and/or with a supervisory authority. In Malta, the relevant authority is the Information and Data Protection Commissioner. Their contact details can be found here: https://idpc.org.mt/en/Pages/contact/Contact-Information.aspx
The right to withdraw consent Where we are using your personal data in accordance with our legitimate interests, you can object to further use of your data. This objection should be based on grounds relating to your particular situation. If you object, we will stop using your personal data in this way immediately, unless there are compelling legitimate grounds for processing your personal data which override your interests, rights and freedoms (such as requests by law enforcement) or we need to process your data for the establishment, exercise or defence of legal claims. You may always object to further use of your data for direct marketing purposes by clicking the “unsubscribe” button within marketing emails or by contacting us by writing to us at [email protected]
You can exercise any of your rights by contacting us via the details at the bottom of this page. Please note that we may need to verify your identity before complying with any of the above requests.
8. How long we will keep your data for
We will only keep your personal data for as long as is necessary. This means that we will retain your personal data for as long as we have an active contract or business relationship with you, and after this, we will only keep your data for as long as is necessary for the purposes which it is stored.
9. Complaints
9.1. If you feel that we have not been complying with our obligations on data protection law or you wish to assert one of your rights, please contact us without delay using the contact details provided below.
9.2. Should you be dissatisfied with our response or wish to complain to the relevant supervisory authority, you can do so by contacting the Information and Data Protection Commissioner. Contact details for the ICO can be found here: https://idpc.org.mt/en/Pages/contact/Contact-Information.aspx
10. Contact us
10.1. If you have any concerns, questions or requests regarding this Policy, then please send an email to: [email protected]. Alternatively, you can write to us at the following address: The Hub Annex, Triq Sant’ Andrija, San Gwann, SGN 1612, Malta
Established in Malta in 2017, CapServices Malta is a boutique company service provider. Delivering professional services with a personal touch, CapServices helps to create value and ensures compliance for businesses of all sizes.
© 2022 - CapServices - All rights reserved
An MFSA Authorised Corporate Service Provider
CapServices Limited is authorised to act as a "Class C" Company Service Provider by the Malta Financial Services Authority (registration number C84084) and as provided for in the Company Service Providers Act