This Privacy Policy explains how MyCommunications ltd, trading as MYC (“MYC”, “we”, “us” or “our”), collects, uses, stores and protects personal data when you:
visit or use our website, https://wearemyc.com/;
contact us through our website, by email, telephone or social media;
enquire about or engage our services;
apply for a position or otherwise communicate with us; or
interact with our marketing, events, campaigns or other business activities.
We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), the Maltese Data Protection Act (Chapter 586 of the Laws of Malta), and other applicable data protection laws.
This Privacy Policy applies where MYC acts as the data controller and determines why and how your personal data is processed.
The data controller responsible for your personal data is:
Legal name: MyCommunications ltd
Trading name: MYC
Business address: Mompalau Buildings, Tower Road, Msida, Malta
Email: info@wearemyc.com
Telephone: +356 2729 4969
For privacy-related questions or requests, please contact us at:
Privacy email: info@wearemyc.com
We have not appointed a Data Protection Officer unless expressly stated otherwise. Privacy enquiries may be directed to the contact details above.
The personal data we collect depends on how you interact with us.
We may collect information you provide when you contact us, complete a website form, request a proposal, engage our services, apply for a role or otherwise communicate with us.
This may include:
your name;
email address;
telephone number;
company name, job title and professional details;
information about your business, brand or project;
the content of messages, enquiries and correspondence;
billing, invoicing and transaction details;
information contained in contracts, briefs, proposals and project documentation;
files or materials you send to us;
recruitment information, such as your CV, portfolio, employment history and qualifications; and
any other information you choose to provide.
Please do not provide special-category personal data, such as health information, biometric data, information about religious or political beliefs, or other sensitive information, unless it is strictly necessary and we have specifically requested it.
When you visit our website, certain technical information may be collected automatically by our servers and by cookies or similar technologies.
This may include:
IP address;
browser type and version;
device type and operating system;
language and time-zone settings;
referring website or source;
pages viewed and links clicked;
date, time and duration of visits;
approximate location derived from your IP address;
cookie identifiers and consent preferences; and
information about website performance, errors and security events.
Where required by law, non-essential cookies and tracking technologies will only be activated after you have given your consent.
We may receive personal data from:
your employer, colleagues or business partners;
referrals and professional contacts;
social media platforms;
advertising and analytics providers;
publicly accessible sources, including company websites and professional directories;
suppliers, contractors and service providers; and
clients where we process information as part of a project or service engagement.
Where we process personal data on behalf of a client, the client will normally act as the data controller and MYC will act as a data processor. In such cases, the client’s privacy notice will primarily govern the processing.
We may process personal data for the following purposes.
We use your contact details and the information contained in your enquiry to:
respond to your message;
arrange introductory calls or meetings;
understand your objectives and requirements;
prepare proposals, estimates or recommendations; and
follow up on potential projects.
Our legal basis is taking steps at your request before entering into a contract and, where appropriate, our legitimate interest in responding to business enquiries and developing our business.
Where you or your organisation engages MYC, we may use personal data to:
manage our client relationship;
provide strategy, design, marketing, content, web development, audiovisual, print or related services;
communicate about projects and deliverables;
manage approvals, revisions and project administration;
provide reports and support;
manage suppliers and production partners; and
fulfil our contractual commitments.
Our legal basis is the performance of a contract, taking steps before entering into a contract, compliance with legal obligations and our legitimate interest in managing client projects effectively.
We may process personal data to:
issue quotations and invoices;
process and record payments;
maintain accounting and tax records;
conduct audits;
manage disputes or unpaid accounts;
prevent fraud and misuse; and
comply with legal, regulatory, reporting and record-keeping obligations.
Our legal basis is compliance with legal obligations, performance of a contract and our legitimate interest in protecting our business and enforcing our legal rights.
We may process technical and usage data to:
operate and maintain the website;
keep the website secure;
identify and prevent malicious or fraudulent activity;
diagnose technical issues;
understand how visitors use the website;
measure website performance; and
improve website content, navigation and user experience.
Our legal basis is our legitimate interest in operating a secure and effective website. Where the processing involves non-essential cookies or similar technologies, our legal basis is your consent.
