1. Data Controller
The data controller responsible for the personal information collected through this website is Laszlo Nagy, Self-Employed, trading as Amber & Truffle.
Address: 20, Triq it-Trill, Mellieħa, Malta.
Email: info@amberandtruffle.com
VAT: MT25133836
2. Personal Data We May Process
- Name
- Email address
- Telephone number, when voluntarily supplied
- Delivery and billing address, once ordering is activated
- Order and transaction details, once ordering is activated
- Product-notification preferences
- Newsletter and launch-list subscription information
- Correspondence you send us
- Technical information such as browser, device and IP-related security information
- Cookie and consent preferences
3. Purposes and Legal Bases
- Processing launch-list and product-notification requests — on the basis of your consent.
- Responding to enquiries — on the basis of our legitimate interest in dealing with correspondence, or pre-contractual steps taken at your request.
- Processing future orders and deliveries — on the basis of the contract between you and us.
- Processing payments through approved payment providers — on the basis of the contract.
- Maintaining invoices and business records — on the basis of legal obligations that apply to us.
- Fraud prevention and website security — on the basis of our legitimate interest in protecting the site and its users.
- Analytics and marketing tracking — only after you have given valid consent through our cookie banner.
4. How We Handle Your Data
- Amber & Truffle does not sell personal information.
- When online payments become available, payment-card details will be processed by Stripe.
- Amber & Truffle does not directly store full payment-card information.
- Delivery information may be shared with FastDrop or another clearly identified delivery provider when necessary to fulfil an order.
- Data may be processed by website hosting, email, database, payment and delivery service providers only where necessary to operate the service.
- Where information is processed outside the European Economic Area, we use appropriate safeguards recognised under GDPR.
5. Data Retention
- Launch-list and marketing data are kept until you withdraw consent, unsubscribe, or the information is no longer reasonably required.
- Enquiries are kept only as long as necessary to respond and to maintain appropriate business records.
- Order, invoice and accounting data are kept for the period required by applicable Maltese law.
6. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data
- Request restriction of processing
- Object to processing
- Data portability, where applicable
- Withdraw consent you previously gave
- Lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta — idpc.org.mt
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
7. Contact
To exercise your data-protection rights, contact info@amberandtruffle.com.
For more information on how we use cookies and similar technology, please see our Cookie Policy.