This policy explains how Topserv Lifts Ltd (“we”, “us”) collects and uses personal data when you visit topservlifts.com or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act (Cap. 586).
Who we are
Topserv Lifts Ltd is the data controller for the personal data described in this policy.
- Address: Triq il-Fuxa, San Ġwann SGN 1307, Malta
- Email: [email protected]
- Phone: +356 2137 5830
What data we collect
When you send an enquiry
Our contact form asks for your name, email address, phone number (optional) and your message. When you submit it, our form system also records the date and time, the page you sent it from and, for security, your IP address and browser type.
When you call, email or visit us
We keep the details you give us — for example your name, contact details, the address of the building and information about your lift — so that we can respond, prepare a quotation, carry out work and provide maintenance or emergency service.
When you browse the website
Our web server keeps standard technical logs (IP address, browser, pages requested, date and time) to keep the site secure and working. We do not use analytics, advertising or tracking cookies. See our Cookie Policy for details.
Why we use your data and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to your enquiry and preparing a quotation | Steps at your request before entering a contract; your consent given on the form |
| Installing, repairing and maintaining lifts, and the 24-hour emergency service | Performance of a contract |
| Invoicing, accounting and regulatory records (e.g. lift registration and inspections) | Legal obligation |
| Keeping the website secure and preventing spam or abuse | Legitimate interests |
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
Who we share it with
Only where needed, and only with parties bound by confidentiality and data protection terms:
- our website hosting and email service providers, who store and deliver data on our behalf;
- manufacturers, suppliers and notified bodies, when needed to supply, certify or inspect your lift;
- public authorities, where the law requires it (for example the Occupational Health and Safety Authority or the Malta Competition and Consumer Affairs Authority for lift registration).
Google Maps
Our contact section shows a picture of a map. The interactive Google Map is only loaded if you click “Show map”. When you do, your browser connects to Google, which receives your IP address and may set cookies. Google is certified under the EU–US Data Privacy Framework. See Google’s privacy policy.
How long we keep your data
- Enquiries that do not lead to work: up to 24 months after our last contact.
- Customer, contract and maintenance records: for the duration of the contract and afterwards for as long as the law requires (for example tax, accounting and lift safety records).
- Server logs: a short period, normally no longer than 90 days.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, where there is no reason for us to keep it;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing already carried out.
To exercise any of these rights, email [email protected]. We will reply within one month.
If you are not satisfied with how we handle your data, you can complain to the Information and Data Protection Commissioner (IDPC), Floor 2, Airways House, Triq il-Kbira, Tas-Sliema SLM 1549, Malta — idpc.org.mt.
Security
The website uses an encrypted (HTTPS) connection. Access to enquiries and customer records is limited to staff who need it, and our systems are kept up to date.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.