Schedule a consultation
Schedule a consultation
Legal Last updated: 20 October 2026

Privacy Policy

This Privacy Policy explains how personal data is collected and used when you visit skyconsultancymalta.com (the “Website”), when you contact us through the Website and when you write to us or call us. It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the Data Protection Act (Chapter 586 of the Laws of Malta).

1. Who we are

The controller responsible for the processing of your personal data in connection with this Website is:

Timea Delmar, sole trader
Triq Salvu Psaila 227, Birkirkara BKR 9078, Malta
VAT No. MT2863-2802
Email: info@skyconsultmalta.com
Telephone: +356 7930 7645

In this Privacy Policy, “we”, “us” and “our” refer to the controller indicated above. For any question about this Privacy Policy or about your personal data, you can contact us at info@skyconsultmalta.com.

2. The personal data we collect

Contact form. When you send an enquiry through the form on the Website, we receive the information you enter: your name, your email address, the services you are interested in, the option you select to describe your business and the text of your message. Together with your submission, the Website automatically records the date and time of sending, your IP address and information about your browser (user agent).

Email and telephone. When you contact us by email or telephone, we process your contact details and the content of your communication.

Browsing data. When you visit the Website, the server that hosts it automatically records technical data in its log files, such as your IP address, the date and time of the request, the page requested, the referring page, and the type of browser and device used.

Spam protection. The Website uses Cloudflare Turnstile to verify that the form is used by a person and not by an automated program. To do so, Cloudflare processes technical data such as your IP address and characteristics of your browser and device.

Cookies. The Website uses cookies and similar technologies, as described in our Cookie Policy.

We do not ask you for special categories of personal data (for example, data concerning health, religious beliefs or political opinions). Please do not include such information in your message.

3. Why we use your data and on what legal basis

To reply to your enquiry and, where you ask for it, to prepare a proposal or take other steps before entering into a contract with you. The legal basis is the performance of a contract or of pre-contractual measures taken at your request (Article 6(1)(b) GDPR). Where your enquiry is not related to a possible contract, the legal basis is our legitimate interest in answering the people who contact us (Article 6(1)(f) GDPR).

To keep a record of enquiries and of the related correspondence, so that we can follow up and, if necessary, establish, exercise or defend legal claims. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).

To operate the Website, keep it secure and protect it from spam and abuse, through server log files and Cloudflare Turnstile, and to display it correctly, including its fonts. The legal basis is our legitimate interest in a secure and properly functioning website (Article 6(1)(f) GDPR).

To use cookies that are not strictly necessary, only if you give your consent through the cookie banner. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

To comply with legal obligations to which we are subject, for example obligations relating to accounting and tax records, or requests from competent authorities. The legal basis is compliance with a legal obligation (Article 6(1)(‌c‌) GDPR).

Providing your name and email address is necessary for us to reply to your enquiry: without them we will not be able to respond. The other information in the form is optional.

4. Who we share your data with

Your personal data is processed by us and may be disclosed, only to the extent necessary for the purposes described above, to the following recipients:

Service providers acting on our behalf, such as the provider that hosts the Website and its database, our email service provider and the professionals who maintain the Website. They act as processors under a written agreement, as required by Article 28 GDPR.

Cloudflare, Inc., which provides the Turnstile spam protection service. More information is available in the Cloudflare Privacy Policy.

Google, which provides the fonts used on the Website (Google Fonts). When a page loads, your browser connects to Google’s servers to download the fonts, and your IP address is transmitted to Google in the process. More information is available in the Google Privacy Policy.

Professional advisers and public authorities, where this is required by law or necessary to establish, exercise or defend legal claims.

We do not sell your personal data and we do not use it for automated decision-making, including profiling.

5. Transfers outside the European Economic Area

Some of the providers mentioned above, in particular Cloudflare and Google, may process personal data outside the European Economic Area, including in the United States. Where this happens, the transfer is based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, for companies certified under it, or on the Standard Contractual Clauses adopted by the European Commission (Article 46 GDPR), together with any additional safeguards that may be required.

6. How long we keep your data

Enquiries and correspondence, including the data sent through the contact form, are kept for as long as necessary to handle your request and then for up to 24 months from our last contact. If your enquiry leads to a business relationship, the data is kept for the periods required by the applicable law.

Server log files are kept for a short period set by our hosting provider for security and troubleshooting purposes, after which they are deleted.

Data processed by Cloudflare Turnstile is used only for the verification and is handled by Cloudflare as described in its privacy policy.

Cookies are kept for the periods indicated in our Cookie Policy.

We may keep personal data for longer where this is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

7. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you and receive a copy of it;
Rectify inaccurate or incomplete data;
Erase your data, where the conditions of Article 17 GDPR are met;
Restrict the processing of your data in the cases provided for by Article 18 GDPR;
Receive the data you provided to us in a structured, commonly used and machine-readable format, and transmit it to another controller (data portability);
Object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests;
Withdraw your consent at any time, where the processing is based on consent.

To exercise your rights, write to info@skyconsultmalta.com. We will reply without undue delay and in any case within one month of receiving your request; this period may be extended by two further months where necessary, taking into account the complexity and number of requests, in which case we will inform you. We may ask you for information to confirm your identity. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.

8. Your right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. In Malta, the supervisory authority is the Information and Data Protection Commissioner, Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, Malta (idpc.org.mt).

9. How we protect your data

We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or access. These include an encrypted connection (HTTPS) for the Website, access to the data restricted to the people who need it, spam protection on the contact form and regular updates of the Website software. No transmission over the internet is completely secure, but we take care to keep the risks as low as possible.

10. Links to other websites

The Website contains links to third-party websites and services, such as LinkedIn and Google Maps. When you follow these links, the processing of your data is governed by the privacy policies of those third parties, for which we are not responsible.

11. Children

The Website is not directed at children under the age of 16, and we do not knowingly collect personal data from them. If you believe that a child has provided us with personal data, please contact us so that we can delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes to the Website or to the law. The current version is always available on this page, and the date of the last update is shown at the top.

Data controller

Timea Delmar

Sole trader
Triq Salvu Psaila 227
Birkirkara BKR 9078, Malta
VAT No. MT2863-2802

Cookie Policy →