GDPR & Your Data Rights

Last updated: 19 August 2026

ClassifiedMalta is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Malta's Data Protection Act (Cap. 586). This page summarises your rights and how to exercise them. For full details on what data we collect and why, see our Privacy Policy.

Your rights at a glance

| Right | What it means | How to request it | |---|---|---| | Access | Get a copy of the personal data we hold about you | Email privacy@classifiedmalta.com | | Rectification | Correct inaccurate data | Update in Account Settings, or email us | | Erasure | Delete your account and data ("right to be forgotten") | Account Settings → Delete Account, or email us | | Restriction | Limit how we process your data in specific circumstances | Email privacy@classifiedmalta.com | | Portability | Receive your data in a portable, machine-readable format | Email privacy@classifiedmalta.com | | Objection | Object to processing based on legitimate interest or direct marketing | Email privacy@classifiedmalta.com or unsubscribe link in emails | | Withdraw consent | Withdraw consent for anything based on consent (e.g. marketing) | Account Settings → Notifications, or email us |

We respond to all requests within 30 days, as required by GDPR Article 12.

How we minimise data collection

• We only collect what is necessary to run the Platform safely: identity verification is required only for Dating (Tier 2) and basic activity posting (Tier 1) — browsing requires no verification at all.
• Your exact location is never tracked; we use self-declared locality only.
• Your real name and contact details are never shown to other users — only your display name, age, locality, and verification badges are public.
• Anonymous posting is available in most categories, hiding your identity from other users while keeping you accountable to our moderation team.

Data Protection Officer

For any GDPR-related concern, you can contact our Data Protection Officer directly at dpo@classifiedmalta.com.

Supervisory authority

If you believe we have not handled your data properly, you have the right to lodge a complaint with Malta's supervisory authority:

Information and Data Protection Commissioner (IDPC) Level 2, Airways House, High Street, Sliema SLM 1549, Malta Website: idpc.org.mt

Data Processing Agreements

We work with the following categories of data processors, each bound by a Data Processing Agreement (DPA) in accordance with GDPR Article 28:

• Payment processing (Stripe)
• SMS verification (Twilio)
• Identity verification (Stripe Identity)
• Real-time messaging infrastructure (Pusher)
• Cloud hosting and infrastructure
• Transactional email delivery

Automated decision-making

ClassifiedMalta does not use fully automated decision-making that produces legal or similarly significant effects on users. Content moderation decisions (post approval/rejection, account suspension) are made or reviewed by human moderators, not solely by automated systems.

Data breach notification

In the unlikely event of a data breach affecting your personal data, we will notify the IDPC within 72 hours as required by GDPR Article 33, and will notify affected users directly where the breach poses a high risk to your rights and freedoms.

For full details on what data is collected, why, and how long it is retained, please see our complete Privacy Policy.

This document is a comprehensive GDPR rights summary tailored to ClassifiedMalta's features. We recommend having it reviewed by a Malta-qualified lawyer before relying on it for live operations.