Privacy policy
​
We wish to comply with our information obligations arising from the General Data Protection Regulation (GDPR) by providing the following information.
Who is responsible for data processing?
Florian Spengler
80, Triq Tal-Qroqq
MSD1704 MsidaE-mail: contact@holi-malta.com
Website: https://www.holi-malta.com
If you have any questions or comments regarding data protection, you can contact the above controller at any time.
Which data is processed for which purposes?
Accessing the booking page
Booking and settlement take place through our ticketing service provider Ticket i/O, with whom we have concluded a data processing agreement. In order to increase the security and delivery speed of the website (a legitimate interest pursuant to Art 6 (1f) GDPR), Ticket i/O uses the content delivery network (CDN) Amazon CloudFront by Amazon Web Services EMEA SARL.
AWS is involved as a recipient of your personal data (IP address) and as a data processor for Ticket i/O.
A CDN is a network of distributed servers which is able to deliver optimised content to website users. For this purpose, personal data may be processed by AWS in server logfiles.
The information is used for the analysis and maintenance of the technical operation of the servers and the network as well as to prevent misuse. The information is stored by AWS for as long as necessary for the purposes described. Ticket i/O encrypts the logfiles and deletes them after 7 days.
Further information on data protection at AWS can be found here .
It is not possible to completely eliminate the possibility that AWS transmits your IP address to the USA. AWS has implemented extended compliance measures for international data transmissions. These measures are based on the EU standard contractual clauses (SCCs). Further information is available here .
​
Services subject to consent
The following services shall only be loaded if you have sent us your consent via the consent banner in accordance with Art. 6 (1a) GDPR. You can change your settings at any time via “Cookie settings” in the footer area.
Statistics includes the following services
Google Analytics
We use Google Analytics on our website. Google Analytics is a web analysis service by Google Ireland Limited (https://about.google/intl/en/) (Gordon House, Barrow Street, Dublin 4, Ireland; henceforth “Google”). In connection with this service, pseudonymised usage profiles are created and cookies are used (see point “Cookies”).
The information is used in order to analyse website use, compile reports on website activity and render other services associated with website use and Internet use for the purposes of market research and the needs-based design of this website. In certain circumstances, this information may also be sent to third parties if this is required by law or these third parties process data on our behalf. In no event will your IP address be associated with other data held by Google. The IP addresses are anonymised to prevent the possibility of association (IP masking).
You can prevent the installation of cookies by configuring the settings of your browser software accordingly. However, we wish to point out that in this case not all the functions of this website may be useable to the full extent.
Moreover, you can prevent the collection of data generated by the cookie in relation to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, in particular for browsers on mobile end devices, you can also prevent collection by Google Analytics by clicking here.
An opt-out cookie is then saved which prevents the collection of data when you visit this website in the future. The opt-out cookie is stored on your device and only applies to this browser and only to our website. If you delete the cookies in this browser, you will need to save the opt-out cookie again.
Further information on data protection in connection with Google Analytics can also be found on the Google Analytics help page (https://support.google.com/analytics/answer/6004245?hl=en).
​
Matomo Web Analysis
On this website, we have integrated elements of Matomo by the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Matomo is a software tool for web analysis – i.e. for the collection, storage and analysis of data about the behaviour of website visitors. The tool collects data, for example, regarding the website a data subject came from, which web pages of the website were accessed and how often and for what length of time a web page was viewed. This data is used to optimise the website and to conduct a cost-benefit analysis for Internet advertising.
Data processing is carried out in Germany. We do not share this personal data with third parties.
You can prevent our website from placing cookies at any time by configuring your Internet browser accordingly and thereby permanently objecting to the placement of cookies. These settings in your Internet browser would prevent Matomo from placing a cookie on your IT system. Moreover, a cookie already placed by Matomo may be deleted with the use of an Internet browser or other software programs.
Furthermore, you have the option to object to the collection of data generated by Matomo in relation to your use of this website and to prevent such collection in the future. To do so, you will need to save an opt-out cookie here:
Marketing includes the following services
​
Facebook Pixel
This website uses Facebook Pixel by Facebook Inc. In the event that express consent is provided, this tool allows the behaviour of users to be tracked after they have viewed or clicked on a Facebook ad. This process serves to analyse the effectiveness of Facebook ads for statistical and market research purposes and can help optimise further advertising activities.
The collected data is anonymous for us; we are therefore unable to determine the identity of users. However, the data is stored and processed by Facebook, which means an association with the respective user profile is possible and Facebook may use the data for its own advertising purposes in accordance with the Facebook privacy policy (https://www.facebook.com/about/privacy). The data can allow Facebook and its partners to place ads within and beyond Facebook. A cookie may also be stored on your computer for these purposes.
