Welcome to the privacy notice of The Casa Collection Ltd, trading as Orienta.
The Casa Collection Ltd (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This privacy notice informs you how we look after your personal data when you visit our website, regardless of your location, and outlines your rights and how you are protected under applicable laws. We comply with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta).
This privacy notice provides information on how The Casa Collection Ltd, trading as Orienta, collects and processes your personal data through your use of this website, including any data you may provide through this website when you sign up for our newsletter, purchase a product or service, or take part in a competition.
This website is not intended for children, and we do not knowingly collect data relating to children.
Controller:
The Casa Collection Ltd is the controller responsible for your personal data. We operate under the trading name Orienta. We have appointed a Data Protection Officer (DPO) who oversees compliance with this policy.
If you have any questions about this privacy notice or our data protection practices, please contact us:
• Email: info@orienta.com.mt
• Address: Orienta, Triq L-Mdina, Central Buisness District, Zone 2, CBD 0201
• Telephone: +356 21445733
We collect personal data including identity, contact, technical, usage, and marketing data. We do not collect special categories of data or data about criminal convictions.
We collect data through direct interactions, automated technologies (cookies), and third-party sources such as analytics and payment processors.
We use your data for contract performance, legal obligations, and legitimate interests including marketing and service improvement. We never sell your data.
We may share your data with trusted third parties including service providers and regulators. All such parties are required to process data lawfully and securely.
We do not transfer your data outside the EEA. If such transfers occur, they are subject to appropriate safeguards in accordance with GDPR.
We implement technical and organizational measures to secure your data from unauthorized access, disclosure, alteration, or destruction.
We retain your data only as long as necessary for legal, tax, and business purposes. Inactive user data is periodically reviewed and removed.
You have rights under GDPR including access, rectification, erasure, restriction, objection, and data portability. You may also lodge complaints with Malta’s Information and Data Protection Commissioner (IDPC).
Key terms include ‘personal data’, ‘controller’, ‘processor’, and ‘consent’. These help clarify the scope and interpretation of this policy.