Alea

Privacy Policy

PRIVACY POLICY

Effective Date: July 1st, 2025

  1. INTRODUCTION

Alea Malta Ltd (“Alea”, “we”, “us”, or “our”) is committed to protecting your personal data and ensuring transparency about how we collect, use, disclose, and store information when you visit our website https://alea.com (the “Site”).

This Privacy Policy describes the nature of the data we collect, our legal basis for processing, with whom it may be shared, your rights as a data subject, and how you can exercise them. This Policy is compliant with Regulation (EU) 2016/679 (the General Data Protection Regulation, or “GDPR”) and applies to all users of the Site.

By using the Site, you acknowledge that you have read and understood this Privacy Policy.

  1. WHO WE ARE

Data Controller:
Alea Malta Ltd
NOUV, MRO Frank Galea Street, Zebbug ZBG9019, Malta
Email: legal@alea.com
Company Registration No.: C95512

If you have any questions or requests concerning the processing of your personal data, you may contact us via the email above.

  1. DATA WE COLLECT

We collect and process the following categories of personal data depending on how you interact with the Site:

3.1. Data Provided Directly by You

When using the contact form or communicating with us, we may collect:

  • Name
  • Email address
  • Company name
  • Position/title
  • Any other information you voluntarily include in your message

3.2. Data Collected Automatically

We may collect certain technical data via cookies or analytics tools, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referral URLs
  • Time and date of visit
  • Device type and unique identifiers
  • Browsing patterns on the Site (e.g., pages visited)

3.3. Data from Third Parties

If you apply to a job via the external Teamtailor platform, your personal data will be handled in accordance with Teamtailor’s own privacy policy. Alea only accesses applicant data from Teamtailor in accordance with our contractual agreement and within GDPR-compliant safeguards.

  1. LEGAL BASIS FOR PROCESSING

We process personal data only when a lawful basis under Article 6 of the GDPR applies. The bases we rely on include:

Purpose of Processing

Legal Basis

Responding to contact form submissions

Legitimate interest (Art. 6(1)(f))

Website analytics and usage optimization

Consent (Art. 6(1)(a)) via cookie banner

Ensuring website security and availability

Legitimate interest (Art. 6(1)(f))

Compliance with legal obligations

Legal obligation (Art. 6(1)(c))

Reviewing job applications (via Teamtailor)

Legitimate interest or contract (Art. 6)

You may withdraw consent at any time (e.g., for cookies) without affecting the lawfulness of processing before withdrawal.

  1. PURPOSES FOR WHICH WE USE YOUR DATA

Your personal data is used solely for purposes that are strictly necessary or proportionate to your interaction with the Site:

  • To respond to enquiries submitted via the contact form;
  • To analyze website traffic, performance, and security;
  • To maintain and improve the Site’s design, structure, and functionality;
  • To review and evaluate job applications when submitted via Teamtailor;
  • To comply with applicable laws and regulatory requirements;
  • To investigate or respond to misuse or breaches of the Site.

We do not use your data for marketing communications unless you have explicitly opted in.

  1. SHARING OF PERSONAL DATA

We do not sell or rent your personal data. However, we may share it in the following situations:

6.1. Service Providers

We use trusted third-party service providers (e.g., web hosting, analytics tools) under contractual obligations to process your data on our behalf.

6.2. External Platforms

If you are redirected to an external platform (e.g., Teamtailor), their terms and privacy policies will apply. Alea does not control those environments.

6.3. Legal Disclosures

We may disclose personal data to law enforcement, regulators, or courts when legally required or to assert, establish, or defend our legal rights.

  1. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process data outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission;
  • Binding Corporate Rules (if applicable);
  • Transfers to jurisdictions deemed adequate by the European Commission.

A copy of these safeguards may be requested by contacting us.

  1. DATA SECURITY

We implement appropriate technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures include:

  • HTTPS encryption;
  • Access controls and role-based permissions;
  • Firewall and anti-malware solutions;
  • Internal data handling procedures.

While we strive to protect your data, no transmission over the Internet is fully secure. We cannot guarantee absolute security.

  1. DATA RETENTION

We retain your data only for as long as necessary for the purposes described in this Policy or as required by law. The retention periods may vary depending on the nature of the interaction:

Data Type

Retention Period

Contact form submissions

12 months from last contact

Website logs (IP, usage)

Up to 14 months for analytics

Job applicant data (Teamtailor)

In accordance with Teamtailor policy

Legal/compliance records

As long as required by applicable law

Data may be anonymized or aggregated for analytical or statistical purposes beyond the original retention period.

  1. YOUR RIGHTS UNDER THE GDPR

You have the following rights under the General Data Protection Regulation:

  • Right of access: Obtain confirmation and access to your personal data.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your data when it is no longer needed or if you withdraw consent.
  • Right to restriction: Ask us to limit processing in specific circumstances.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to lodge a complaint: Contact the Maltese Information and Data Protection Commissioner (IDPC) or your local supervisory authority.

To exercise your rights, please contact us at [insert contact email].

  1. COOKIES AND TRACKING TECHNOLOGIES

Cookies and similar technologies are used to enhance user experience and analyze website performance. For details on what cookies we use and how you can manage them, please refer to our [Cookie Policy].

  1. CHILDREN’S PRIVACY

The Site is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it without delay.

  1. CHANGES TO THIS PRIVACY POLICY

We may amend this Privacy Policy from time to time to reflect legal, technical, or operational changes. When we do, we will revise the “Effective Date” at the top of the page. If changes are material, we will provide prominent notice.

We encourage you to review this Policy periodically.

  1. CONTACT US

If you have any questions, requests, or concerns about this Privacy Policy or your data, please contact:

Alea Malta Ltd
Email: legal@alea.com
Address: NOUV, MRO Frank Galea Street, Zebbug ZBG9019, Malta
Website: https://alea.com