Privacy Notice
PRIVACY NOTICE
Last updated: 31 July 2026
Get Out and Kayak Malta respects your privacy. This notice explains what personal information we collect, why we need it, how we use it and the choices available to you.
WHO IS RESPONSIBLE FOR YOUR INFORMATION?
Get Out and Kayak Malta, operated by [Daniela Bonavia], is the data controller responsible for the personal information covered by this notice.
Business or VAT registration number: MT28494611
Email: info@getoutandkayakmalta.com
Telephone and WhatsApp: +356 7720 0202
Website: www.getoutandkayakmalta.com
INFORMATION WE MAY COLLECT
Depending on how you interact with us, we may collect:
• Your name, email address, telephone number and country of residence
• Booking details, chosen activities, dates, group size and payment status
• Information submitted through booking requests, contact forms and waiver forms
• Emergency contact details
• Swimming ability and other safety information relevant to participation
• Health, medical, accessibility or dietary information that you choose or are required to provide for your safety
• Information about children participating in an activity and their parent or legal guardian
• Messages sent by email, WhatsApp, social media or through our website
• Reviews, feedback and survey responses
• Photographs and video recorded during our activities
• Technical information such as your IP address, browser, device information and cookie preferences
Payment card details are normally handled directly by our payment providers. We do not normally receive or store your complete card details.
WHY WE USE YOUR INFORMATION
We use personal information to:
• Respond to enquiries and booking requests
• Review waivers and confirm whether someone can participate safely
• Arrange tours, training sessions, group activities and meeting locations
• Process payments, transfers, cancellations and refunds
• Contact participants about weather, sea conditions, safety or operational changes
• Provide appropriate equipment and support
• Respond to emergencies, accidents or incidents
• Meet our accounting, insurance, licensing and legal obligations
• Prevent fraud and protect our guests, team and business
• Improve our website, activities and customer service
• Send marketing messages when you have agreed to receive them
• Publish photographs or video where we have an appropriate lawful basis
If information is required to manage a booking, waiver or activity safely, we may be unable to accept or complete the booking if it is not provided.
Marketing consent is always optional.
OUR LEGAL REASONS FOR USING INFORMATION
Under data-protection law, we must have a lawful reason for processing personal information. Depending on the circumstances, we rely on:
Contract
We use information when it is necessary to take steps at your request before a booking or to provide an activity you have booked.
Legal obligation
We may retain or disclose information when required by accounting, tax, insurance, licensing, maritime safety or other applicable laws.
Legitimate interests
We may use information where reasonably necessary to operate and protect our business, communicate with guests, improve our services, manage safety, prevent misuse and establish or defend legal claims. We consider your privacy rights before relying on this basis.
Consent
We rely on consent for activities such as optional marketing, non-essential cookies and certain uses of identifiable photographs or video. You may withdraw your consent at any time.
Health and safety information
Information concerning health or medical conditions receives additional protection. Where we need this information for planned participation, we normally process it with your explicit consent. In a genuine emergency, we may use or share relevant information to protect someone’s vital interests.
CHILDREN
A parent or legal guardian must provide the required booking, waiver and safety information for a participant under 18.
We do not knowingly send direct marketing to children. We will not deliberately feature an identifiable child in promotional photographs or video without permission from their parent or legal guardian.
PHOTOGRAPHS AND VIDEO
Photographs and video may be taken during our activities for safety records, memories, our website, YouTube and social media.
You may ask not to be deliberately photographed or filmed by informing us before departure. We will take reasonable steps to respect your request.
Because our activities take place in public locations and often involve groups, we cannot guarantee that someone will never appear incidentally in a wide group image, background footage or material recorded by another participant or member of the public.
If you later withdraw permission for promotional use, contact us at info@getoutandkayakmalta.com. We will stop making new uses of the material and, where reasonably possible, remove it from platforms and accounts that we control.
Withdrawal does not affect uses that were lawful before permission was withdrawn. We may also be unable to remove copies already shared, downloaded or republished by other people or independent platforms.
MARKETING
We may send news, event announcements or promotional messages if you have asked to receive them.
