1. Introduction
Malt Media (“we”, “us”, “our”) is a digital media agency based in The Netherlands. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website maltmedia.com.au or engage with our services.
2. Data Controller
Malt Media
Pieter De Hooghstraat 22
Schiedam, The Netherlands
Email: gus@maltmedia.com.au
Phone: +31 (06) 27 09 60 65
3. What Personal Data We Collect
We may collect and process the following categories of personal data:
a) Data you provide to us
- Contact form submissions: name, email address, phone number (optional), and your message
- Email correspondence: any personal data you include in emails sent to us
- Client engagements: business contact details, billing information, and project-related data provided during the course of our services
b) Data collected automatically
- Analytics data: pages visited, time on site, referral source, browser type, device type, screen resolution, and approximate geographic location (city/country level). This data is collected via Google Analytics 4 (GA4) and is subject to your cookie consent preferences.
- Technical data: IP address, browser type and version, operating system, and other technical identifiers transmitted by your browser
- Cookie data: see our Cookie Policy for details
c) Data from third-party embeds
- Google Maps: our Contact page includes an embedded Google Map, which may collect data in accordance with Google’s Privacy Policy
- Google Fonts: font files may be loaded from Google servers, which transmits your IP address to Google
4. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6(1) GDPR:
- Consent (Art. 6(1)(a)): for analytics cookies and marketing communications. You may withdraw consent at any time.
- Contract performance (Art. 6(1)(b)): to respond to your enquiries and deliver our services
- Legitimate interest (Art. 6(1)(f)): for website security, fraud prevention, and improving our services. Our legitimate interests do not override your fundamental rights and freedoms.
- Legal obligation (Art. 6(1)(c)): where we are required to retain data for tax, accounting, or other legal purposes
5. How We Use Your Data
We use your personal data to:
- Respond to enquiries submitted via our contact form or email
- Provide, manage, and improve our digital media services
- Analyse website usage to improve user experience (with your consent)
- Comply with legal and regulatory obligations
- Protect our website against security threats and abuse
6. Data Sharing and Third Parties
We do not sell your personal data. We may share data with the following categories of third parties:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Google (Analytics 4) | Website analytics | Anonymised usage data, subject to consent |
| Google (Maps embed) | Map display on contact page | IP address, cookies |
| Google (Fonts) | Typography rendering | IP address |
| Hosting provider | Website hosting and infrastructure | All data transmitted to the website |
Where third parties process data on our behalf, we ensure appropriate data processing agreements are in place.
7. International Data Transfers
Some of the third-party services we use (e.g., Google) may transfer your data outside the European Economic Area (EEA). Where such transfers occur, we ensure they are protected by appropriate safeguards, including:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Other appropriate safeguards under Chapter V of the GDPR
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions: retained for up to 24 months after your last interaction, unless an ongoing business relationship exists
- Client data: retained for the duration of the business relationship and for up to 7 years afterwards to comply with legal and accounting obligations
- Analytics data: retained in accordance with our Google Analytics settings (default: 14 months)
- Cookie data: see our Cookie Policy for specific durations
9. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15) — obtain a copy of your personal data
- Right to rectification (Art. 16) — correct inaccurate data
- Right to erasure (Art. 17) — request deletion of your data (“right to be forgotten”)
- Right to restrict processing (Art. 18) — limit how we use your data
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right to withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting the lawfulness of prior processing
- Right to lodge a complaint — you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl
To exercise any of these rights, please contact us at gus@maltmedia.com.au. We will respond within 30 days.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, access controls, and regular security reviews.
11. Children’s Privacy
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
Last updated: 10 June 2026