Privacy Policy

Last Updated: 05/10/2026

This Privacy Policy explains how AM WebLab collects and uses personal data when you visit amweblab.com (the "Site"), contact us or work with us. It is written to meet the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act (Cap. 586).

1. Who is responsible for your data

The data controller is Andrea Mazzarella, trading as AM WebLab
VAT: MT27099508
Sliema, Malta
Email: info@amweblab.com

We have not appointed a Data Protection Officer. For any privacy question, write to the email address above.

2. What data we collect and why

Contact form and emails

When you use our contact form or email us, we receive your name, email address, the subject and your message, plus anything else you choose to tell us. We use this to reply, prepare a quote and follow up on your request.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering the people who contact us (Art. 6(1)(f) GDPR). The name, email and subject fields are required, because without them we cannot reply.

Clients

If we work together, we process the contact, billing and project data needed to deliver the service and to issue invoices.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with accounting and tax obligations (Art. 6(1)(c) GDPR).

Analytics and advertising

Only if you accept analytics and marketing cookies in the cookie banner, we use Google Analytics 4 to count visits and see which pages are read most, and Google Ads to measure the results of our ads. These tools collect data such as pages visited, device and browser type, approximate location and an online identifier.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the cookie settings button at the bottom left of every page. The full list of cookies is in our Cookie Policy.

Spam protection

Our contact form uses Google reCAPTCHA v3 to block spam. It is loaded only when you start filling in the form, and it sends Google technical data such as your IP address and how you interact with the page.

Legal basis: our legitimate interest in protecting the Site and our inbox from abuse (Art. 6(1)(f) GDPR).

Security and technical data

Like every website, our server records technical data such as IP address, browser and the pages requested, and our security tools record failed login attempts. We use this only to keep the Site running and secure.

Legal basis: our legitimate interest in the security of the Site (Art. 6(1)(f) GDPR).

3. Who receives your data

We do not sell, trade or rent your personal data. We share it only with the providers we need to run the Site and our business:

• Hostinger: website hosting and email.
• Google Ireland Ltd: Google Analytics, Google Ads (only with your consent) and reCAPTCHA.
• Our accountant and public authorities, when the law requires it.

If you contact us through the WhatsApp button, your message is handled by WhatsApp (Meta) under its own privacy policy.

4. Transfers outside the EU

Google may process data on servers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and Google also relies on the European Commission's Standard Contractual Clauses.

5. How long we keep your data

• Contact requests: for as long as we need to handle your request and follow up on it. A copy of the emails sent by the Site is also kept in its email log, which holds only the most recent 250 emails.
• Client and invoice data: for as long as Maltese accounting and tax law requires.
• Cookies: for the durations listed in our Cookie Policy.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have it corrected or deleted;
• restrict or object to its processing, including processing based on our legitimate interest;
• receive it in a portable format;
• withdraw your consent at any time, without affecting what was done before.

To exercise these rights, email info@amweblab.com. We will reply within one month.

You also have the right to lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC), or with the authority of the EU country where you live.

We do not use automated decision-making or profiling that has legal or similarly significant effects on you.

7. Security

The Site is served over HTTPS and we take reasonable technical and organisational measures to protect your data. No method of transmission over the Internet or of electronic storage is 100% secure, so we cannot guarantee absolute security.

8. Children's privacy

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we learn that we have collected personal data of a child under 16, we will delete it as soon as possible.

9. Links to other websites

Our Site may contain links to websites we do not operate. If you click on a third-party link, you will be directed to that site. We advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of third-party sites or services.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date at the top.