This Privacy Policy explains how GTO Solutions Ltd. ("we", "our", "us") collects, uses, and protects your personal data when you use our website https://www.KeysDirect.com.mt (the "Platform"). We operate in accordance with the General Data Protection Regulation (EU Regulation 2016/679) ("GDPR") and the Data Protection Act (Chapter 586 of the Laws of Malta).
By using the Platform, you consent to the processing of your personal data as described below.
We collect the following categories of personal data:
Account Information: Name, birthday, email address, phone number, and password.
Identity Information: Passport, Maltese ID card, or other government-issued documents (for verification purposes).
Property Information: Documents proving ownership or right to lease/sell a property (such as ARMS bills or property deeds).
Usage Data: Data collected automatically such as IP address, browser type, device information, and pages visited.
We use your data to:
Create and manage your account.
Verify your identity and validate property ownership (optional).
Facilitate communication between landlords, tenants, buyers, and sellers.
Improve and secure our platform.
Comply with legal obligations when required.
Your data is processed on one or more of the following legal bases:
Performance of a contract (Article 6(1)(b) GDPR).
Compliance with legal obligations (Article 6(1)(c) GDPR).
Legitimate interest in operating a secure and trustworthy platform (Article 6(1)(f) GDPR).
Consent, when required (Article 6(1)(a) GDPR).
All data, including copies of identity documents, are stored on secure servers with restricted access and encryption measures in place.
We take reasonable technical and organizational measures to safeguard personal data; however, no system is completely secure.
By using our Platform, you acknowledge and accept that despite our best efforts, we cannot guarantee absolute security of your data.
We are not liable for unauthorized access to data arising from circumstances beyond our reasonable control, such as malicious cyberattacks or system failures.
We retain personal data as long as necessary for the purposes described above, or as required by law. Users may request deletion of their data by contacting us.
We do not sell your data. We may share data with:
Verified service providers who help us operate the platform.
Legal authorities when required by law or court order.
Other registered users only to the extent necessary to facilitate communications.
Under GDPR, you have the right to:
Access your data.
Request correction or deletion.
Withdraw consent.
Object to or restrict certain processing.
Requests can be sent via our contact formular here.
We may update this Privacy Policy from time to time; the latest version will always be available on our website.