Subject to your cookie choices, we may use analytics and advertising technologies to:
measure website traffic and engagement;
understand the effectiveness of our content and campaigns;
create aggregated reports;
attribute enquiries or conversions to marketing campaigns;
improve advertising relevance; and
deliver or measure advertising on third-party platforms.
Where required, this processing is based on your consent. You may withdraw or change that consent through the website’s cookie settings.
The specific providers and cookies used should be listed in our Cookie Policy or cookie consent interface.
We may use your contact details to send you relevant news, insights, service updates, invitations or marketing communications where:
you have given your consent;
you are an existing client and the communication concerns similar services, where permitted by law; or
another lawful basis applies.
You may unsubscribe at any time by using the unsubscribe option included in the communication or by contacting us.
Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.
Where you apply to work with MYC, we may process your personal data to:
assess your application;
review your CV, portfolio and qualifications;
communicate with you about the recruitment process;
arrange interviews;
verify information you provide;
contact references where appropriate; and
comply with employment-related legal obligations.
Our legal basis is taking steps at your request before entering into an employment contract, compliance with legal obligations and our legitimate interest in managing recruitment.
We will request consent where it is required for a particular recruitment activity.
If you interact with MYC through social media, we may process your profile name, public profile information and the content of your interaction.
We use this information to:
respond to comments and messages;
manage our social media presence;
understand audience engagement;
protect our reputation and accounts; and
promote our services.
The relevant social media platform also processes personal data under its own privacy policy. Depending on the activity, MYC and the platform may act as separate or joint controllers.
We may process personal data where necessary to:
establish, exercise or defend legal claims;
obtain legal or professional advice;
protect our rights, property, systems, employees and clients;
investigate suspected misconduct, fraud or security incidents; and
respond to lawful requests from courts, regulators or public authorities.
Our legal basis is compliance with legal obligations and our legitimate interest in protecting our business and legal rights.
Under the GDPR, we must have a lawful basis for each processing activity. Depending on the circumstances, we may rely on:
Contract: processing is necessary to perform a contract or take steps at your request before entering into one.
Legal obligation: processing is necessary to comply with a law or regulatory requirement.
Legitimate interests: processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Consent: you have given us clear consent for a specific processing activity.
Legal claims: processing is necessary to establish, exercise or defend legal claims.
Vital interests: processing is necessary to protect someone’s life or physical safety in an emergency.
Where we rely on legitimate interests, we assess the necessity and proportionality of the processing and consider its impact on your rights.
You may contact us for more information about the specific legal basis relied upon for a particular processing activity.
Our website may use cookies, pixels, tags, local storage and similar technologies.
Cookies may be classified as:
Strictly necessary cookies, required for the website to function or to remember privacy choices;
Preference cookies, used to remember selected settings;
Analytics cookies, used to understand website use and performance; and
Advertising cookies, used to measure campaigns or deliver relevant advertising.
Strictly necessary cookies do not normally require consent. Other cookies will only be used after you have provided consent where required by law.
You may accept, reject or manage non-essential cookies through the website’s cookie banner or cookie settings. You may also configure your browser to block or delete cookies, although this may affect certain website functions.
Details of the specific cookies, providers, purposes and retention periods should be provided in our Cookie Policy or cookie consent interface.
We may disclose personal data to trusted third parties where necessary for the purposes described in this Privacy Policy.
These may include:
website hosting and IT service providers;
cloud storage and collaboration providers;
website developers and technical support providers;
analytics, advertising and social media platforms;
email, communication and customer relationship management providers;
payment, accounting, audit and banking providers;
printers, production partners, photographers, videographers and other project suppliers;
freelance professionals, consultants and subcontractors;
professional advisers, including lawyers, accountants and insurers;
public authorities, regulators, law enforcement bodies and courts;
prospective purchasers, investors or advisers in connection with a restructuring, merger or sale; and
other parties where you have instructed or authorised us to disclose the information.
We require service providers that process personal data on our behalf to use it only for agreed purposes, protect it appropriately and comply with applicable data protection requirements.
We do not sell personal data.
Some of our service providers may process personal data outside Malta or outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we will take appropriate steps to ensure an adequate level of protection. These measures may include:
transferring data to a country recognised by the European Commission as providing adequate protection;
entering into European Commission Standard Contractual Clauses;
applying supplementary technical or organisational safeguards where necessary; or
relying on another lawful transfer mechanism permitted by the GDPR.
