Legal
Privacy notice
Who we are
Mellizos Services is a sole trader business run by Riccardo Murgia in Malta. For this website and for our own enquiries we are the data controller. Contact: [email protected].
When we run a process for a client, the client is the controller of the data in that process and we act as their processor. That relationship is covered by our Data Processing Agreement, not by this notice.
What we collect on this website
- Enquiry form: your name, work email, company and role (optional), and the description of the process you send us.
- Emails you send us: whatever you choose to include.
- Technical data: your IP address and browser details are processed by our hosting and anti-spam providers to deliver the site and block automated abuse. We do not use analytics or advertising cookies, and we do not build profiles.
Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your enquiry and preparing a demo or proposal | Steps at your request before a contract (Art. 6(1)(b)) |
| Keeping the site secure and free of spam | Legitimate interests (Art. 6(1)(f)) |
| Keeping business and tax records once you become a client | Legal obligation (Art. 6(1)(c)) |
Who processes it for us
| Provider | Role | Location |
|---|---|---|
| Cloudflare | Website hosting, DNS, and Turnstile anti-spam check | Global network; [EU data localisation to confirm] |
| Google (Fonts) | Serves the typefaces this site uses; receives your IP address when fonts load | [Global — or self-host fonts to remove] |
| Resend | Sends enquiry and confirmation emails | [Region to confirm] |
| Google Workspace | Our business email inbox | [Data region to confirm] |
Where a provider transfers data outside the EU/EEA, the transfer relies on the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework. [Confirm per provider.]
How long we keep it
Enquiries that don’t lead to work are deleted after [24 months]. Client records are kept for as long as Maltese tax law requires [currently 10 years].
Your rights
You can ask for access to, correction or deletion of your data, ask us to restrict or stop processing it, or ask for a copy in a portable format. Email [email protected]; we reply within one month. You can also complain to Malta’s supervisory authority, the Information and Data Protection Commissioner (idpc.org.mt).
Changes
If this notice changes, we update the date above. Material changes affecting existing clients are announced by email.