Privacy

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

provided to users of the website pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

Website www.qualityservices.mt

QS Quality Services Ltd, in its capacity as Data Controller, pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter the “GDPR” or the “Regulation”) and to the Maltese implementing legislation (Data Protection Act, Chapter 586 of the Laws of Malta), provides users of its website with the following information regarding the processing of personal data collected when consulting the site and using the services available on it, including: the contact and quotation request forms, newsletter subscription, access to the restricted client area, the “Work with us” form for submitting applications, as well as the links at the bottom of the site to the official profiles of QS Quality Services Ltd on the social networks LinkedIn and Instagram.

For each of these processing operations, this information notice provides a general overview; where the processing has specific characteristics, it is governed in greater detail by a dedicated information notice, referred to in the points that follow and summarised in point 12.

1. DATA CONTROLLER

The Data Controller is QS Quality Services Ltd, with registered office at 3, Triq G. Flores, Advance Business Center, Santa Venera SVR 1950 – Malta and operational office at 493, Triq St Pawl – SPB 3416 St Pawl Il Bahar – Malta, which may be contacted at the e-mail address info@qualityservices.com.mt.

2. DATA PROTECTION OFFICER (DPO)

The Data Protection Officer (DPO) may be contacted at the following details: [insert DPO e-mail address].

3. CATEGORIES OF PERSONAL DATA PROCESSED

In the context of the consultation of the site and the use of the services available on it, the Controller processes in particular:

  • browsing data (for example IP addresses, browser type, operating system, pages visited, access times) collected automatically while the site is being consulted;
  • data provided voluntarily by the user through the forms available on the site (first name, surname, company name, e-mail address, telephone number, content of the message) for contact, quotation or information requests;
  • data provided upon subscription to the newsletter (e-mail address);
  • access credentials for the restricted client area;
  • data provided through the “Work with us” form , including personal identification and contact data and the Curriculum Vitae attached by the candidate;
  • data collected through cookies and similar technologies, as described in the Cookie Policy;
  • data possibly processed in relation to the social links available on the site to the official profiles of QS Quality Services Ltd on LinkedIn and Instagram, as described in point 9.

4. PURPOSES AND LEGAL BASES OF THE PROCESSING

Personal data are processed for the following purposes and on the relevant legal bases:

  • provision of the site browsing service and ensuring its security and proper functioning — legal basis: legitimate interest of the Controller (Article 6(1)(f) GDPR);
  • management of contact, quotation or information requests submitted through the forms on the site — legal basis: pre-contractual steps taken at the request of the data subject and performance of a contract (Article 6(1)(b) GDPR);
  • sending the newsletter — legal basis: consent of the data subject (Article 6(1)(a) GDPR), which may be withdrawn at any time;
  • management of the restricted client area — legal basis: performance of the contract (Article 6(1)(b) GDPR);
  • assessment of applications received through the “Work with us” form — legal basis: pre-contractual steps taken at the request of the data subject (Article 6(1)(b) GDPR) or, for retention for the purposes of future selection processes, consent of the data subject (Article 6(1)(a) GDPR);
  • management of the links to the official social profiles of QS Quality Services Ltd — legal basis: legitimate interest of the Controller (Article 6(1)(f) GDPR);
  • compliance with legal obligations — legal basis: Article 6(1)(c) GDPR;
  • establishment, exercise or defence of a legal claim in court — legal basis: legitimate interest of the Controller (Article 6(1)(f) GDPR).

5. METHODS OF PROCESSING

The processing is carried out using IT and electronic tools, with logic strictly related to the purposes indicated above, adopting technical and organisational measures appropriate to ensure the security, integrity and confidentiality of the data, pursuant to Article 32 GDPR. The processing does not involve automated decision-making processes or profiling of users.

6. RECIPIENTS OF THE DATA

Personal data may be processed by the Controller’s authorised personnel and communicated to third parties acting as Processors within the meaning of Article 28 GDPR (by way of example: providers of hosting and site maintenance services, of newsletter sending, of restricted area management and of application collection), as well as to public bodies to which communication is mandatory by law. The data are not disseminated.

