Data Protection & Privacy Policy

1. We collect and process personal data for business purposes. We do so fairly and lawfully and in accordance with individuals’ rights – this generally means that we do not process personal data unless the individual whose details we are processing has consented to this happening.

2. This Data Protection & Privacy Policy applies to all data collection and processing done in pursuance of activities both online and offline, within the ‘Weave Consulting’ brand.

3. This Privacy Policy describes Weave Consulting's current policies and practices with regard to personal data collected by Weave Consulting through its websites (hereinafter referred to collectively as "Weave Consulting's websites"). This Privacy Policy is independent from Weave Consulting's offline personal data collection practices. The term "personal data" refers to information relating to an identified or identifiable natural person, that is to say, a person that can be identified either directly or indirectly through an identifier such as a name, an identification number, location data, an online identifier or through one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4. Requirements and Criteria for Processing

Weave Consulting ensures that personal data collected is processed according to law, and in particular that:

(a) personal data is processed fairly and lawfully;

(b) personal data is always processed in accordance with good practice;

(d) personal data is not processed for any purpose that is incompatible with that for which the information is collected;

(e) personal data that is processed is adequate and relevant in relation to the purposes of the processing;

(f) no more personal data is processed than is necessary, having regard to the purposes of the processing;

(g) personal data that is processed is correct and, if necessary, up to date;

(h) all reasonable measures are taken to complete, correct, block or erase data to the extent that such data is incomplete or incorrect, having regard to the purposes for which they are processed;

(i) personal data is not kept for a period longer than is necessary, having regard to the purposes for which they are processed.

Personal data may be processed only if:

(a) the data subject has unambiguously given his consent; or

(b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; or

(c) processing is necessary for compliance with a legal obligation to which Weave Consulting or any of its affiliated companies is subject; or

(d) processing is necessary in order to protect the vital interests of the data subject; or

(e) processing is necessary for the performance of an activity that is carried out in the public interest or in the exercise of official authority vested in Weave Consulting or in a third party to whom the data is disclosed; or

(f) processing is necessary for a purpose that concerns a legitimate interest of Weave Consulting or of such a third party to whom personal data is provided, except where such interest is overridden by the interest to protect the fundamental rights and freedoms of the data subject and in particular the right to privacy.

Personal data will be processed only if the data subject has expressly opted-in, that is, authorised to process such data. In any case, data subjects have a right to revoke such consent at any time.

5. Personal Data Collected Through Weave Consulting’s Websites or Landing Pages

The only personal data Weave Consulting currently collects through its websites is the information you voluntarily give us when you use our sites or social media pages after you would have opted-in and thus authorised us.

For example, you may use this site to contact Weave Consulting with questions and comments. When you fill out a form on our websites, you may provide your name and other contact information, including your company's name, your e-mail address, and your mailing address or the mailing address of your company or other personal information.

6. Use of Personal Data Collected Through Weave Consulting’s Websites

Weave Consulting uses the personal data information you provide to answer the query you will have posted through the sites. Weave Consulting uses this information to help us improve the content and functionality of our websites, to better understand our customers and markets, and to improve our products and services. Weave Consulting may use this information to contact you in the future to tell you about products or services we believe will be of interest to you. We will do so because you have opted in and thus authorised us to do so. If we do so, each communication we send you will however contain instructions explaining to you how to "opt-out" of receiving future communications should you so wish.

Similarly, we may provide "subscription" e-mail services, either directly or through affiliates, which enable you to receive current news about Weave Consulting and its business. We will do so because you have opted in and thus authorised us to do so. If we do so, each communication we send you will however contain instructions explaining to you how to "opt-out" of, or cancel, the subscription.

7. Anonymous Data Collected Through Weave Consulting’s Websites

In addition to the information you provide when you use our websites, Weave Consulting uses technology to collect anonymous information about the use of our websites. For example, we use technology to track how many visitors access our websites, the date and time of their visit, the length of their stay, and which pages they view. We also use technology to determine which web browsers our visitors use and the address from which they accessed our sites (for example, if they connected to a Weave Consulting website by clicking on one of our banner ads).