​
LinkedIn Insight Tag
Our website uses the conversion tool LinkedIn Insight Tag by LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser which enables, for example, the following data to be collected: IP address, device and browser properties and page events (e.g. page views). This data is encrypted, anonymised within 7 days and the anonymised data is deleted within 90 days. LinkedIn does not share any personal data with ticket.io, but offers anonymised reports about the website target group and ad performance. Moreover, LinkedIn offers the option of retargeting in connection with Insight Tag. Ticket.io is able to use this data to display targeted advertising beyond its website, without you being identified as the website user. Further information on data protection at LinkedIn is available in the LinkedIn privacy policy. Members of LinkedIn can manage the use of their personal data for advertising purposes in their account settings. To deactivate Insight Tag on our website (opt-out), click here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .
​
Google Ads
Our website uses the functions of Google Ads, which we use to promote this website in the Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For this purpose, Google places a cookie in the browser of your end device; this cookie automatically enables interest-based advertising with the use of a pseudonymous cookie ID and based on the websites you visit.
Further data processing only takes place to the extent that you have provided your consent to Google that your Internet and app browser history may be associated by Google with your Google account and that information from your Google account may be used to personalise advertisements you see online. If you are logged into Google when you visit our website in this case, Google will use your data together with Google Analytics data to create and define target group lists for cross-platform remarketing. Google will thus link your personal data with Google Analytics data in order to compose target groups.
You can permanently deactivate the placement of cookies for advertising preferences by downloading and installing the browser plug-in available via the following link: https://www.google.com/settings/ads/onweb.
Alternatively, you can find more information about the placement of cookies by visiting the Digital Advertising Alliance website (www.aboutads.info) and configuring your settings accordingly. Finally, you can configure your browser to inform you about the placement of cookies and ask you about their acceptance in each individual case or to deny the acceptance of cookies for certain cases or generally. The non-acceptance of cookies may have a negative effect on the functionality of our website.
Further information and data protection policies related to advertising and Google can be found here: https://www.google.com/policies/technologies/ads.
Google Tag Manager
This website uses Google Tag Manager – a cookie-less domain that does not collect any personal data.
This tool allows website tags (i.e. keywords integrated into HTML elements) to be implemented and managed via an interface. By using Google Tag Manager, we are able to automatically detect which button, link or personalised image you have actively clicked on and can then determine which content on our website is particularly interesting to you.
The tool also triggers other tags which may in turn collect data in certain circumstances. Google Tag Manager does not access this data. When you have disabled a function at the domain or cookie level, this will apply to all tracking tags implemented with Google Tag Manager.
Support
Booking support is provided via our ticketing service provider ticket.io, with whom we have concluded a data processing agreement.
Personal data is collected when you establish contact with us (via the contact form or email, for example). Which data is collected in the case of the contact form can be seen based on the fields contained in the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or establishing contact and for the associated technical administration. The legal basis for the processing of data is our legitimate interest in responding to your enquiry, in accordance with Art. 6 (1f) GDPR. Your data will be deleted once your enquiry has been conclusively handled; this is the case when the circumstances indicate that the matter concerned has been conclusively clarified and no statutory retention obligations prevent the deletion of data. Ticket i/O uses the technical service provider ZOHO DESK ( https://desk.zoho.eu/portal/tiosupport/de/home ) for customer support.
​
Cookies
The data processed by cookies and necessary for the proper function of the website is required for the maintenance of our legitimate interests and those of third parties, in accordance with Art. 6 (1f) GDPR.
In the case of all other cookies, data processing is based on your consent to same via our opt-in cookie banner, in accordance with Art. 6 (1a) GDPR.
​
Who are the recipients of the data?
Unless otherwise stated in advance, as a rule we do not share personal data with third parties. However, we may engage service providers including the data processors mentioned above. In this case, it is possible that a service provider may obtain knowledge of personal data.
​
Where is the data processed?
Data processing carried out by us only takes place within the European Union.
​
What rights do you have?
You have the right to demand information about your personal data we process. Moreover, you have the right to the correction, deletion or restriction of processing, to the extent you are legally entitled to these rights.
In addition, you have the right to object to processing in accordance with statutory provisions. The same applies to a right to data portability.
​
In particular, you have the right to object to the processing of your data in accordance with Art. 21 (1) and (2) GDPR if this is performed on the basis of the balance of interests.
Lastly, you have the right to lodge a complaint with a supervisory authority responsible for data protection.
Version: 07/07/2021