Legal

Privacy Policy

Last updated: 13 June 2026

1. Controller

ImaginaMalta (imaginamalta.com) is operated by:

Brand House Dawid Ziobro
Strachocin 31, 57-550 Stronie Śląskie, Poland
NIP: 6381513187 · REGON: 356821592

2. Data we collect

Server access logs — your IP address, browser type, pages visited and the date and time of each request are recorded in server access logs. These logs are retained for up to 30 days and used solely to maintain the security and performance of the service.

Analytics (Google Analytics 4) — we use Google Analytics 4 to understand how visitors use the site. GA4 collects anonymised usage data including pages visited, time spent on the site and geographic region (country/city level). Cookies set by GA4: _ga, _ga_9VGZ12005H. Data is retained for up to 2 years.

We do not operate user accounts, contact forms or any other mechanism by which you would voluntarily submit personal data to us.

3. Legal basis (GDPR Art. 6)

Processing of analytics data is based on our legitimate interest (Art. 6(1)(f) GDPR) in understanding how the service is used and improving its quality and performance.

Server log processing is based on our legitimate interest in maintaining the security and integrity of the service.

4. Data processors

Google LLC processes analytics data on our behalf under a data processing agreement. Data may be transferred to the United States under standard contractual clauses approved by the European Commission. See: Google Privacy Policy.

5. Data from public registries

ImaginaMalta indexes publicly available data from the Malta Business Registry (MBR), Malta Tourism Authority (MTA) and OpenStreetMap. This data relates to registered businesses and public infrastructure — it is not personal data collected from users of this website.

6. Your rights

Under GDPR you have the right to:

access personal data we hold about you
rectification of inaccurate data
erasure of your data ("right to be forgotten")
restriction of processing
object to processing based on legitimate interest
data portability

To exercise any of these rights, contact us at: gobrandhouse@gmail.com

7. Supervisory authorities

You have the right to lodge a complaint with a data protection supervisory authority:

Malta: Information and Data Protection Commissioner (IDPC) — idpc.org.mt
Poland: Urząd Ochrony Danych Osobowych (UODO) — uodo.gov.pl

8. Data retention

Server logs: 30 days. Analytics data: up to 2 years (managed by Google Analytics).

9. Cookies

For detailed information about the cookies we use, see our Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the service after changes constitutes acceptance of the revised policy.