This technology does not identify you personally. It simply enables us to compile statistics about our visitors and their use of our sites. Weave Consulting uses this anonymous data and may share it with third parties to improve the content and functionality of our websites, to better understand our customers and markets, and to improve our products and services.

8. Disclosure of Your Personal Data

Weave Consulting may share some or all of the personal data collected through its websites with our affiliates in Malta and overseas, who use this data in accordance with this Privacy Policy. Both Weave Consulting and our affiliates may share personal data collected through its websites with third-party vendors in Malta and overseas who act for or on behalf of Weave Consulting or our affiliates (for example, companies that provide support services to us, including data processing services, or that help us market our products and services). These companies may need information about you in order to perform their functions. These companies are not authorised to use the information we share with them for any other purpose. In addition, there may be some other, limited circumstances in which Weave Consulting or our affiliates may share or transfer the personal data in our databases, for example, to comply with a legal requirement, for the administration of justice, to protect your vital interests, or in the event of a corporate sale, merger, reorganisation, dissolution, or similar event.

While no method of data transmission is guaranteed against unlawful third party interception or other misuse, Weave Consulting uses commercially reasonable efforts to ensure protection of your data including industry-standard encryption and offline security methods in our physical facilities.

9. Link to Other Sites

This Privacy Policy applies only to Weave Consulting's websites. When you visit a Weave Consulting website, please take a moment to review the Privacy Policy posted on that site to learn what personal data may be collected through that site and how it is processed.

Weave Consulting's websites may contain hyperlinks to websites that are not operated by Weave Consulting or one of our affiliates. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of these third-party websites or any association with their operators. Weave Consulting does not control these websites and is not responsible for their data practices. We urge you to review the privacy policy posted on any site you visit before using the site or providing any personal data about yourself.

10. Data Retention

We retain personal data for no longer than necessary. What is necessary depends on the circumstances of each case, taking into account the reasons that the personal data was obtained for, but is determined in accordance with our data retention guidelines.

11. Subject Access Request

You are hereby informed that the law grants data subjects the right to request access to information held about them, subject to certain lawful exceptions. Should you wish to file a subject access request, kindly get in touch with us.

Weave Consulting will provide information in response to any reasonable subject access request.

Weave Consulting will ensure data are kept in an accessible form to facilitate subject access.

Weave Consulting, at the request of the data subject, shall provide to the data subject, without excessive delay and without expense, written information as to whether personal data concerning the data subject is processed:

Provided that a request by the data subject as aforesaid shall only be made by the data subject at reasonable intervals.

Any such application shall be made in writing to Weave Consulting and is to be signed by the data subject.

If such data is processed, Weave Consulting shall provide to the data subject written information in an intelligible form about:

(a) actual information about the data subject which is processed;

(b) where this information has been collected;

(d) to which recipients or categories of recipients the information is disclosed; and

(e) knowledge of the logic involved in any automatic processing of data concerning the data subject.

12. Rectification, Deletion and the Right to Be Forgotten

Weave Consulting shall, at the request of the data subject, immediately update or erase such personal data pertaining to the data subject.

Weave Consulting shall take all reasonable efforts to notify any third party to whom the data has been disclosed about the measures undertaken as aforesaid.

13. Notification of Changes to This Policy

Weave Consulting is continually improving and adding new functionality and features to its websites and improving and adding to our existing products, services, and programmes. Because of these ongoing changes, changes in the law, and the changing nature of technology, Weave Consulting’s data practices will change from time to time. If and when our data practices change, Weave Consulting will post the changes on our websites to notify you of the changes. We encourage you to check this page frequently.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Malta and relevant EU legislation.

15. Questions About Our Privacy Policy

If you have any questions about this Privacy Policy or concerns about the way Weave Consulting processes your personal data, please do not hesitate to contact us.

16. Dispute Resolution

Any dispute, controversy or claim arising out of or relating to this Privacy Policy, or the breach thereof, shall be settled by arbitration, in accordance with the provisions of the Malta Arbitration Act and the Arbitration Rules of the Malta Arbitration Centre currently in force.

Document last updated on the 26 November, 2020