You may contact us for further information about the safeguards used for relevant international transfers.
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, contractual and reporting requirements.
The applicable retention period depends on the nature of the information and the reason it is processed.
As a general guide:
general enquiries that do not result in a client relationship may be retained for up to 12-24months after the last communication;
client and project records may be retained for the duration of the relationship and for up to 5-10 years afterwards;
contracts, invoices and accounting records will be retained for the period required under applicable Maltese law;
marketing information will be retained until you unsubscribe, withdraw consent or we determine that the information is no longer relevant;
unsuccessful recruitment information may be retained for up to 6 months, unless you consent to a longer talent-pool period;
cookie and analytics data will be retained according to the periods stated in the relevant cookie settings or provider documentation; and
records connected with legal claims may be retained until the relevant limitation period has expired and any proceedings have concluded.
We may retain anonymised statistical information indefinitely where it can no longer identify an individual.
We use appropriate technical and organisational measures designed to protect personal data from:
accidental or unlawful destruction;
loss or alteration;
unauthorised disclosure or access; and
other unlawful forms of processing.
These measures may include access controls, authentication measures, secure hosting, backups, software updates, confidentiality obligations, staff awareness measures and contractual protections.
Access to personal data is restricted to persons who require it for legitimate business purposes.
No method of internet transmission or electronic storage is completely secure. Although we take reasonable measures to protect personal data, we cannot guarantee absolute security.
Subject to the conditions and limitations established by law, you may have the right to:
Access: request confirmation of whether we process your personal data and receive a copy of it.
Rectification: request correction of inaccurate or incomplete personal data.
Erasure: request deletion of personal data in certain circumstances.
Restriction: request that we restrict how personal data is processed.
Objection: object to processing based on legitimate interests or to processing for direct marketing.
Data portability: receive certain personal data in a structured, commonly used and machine-readable format and request its transfer to another controller.
Withdraw consent: withdraw consent at any time where processing is based on consent.
Human review: request appropriate safeguards where a significant decision is made solely through automated processing, where applicable.
Complaint: lodge a complaint with a competent data protection authority.
You may exercise your rights by contacting us using the details in Section 2.
We may ask for information necessary to verify your identity before responding. This is intended to prevent personal data from being disclosed to an unauthorised person.
We will normally respond within one month of receiving a valid request. This period may be extended where a request is complex or where multiple requests have been made, in accordance with the GDPR.
You will not normally be required to pay a fee. However, the GDPR permits a reasonable fee or refusal to act where a request is manifestly unfounded or excessive.
We encourage you to contact us first if you have concerns about how we process personal data.
You also have the right to lodge a complaint with the Maltese supervisory authority:
Office of the Information and Data Protection Commissioner
Floor 2, Airways House
High Street
Sliema SLM 1549
Malta
Telephone: +356 2328 7100
Email: idpc.info@idpc.org.mt
Website: https://idpc.org.mt/
You may also be entitled to lodge a complaint with the supervisory authority in the EU or EEA country where you live, work or believe an infringement occurred.
Our website may contain links to third-party websites, social media platforms or external services.
We do not control those third parties and are not responsible for their privacy practices. When you leave our website, you should review the privacy policy of the relevant third party.
Our website and services are primarily intended for businesses and professionals and are not directed at children.
We do not knowingly collect personal data directly from children under the age of 16 through the website. If you believe a child has provided personal data to us without appropriate authorisation, please contact us so that we can review and, where appropriate, delete the information.
We do not currently use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.
If this changes, we will provide the information and safeguards required by applicable law.
We may update this Privacy Policy periodically to reflect changes in:
our business or services;
the personal data we process;
the technologies or service providers we use; or
legal and regulatory requirements.
The latest version will be published on this page and identified by the “Last updated” date.
Where a change is material, we may take additional steps to notify affected individuals.
For questions about this Privacy Policy, our processing of personal data or the exercise of your data protection rights, please contact:
MyCommunications ltd, trading as MYC
Email: info@wearemyc.com
Telephone: +356 2729 4969