1. Data Controller

Mirovia (Malta) Ltd.
30A, Wilga Street, Paceville,
St. Julian’s STJ 3113, Malta
Email (general): office@mirovia.ltd
Email (franchise applications): franchise@mirovia.ltd

2. Personal Data We Collect

We only collect personal data that you voluntarily provide or that is necessary for website functionality and communication. This includes:

A. Data Provided via Forms

• Name, email address, phone number

• Information submitted through the franchise application form

• Business details (if applicable)

• Messages or attachments you send us

B. Website & Technical Data

Automatically collected when you browse our website:

• IP address

• Browser type, device type, operating system

• Cookies & analytics data

• Interaction logs (pages visited, time on site, etc.)

C. Communication Data

• Email correspondence

• Phone call details (no call recording)

We do not collect or process:

• Payment details

• Age verification

• Sensitive personal data unless voluntarily provided in your franchise application

3. Purpose of Processing Your Data

We process personal data exclusively for the following purposes:

A. Franchise-Related Purposes

• Responding to franchise inquiries

• Assessing franchise applications

• Conducting due diligence and communication with potential franchise partners

• Sending follow-up information or required documents

B. Website Functionality & Improvement

• To maintain and secure the website

• To analyse user behaviour to improve content

• To provide cookie consent functionality (Complianz)

C. General Communication

• Responding to questions or requests

• Scheduling meetings

D. Legal Obligations

• Record-keeping and compliance with applicable laws

• Ensuring the security and integrity of our systems

We do not use your information for unrelated marketing purposes without consent.

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on at least one of the following:

• Consent — for franchise applications and website cookies

• Contractual necessity — when communicating with prospective partners

• Legitimate interests — business development, website security

• Legal obligations — compliance with Maltese law

5. Sharing Your Personal Data

We only share your information when strictly necessary and never sell or rent personal data.

We may share data with:

• Cloud hosting providers (Hostinger)

• Email and communication tools

• Website security services (Wordfence)

• Professional advisors (legal or financial), where necessary

• International affiliates but only for franchise expansion purposes

All service providers operate under GDPR-compliant agreements.

6. International Transfers

If we transfer data outside the EU/EEA (e.g., for cloud storage), transfers occur only when:

• An adequacy decision exists

• Standard Contractual Clauses (SCCs) are in place

• Additional GDPR-compliant safeguards are applied

7. Data Retention

We retain personal data only for as long as required:

You may request deletion at any time unless legal obligations require retention.

8. Your Rights Under GDPR

You have the right to:

• Access your data

• Correct inaccurate information

• Delete your data (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

To exercise your rights, contact: office@mirovia.ltd

9. Cookies

We use essential and analytical cookies via Complianz.
You may accept, reject, or customize cookies at any time.

Cookies may be used for:

• Website functionality

• Analytics and performance (e.g., Google Analytics only if enabled and consented)

• Security (Wordfence)

• Form functionalities

For more details, see our Cookie Policy.

10. Third-Party Services Used

Depending on configuration, the following may be used:

• Wordfence (security)

• Elementor (site structure)

• Hostinger (hosting)

• Google Fonts / CDN (only when consented)

• Analytics tools (only if enabled with consent via Complianz)

Each service processes data under GDPR-compliant terms.

11. Security

We implement industry-standard security measures including:

• Firewall protection (Wordfence)

• SSL encryption

• Secure hosting

• Limited internal access

• Regular audits

No website can guarantee 100% security, but we take all reasonable measures.

12. Children’s Data

Our website is not intended for minors under 18.
We do not knowingly collect children’s personal data.

13. Updates to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on this page, with the effective date updated accordingly.

14. Contact Information

For questions or privacy requests:

Mirovia (Malta) Ltd.
30A, Wilga Street, Paceville,
St. Julian’s STJ 3113
Email: office@mirovia.ltd