We, namely, Arkadia Marketing Limited (“we”/”us”/”our”), a company registered in Malta, bearing company registration number C 11113 and having its registered address at Mizzi Organisation Corporate Office, Testaferrata Street, Ta’ Xbiex, XBX 1407, Malta, are the Organiser and the controller of your personal data.
We are committed to respecting your privacy. If you wish to contact us about our privacy practices please feel free to do so by post on the abovementioned address or by email at firstname.lastname@example.org.
Our Data Protection Officer may be contacted on email at email@example.com, by surface mail to Arkadia Marketing Ltd. Fortunato Mizzi Street, Victoria Gozo.
Please read this Privacy Notice carefully to understand our practices with respect to your personal data.
References to “data controller”, “data subject”, “personal data”, “process”, “processed”, “processing” and “Data Protection Officer” in this Privacy Notice have the meanings set out in, and will be interpreted in accordance with applicable laws, including but not limited to the Data Protection Regulation (EU) 2016/679 and the Data Protection Act, Chapter 586 of the Laws of Malta and subsidiary legislation thereto, as may be amended from time to time.
2. What amounts to personal data?
The term “personal data” refers to all personally identifiable information about you, such as your name, surname, locality, mobile number and/or email address, and includes all information which may arise that can be identified with you personally such as all information you have provided us in the relevant online registration form that you have submitted for participation in the Competition.
3. How do we collect personal data?
Your personal data will be typically exclusively collected from the relevant online registration form that you submit to us in order to participate in the Competition. If you are the winner, you may also provide us with your personal data in correspondence or communications.
4. What personal data do we process?
The personal data we collect and process for the purposes of participating in the Competition are the data you have provided us in the relevant online registration form that you have submitted for the purposes of participating in the Competition.
If you are a winner of the Competition, other personal data may need to be processed in order to award you the prize on an as the need arises basis. Prior to our undertaking of the relevant processing activity, we will request provision of such personal data from the winner.
5. How do we use your personal data?
We will process the personal data you have provided us in order to participate in the Competition exclusively for the purposes required for fulfilment of the Competition, including any purposes that are inherently related thereto. No customer profiling will be carried out on the basis of the name which you have provided to us, which name will be linked to the Participation Code.
The winner’s personal data will also be processed for the purposes of awarding the prize.
We may use the personal data that you provide to us by virtue of the online registration form to carry out marketing in respect of the outlets you have specifically selected, using any of the following methods:
You can change your mind and may withdraw your consent to the processing of your personal data for marketing purposes at any time by following the opt-out links on any marketing message sent to you and/or by contacting us at any time.
Where you opt out of being contacted for marketing purposes, this will not apply to personal data provided to us as a result of the Competition.
Withdrawal of your consent does not affect the lawfulness of the processing based on your consent prior to the withdrawal.
We may ask you to confirm or update your marketing preferences if there are changes in the law, regulation, or the structure of our business.
7. Legal Bases of Processing Personal Data
We typically process your personal data on the basis of the contractual relationship established with you through your acceptance of the Win at Arkadia…Guess Secret Number to Double Your Chances Terms and Conditions, available above and the submission of the relevant online registration form for participating in the Competition.
Processing on the basis of your explicit consent is also envisaged if you are a winner of the Competition.
On the basis of our legitimate interests or compliance with legal obligations, as applicable, we may also process your personal data for the purposes of establishing, exercising or defending legal proceedings.
We may share your personal data with third party recipients who are:
Unless specifically instructed and consented by you, we do not share your personal data with any entity located outside of the EU or EEA.
9. Automated Decision-Making and Profiling
Your personal data will not be used for any decision solely taken on the basis of automated decision-making processes, including profiling, without human intervention.
10. Data Retention
We retain your personal data exclusively for the period which is lawfully permissible to retain your personal data. Thereafter, your personal data shall be immediately and irrevocably destroyed.
Since we have a contractual relationship with you, we may retain your personal data for up to five (5) years from the end of the Competition on the basis of our legitimate interests to protect ourselves from civil cases which you might institute against us in relation to the Competition.
Any personal data which we may hold on the basis of your consent shall be retained exclusively until when you withdraw your consent. As noted above, retention of data on the basis of your consent is only envisaged in case you are a winner of the Competition or if you wish that we contact you with and with respect to communications related to updates, newsletters and events in cases where we do not have a legitimate interest to send you such communications.
11. Your Rights
For as long as we retain your personal data, you have certain rights in relation to your personal data including:
Please note that in terms of the applicable laws, your rights in relation to your personal data are not absolute.
You may exercise the rights indicated in this section by contacting us or our Data Protection Officer at the details indicated above.
12. Keeping you data secure
We shall keep your personal data secure and shall commit to take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, including against accidental loss, destruction, storage or access. Your personal data may be stored in paper files or electronically on our technology systems or on technology systems of our IT service providers.
If you have any complaints regarding our processing of your personal data, please note that you may contact us or our Data Protection Officer at the details indicated above. You also have a right to lodge a complaint with the Office of the Information and data Protection Commissioner in Malta (www.idpc.gov.mt).