7. TRANSFERS OF DATA OUTSIDE THE EU

Should data be transferred to countries outside the European Economic Area in connection with the use of IT services and platforms, the transfer will take place in compliance with the safeguards provided for in Chapter V of the GDPR (for example adequacy decisions of the European Commission or standard contractual clauses).

8. RETENTION PERIOD

Browsing data are retained for the time strictly necessary for IT security purposes, subject to further investigations in the event of suspected criminal offences. The data collected through the contact forms are retained for the time necessary to handle the request and, subsequently, for the period provided for by the applicable legal obligations. The data processed on the basis of consent (newsletter) are retained until the withdrawal of consent, in compliance with the principles of data minimisation and storage limitation (Article 5(1)(e) GDPR). The data and the Curriculum Vitae collected through the “Work with us” form are retained for a maximum period of 6 (six) months, as indicated in the specific Candidates Information Notice referred to in point 12.

9. LINKS TO THIRD-PARTY SITES AND SOCIAL NETWORKS (LINKEDIN AND INSTAGRAM)

At the bottom of its pages, the site displays certain icons linking to the official profiles of QS Quality Services Ltd on the social networks LinkedIn and Instagram. As at the date of drafting of this information notice, such icons constitute simple hyperlinks which, if selected voluntarily by the user, open the official profile on the corresponding platform; the Site does not incorporate third-party plugins or widgets that entail the automatic loading of resources from LinkedIn or Instagram servers during the mere consultation of the pages.

Consequently, merely viewing the pages of the site does not entail the transmission of data to LinkedIn or Instagram. Once the user clicks on the icon and accesses the social profile, the processing of the relevant data is carried out entirely autonomously by the platform, as an independent controller. For a full treatment of this aspect, including information on the limited joint controllership relating to the statistical data of the official pages of QS Quality Services Ltd, reference is made to the specific Social Network Information Notice referred to in point 12.

10. DATA SUBJECT’S RIGHTS

As a data subject, pursuant to Articles 15 to 22 of the GDPR, you have the right to:

  • access your personal data and obtain a copy thereof;
  • request their rectification, updating or erasure, in the cases provided for;
  • obtain restriction of processing or object to the processing, in the cases provided for;
  • receive the data in a structured format (portability), where applicable;
  • withdraw at any time the consent given, without affecting the lawfulness of the processing carried out before the withdrawal;
  • lodge a complaint with the competent supervisory authority, identified in Malta as the Office of the Information and Data Protection Commissioner (IDPC), Level 2, Airways House, High Street, Sliema SLM 1549, Malta.

To exercise your rights you may contact the Controller at the contact details indicated in point 1.

11. NATURE OF THE PROVISION OF DATA

The provision of the data requested through the forms available on the site is optional; failure to provide them, however, means that it will not be possible to follow up the contact, quotation, application or information request. The provision of the data necessary for browsing the site is, on the other hand, essential in order to use the related services.

12. OTHER RELATED INFORMATION NOTICES

In application of the principle of transparency (Article 5(1)(a) GDPR), certain processing operations carried out through the Site are governed in greater detail by dedicated information notices, which form an integral part of this information notice and prevail over it as regards the aspects specifically addressed therein:

  • Cookie Policy — governs the use of cookies and tracking technologies on the Site;
  • Candidates Information Notice (“Work with us”) — governs the processing of the data of candidates who submit their application through the Site;
  • Newsletter Information Notice — governs the processing of the data of subscribers to the newsletter service;
  • Social Network Information Notice (LinkedIn and Instagram) — governs the links available on the Site to the official social profiles of QS Quality Services Ltd;
  • Clients Information Notice — governs the processing of clients’ data in the context of certification, inspection and training services;
  • Suppliers Information Notice — governs the processing of the data of suppliers and their contact persons.

These information notices are made available on the Site or, upon request, by the Controller at the contact details indicated in point 1.

13. AMENDMENTS TO THIS INFORMATION NOTICE

The Controller reserves the right to amend or update, in whole or in part, this information notice, including as a result of changes in the applicable legislation or in the functionalities available on the Site. Users are therefore invited to consult this page periodically.

 

Santa Venera, 15/07/2026 – QS Quality Services Ltd