This Privacy Notice complies with the EU General Data Protection Regulation (EU GDPR) and the Data Protection Act (Chapter 586 of the Laws of Malta). It informs visitors and users of the website venuesbx.com about the personal data processed by VBX, the purposes for which it is processed, and the safeguards to protect it.

Definitions

For clarity, the following terms are defined within this Privacy Notice:

• Consent of the Data Subject: A freely given, specific, informed, and unambiguous indication of the individual’s agreement to process their data.

• Controller: The organisation determines the purposes and means of personal data processing.

• Data Subject: An identified or identifiable individual to whom the personal data relates.

• Personal Data: Information relating to an identified or identifiable individual.

• Processing: Any operation performed on personal data, such as collection, storage, use, or erasure.

• Processor: An entity processing personal data on behalf of the controller.

• GDPR: Regulation (EU) 2016/679 on protecting individuals about the processing of personal data and the free movement of such data.

Introduction

VBX (referred to as “We,” “Us,” or “Our”) is committed to protecting your data. This Privacy Notice outlines how we collect, process, and protect your data when you interact with our website, including using features such as contact forms or subscription options. This website is not intended for use by minors, and we do not knowingly collect data from them.

Who We Are

VBX operates as the controller of your data. Our registered office is at 160, Business Leaders Hub, Mdina Road, Zebbug ZBG 1905, MALTA. For any questions or concerns regarding this Privacy Notice or how we handle your data, you can contact us at:

• Email: hello@venuesbx.com

• Telephone: +356 9942 3833

• Postal address: 160, Business Leaders Hub, Mdina Road, Zebbug ZBG 1905, MALTA

Complaints

If you are dissatisfied with our handling of your data, you may complain to the office of the Information and Data Protection Commissioner (IDPC) in Malta:

• Website: www.idpc.org.mt

• Phone: +356 2328 7100

• Address: Floor 2, Airways House, Triq il-Kbira, Tas-Sliema SLM 1549, Malta.

Please contact us first so we can address your concerns directly.

Changes to this Privacy Notice

This policy is effective as of 9/12/24. We may update it periodically; any changes will be communicated on our website. Please ensure your data is up-to-date so we can communicate effectively.

The Data We Collect

We may collect and process the following types of data:

• Identity Data: Name and surname.

• Contact Data: Email address and phone number.

• Communications Data: Preferences for receiving information from us.

• Cookie Data: Information gathered through cookies (see our Cookie Policy for details).

• Employment Data: CVs, job applications, and references submitted via our careers page.

How We Collect Data

We gather data through:

• Direct Interactions: Via forms on our website, phone, email, or other communication channels.

• Cookies: Information collected during your website visit.

• Third-Party Sources: Publicly available data or analytics providers.

Purposes for Data Processing

We use personal data for:

• Responding to enquiries or complaints.

• Processing job applications.

• Sending marketing materials (with consent).

• Ensuring the secure and effective operation of our website.

Marketing Communications

You can opt-in to receive marketing communications from us. If you are an existing customer, we may provide information about similar products or services unless you opt-out. You can withdraw your consent at any time.

Data Security

We employ robust technical and organisational measures to protect your data. This includes encryption, secure access controls, and regular security assessments.

Data Retention

We retain data only for as long as necessary for the purposes outlined in this policy. Specific retention periods depend on legal, contractual, or operational requirements.

Your Rights

Under EU GDPR and Maltese law, you have the right to:

• Access your data.

• Rectify inaccuracies.

• Request data erasure (subject to legal obligations).

• Object to data processing.

• Restrict data processing.

• Withdraw consent.

• Request data portability.

To exercise these rights, please get in touch with us at hello@venuesbx.com

International Data Transfers

If your data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place to protect it in compliance with EU GDPR and relevant Maltese legislation.

Governing Law

This Privacy Notice is governed by and construed by the laws of Malta and relevant EU legislation.