You can unsubscribe or object to direct marketing at any time by using an unsubscribe option or contacting us. We will not charge you for doing so.
Operational messages concerning an existing enquiry or booking are not marketing and may still be sent when necessary.
WHO MAY RECEIVE YOUR INFORMATION?
We do not sell personal information.
When necessary, information may be shared with trusted service providers, including:
• Wix, which hosts and supports our website
• Payment providers and banks, such as Stripe, PayPal, Revolut or Bank of Valletta, depending on the payment method used
• Email, messaging and communications providers
• Google services used for administration, maps, analytics or advertising
• Meta services, including Facebook, Instagram and WhatsApp
• Booking, form, waiver or event-management providers
• Accountants, insurers, legal advisers and technical support providers
• Emergency services, regulators, Transport Malta, the Malta Tourism Authority or another public authority where required
These recipients receive only the information reasonably needed for their role and are responsible for protecting it according to applicable law and their own privacy terms.
INTERNATIONAL TRANSFERS
Some service providers may process information outside Malta or the European Economic Area.
Where this happens, we use providers that apply recognised safeguards, such as an adequacy decision, approved contractual protections or another lawful transfer mechanism.
HOW LONG WE KEEP INFORMATION
We keep information only for as long as reasonably needed for the purpose for which it was collected.
Our usual approach is:
• General enquiries: normally up to 12 months after the last communication
• Booking, payment and accounting records: for the period required by Maltese accounting and tax law
• Waivers, safety and incident records: for the period reasonably required by our insurers, applicable limitation periods and legal obligations
• Marketing details: until you unsubscribe, withdraw consent or the information is no longer useful, with periodic reviews
• Photographs and video: until no longer required for their intended purpose or until a valid withdrawal or deletion request is accepted
• Cookie information: according to the duration shown in our cookie settings or consent tool
Information may be retained for longer when required by law, an insurer, a regulatory investigation or an actual or anticipated legal claim.
COOKIES AND WEBSITE ANALYTICS
Our website uses essential cookies needed for functions such as security, forms, bookings and user preferences.
With your permission, we may also use analytics or advertising cookies to understand website use and improve our communications.
Non-essential cookies should only be used after you make a choice through our cookie banner. You can change your preferences through the website’s cookie settings or your browser.
Third-party services may also place cookies subject to their own privacy notices.
SECURITY
We use reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.
No website, email system or internet transmission can be guaranteed to be completely secure. Please avoid sending unnecessary medical, identity or payment information through ordinary email or social media.
YOUR DATA-PROTECTION RIGHTS
Depending on the circumstances, you may have the right to:
• Ask whether we hold personal information about you
• Request a copy of your information
• Correct inaccurate or incomplete information
• Request deletion of information when there is no lawful reason to retain it
• Restrict how information is used
• Object to processing based on legitimate interests
• Object to direct marketing at any time
• Receive certain information in a portable format
• Withdraw consent at any time
• Lodge a complaint with the Maltese Information and Data Protection Commissioner
These rights are not absolute. For example, we may need to retain certain booking, accounting, waiver or incident records to meet legal obligations or defend a legal claim.
To exercise a right, email info@getoutandkayakmalta.com. We may need to verify your identity before releasing or changing information.
We aim to respond without undue delay and normally within one month.
AUTOMATED DECISION-MAKING
We do not make decisions about participation or bookings solely through automated processing when those decisions would have a legal or similarly significant effect.
THIRD-PARTY WEBSITES
Our website and social media pages may link to external websites. We are not responsible for how independent websites collect or use personal information. Please review their privacy notices before providing information.
COMPLAINTS
Please contact us first if you have a privacy concern so that we can try to resolve it.
You also have the right to contact:
Office of the Information and Data Protection Commissioner
Floor 2, Airways House
Triq Il-Kbira
Tas-Sliema SLM 1549
Malta
Telephone: +356 2328 7100
Website: https://idpc.org.mt
CHANGES TO THIS NOTICE
We may update this notice when our services, providers or legal obligations change. The latest version will always appear on this page with its revision date.