Privacy & Cookies
Privacy Notice
1. Who we are
This website is operated by Online ERP Ltd, a company registered in Malta under number C 117025, with its registered office at Northlink Business Centre, Level 2, Triq Burmarrad, Naxxar NXR 6345, Malta (VAT No. MT3318-0921). Online ERP Ltd is the controller of the personal data described in this notice. Contact for privacy questions: levente.virag@online-erp.mt
2. What data we collect
We only collect personal data that you give us or that is technically necessary to deliver the website:
- Email: if you write to us, your email address and the content of your message.
- Technical data: when you visit the site, our hosting provider processes your IP address and basic request data (browser type, time of request) to deliver the pages and protect the site from abuse.
We do not use the website to collect special categories of personal data, and we do not knowingly collect data from children.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Answering your enquiry and any follow-up you request | Steps at your request before entering into a contract (6(1)(b)), or our legitimate interest in replying to business enquiries (6(1)(f)) |
| Keeping a record of business correspondence | Our legitimate interest (6(1)(f)) and, where applicable, legal obligations (6(1)(c)) |
| Delivering and securing the website | Our legitimate interest in a working, secure website (6(1)(f)) |
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Who receives your data
We share personal data only with service providers who help us run the website and our communication, under data processing agreements: hosting and content delivery (Cloudflare, Inc.) and email services (Google Ireland Ltd). Some of these providers may process data outside the European Economic Area. Where this happens, the transfer is protected by an adequacy decision of the European Commission or by Standard Contractual Clauses.
5. How long we keep it
- Enquiries that do not lead to a business relationship: up to 24 months after the last contact.
- Correspondence linked to a contract: for as long as required by Maltese accounting and tax rules.
- Technical logs: as set by the hosting provider.
6. Your rights
Under the GDPR you have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time where processing is based on consent. To exercise these rights, write to levente.virag@online-erp.mt. We reply within one month, as required by the GDPR.
You also have the right to lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC), idpc.org.mt.
7. Changes
We may update this notice. The current version is always available on this page.
Cookie Notice
Cookies are small files a website stores in your browser. This website uses only strictly necessary cookies, if any, which are required for the site to work and for security (for example, protection against automated attacks by our hosting provider). These do not require your consent.
We do not use analytics, advertising or social media tracking cookies. If we add any in the future, we will ask for your consent first and update this notice. You can delete or block cookies in your browser settings; blocking strictly necessary cookies may affect how the site works.