Privacy policy

How we handle your information

This policy explains what personal information this website and our hosting collect, why, and the choices you have. It applies to the Rovin No. 4 website and to emails you send us.

Last updated 15 October 2026EU GDPR · Malta Cap. 586

In short

  • No cookies
  • No analytics or tracking
  • No advertising or social media pixels
  • No forms that collect your details
  • Fonts and photos load from this website only
  • We never sell your information

We only receive personal information from you if you email us or book a stay with us.

Who we are

Rovin No. 4 is a holiday apartment in Msida, Malta, licensed by the Malta Tourism Authority. It is run by Pierre and Liana, who are the data controller for the information described in this policy.

Operator: [Full legal name or business name]
Postal address: [Postal address]
Email: maltasleep@gmail.com

What we collect and why

Data protection law requires a legal basis for each use of personal data. Here is everything we handle, the reason, and the basis under Article 6 of the GDPR.

InformationWhy we use itLegal basis
Your emails to us: your name, email address, the content of your message and anything you choose to include, such as travel dates or number of guestsTo answer your questions and help arrange your staySteps you ask us to take before a booking (Art. 6(1)(b)), or our legitimate interest in replying to enquiries (Art. 6(1)(f))
Technical server logs: IP address, browser type, the page requested and the timeRecorded automatically by our web hosting provider to deliver the website and protect it from misuseLegitimate interest in running a secure website (Art. 6(1)(f))
Booking details: your name, contact details, stay dates, number of guests, any requests such as the baby cot, and payment recordsTo confirm and provide your stay, arrange check-in and answer your messagesPerformance of the booking contract (Art. 6(1)(b))
Records of completed staysTo keep the accounting and tax records Maltese law requires, and any records the Malta Tourism Authority requires of licensed accommodationLegal obligation (Art. 6(1)(c))

We do not use your information for automated decision-making or profiling, and we do not send marketing emails.

Cookies and tracking

This website does not set any cookies and does not use local storage or similar technologies. There are no analytics tools, advertising networks, social media plugins or embedded maps. The fonts and images are stored on and served from this website, so your browser does not contact third parties when the page loads.

Because nothing is stored on your device, there is no cookie banner. If we ever add tools that use cookies, we will update this policy and ask for your consent where the law requires it.

The enquiry form

The "Check availability" form on our website does not send or store anything. When you press the button, your browser puts your details into an email draft. Nothing reaches us until you send that email from your own email app.

Once you send it, we handle it like any other email, as described above.

Who sees your data

Only Pierre and Liana read your messages and booking details. We do not sell, rent or trade personal information. We share it only with:

  • Our email provider, Google (Gmail), which stores the emails you send us.
  • Our web hosting provider, which keeps the technical server logs described above.
  • Banks and payment providers, to process payment for your stay.
  • Public authorities, such as the tax authorities or the police, only when the law requires it.

Transfers outside the EU

Google, our email provider, may process data outside the European Economic Area, including in the United States. Where it does, it relies on safeguards recognised under the GDPR, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

  • Enquiry emails that do not lead to a booking: deleted within 12 months of our last exchange.
  • Booking messages and details: kept for 12 months after your stay, so we can deal with any follow-up questions.
  • Accounting and tax records: kept only for as long as Maltese law requires, then deleted.
  • Server logs: kept by our hosting provider for its standard period, normally a few weeks.

Your rights

Under the GDPR you can ask us to do any of the following, free of charge. Email us and we will reply within one month. We may ask you to confirm your identity first.

AccessGet a copy of the personal data we hold about you.
CorrectionHave inaccurate or incomplete data fixed.
ErasureHave your data deleted, unless we must keep it by law.
RestrictionAsk us to pause using your data while a concern is checked.
ObjectionObject to uses based on our legitimate interests.
PortabilityReceive data you gave us in a common digital format.

Contact us about your data

Send your request or question to:

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the data protection authority in Malta, or in the EU country where you live or work.

Office of the Information and Data Protection Commissioner (IDPC) Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, Malta Phone +356 2328 7100 · idpc.info@idpc.org.mt File a complaint online

Security, children and changes

Security

This website is served over an encrypted connection (HTTPS). Access to your messages and booking details is limited to the two of us, and we take reasonable steps to keep our accounts and devices secure.

Children

Bookings must be made by an adult. We do not knowingly collect personal information from children through this website. Details of children travelling with a family are only those the booking adult chooses to share.

Changes to this policy

If we change how we handle personal information, we will update this page and the date at the top.