Operator review required. Reviewed 27 October 2026. This is not a legally final notice. Controller identity, contact, actual hosting and retention settings must be completed before publication. Effective date remains unconfirmed.
Operator and controller
MaltaBudgetGuide.com is an independent website, not an official Government of Malta service.
MaltaBudgetGuide.com · [CONTACT EMAIL — REQUIRED] · [POSTAL CONTACT / REGISTERED ADDRESS IF APPLICABLE]. DPO details must be added only if legally applicable.
Scope and information processed
This notice covers visitors to our guides, calculators and linked services. We do not intentionally target children or request special-category personal information. No contact form, account registration or newsletter is currently provided.
Hosting providers can process IP addresses, request paths, device information and security or diagnostic logs. The intended external host is Vercel; Lovable provides the editor preview. Production provider settings, roles and retention need operator confirmation. Google Fonts receives connection metadata when the font stylesheet and fonts are requested.
Calculator privacy
Calculations run in your browser. Financial inputs remain in calculator state and are not deliberately sent to a site calculation service or Google Analytics. Share tools use only the canonical public page address and title, excluding query parameters and fragments.
Downloads and exports remain subject to your device and browser settings. Extensions, error messages or manually entered URL parameters can expose information outside our control. Do not put financial or identifying details in URLs or error reports.
Optional analytics and consent
Google Analytics loads only after explicit permission. We send canonical public page addresses and titles, not calculator inputs, query strings, fragments or arbitrary referrers. Google also processes identifiers, device and network information as part of measurement. Advertising consent remains denied.
Your consent record is kept in first-party local storage. You can withdraw permission in Cookie settings with the same ease as granting it. Withdrawal stops future tracking and attempts to clear first-party Google Analytics cookies; it does not erase historical Google records. We honour Global Privacy Control as an additional analytics opt-out.
Purposes and legal bases
Optional analytics is based on consent. Essential consent-preference storage is used to honour your choice. Technical operation, security and diagnostic processing require an operator assessment of legitimate interests or another applicable basis before publication.
No contact-message processing is claimed because no form or verified email channel currently exists. Any new purpose or vendor requires a separate assessment and updated notice before activation.
Recipients and international transfers
Recipients may include the actual hosting provider, Google for Analytics after permission and Google Fonts for font delivery. Social sharing opens your chosen service only when requested; its own policies then apply. No social SDK is loaded by the sharing tools.
Editor-preview error hooks may receive exception messages, stacks and route context through Lovable. Production monitoring recipients and payload safeguards must be verified. Not every recipient should automatically be described as a processor.
Google and hosting services may involve international processing, including the United States. [CONFIRM RECIPIENT ROLES, TRANSFER DESTINATIONS, CONTRACTS AND APPLICABLE TRANSFER SAFEGUARDS BEFORE PUBLICATION]. EU-only hosting is not promised.
Retention
The local consent choice has no automatic expiry and is removed when you clear site storage. Policy-version changes can require a new choice; it is not a server-side consent audit trail.
Observed GA cookies have browser expiries approximately 400 days after the consented test. Cookie expiry is not the same as GA property data retention. [CONFIRM GA PROPERTY RETENTION, HOSTING LOG RETENTION, MONITORING RETENTION AND DELETION PROCEDURES]. No unverified fixed retention period is asserted.
Your rights
Depending on the processing and applicable law, you may request access, correction, erasure, restriction, portability or object to processing. You may withdraw consent without affecting earlier lawful processing. Contact the actual controller using the contact details that must be completed before publication.
You may complain to Malta’s Information and Data Protection Commissioner: https://idpc.org.mt/. These drafts do not restrict statutory rights.
Security and automated calculations
We use technical safeguards and aim to minimise data collection; absolute security cannot be guaranteed. Diagnostic logging may include exception information and needs production review.
Calculators are informational algorithms, not binding decisions on legal entitlement or tax liability. No professional relationship is created. Whether any specific processing falls under GDPR automated-decision provisions requires an assessment of actual use.
Updates and contact
This draft was reviewed on 27 October 2026. Effective publication date: [TO BE CONFIRMED WHEN DEPLOYED]. Significant changes to purposes or vendors will require updated information and, where necessary, fresh permission. See Contact for unresolved operator details.