GDPR Information

1. Data controller

For the current pre-launch ServX website, the controller is Darren Grech, operating the ServX project in Malta under the DevTrix/ServX trading identity, at AG Holdings / Jasmin 043 Triq ta Zwejt San Gwann SGN3025. Contact: info@servx.mt. This notice is a summary; the Privacy Policy contains the fuller description of processing.

2. Current processing scope

ServX is currently a marketing/pre-launch website rather than a live marketplace. Current processing primarily concerns contact enquiries, provider/waiting-list interest, newsletter subscriptions, the ServX Assistant, website security/technical logs, cookie preferences and optional analytics/marketing technologies. Live account, booking, payment and provider-payout processing is not currently part of the marketing website unless a specific page expressly states that a feature has gone live.

3. Lawful bases

• Consent — newsletters, optional analytics cookies, optional marketing cookies and other processing where we expressly request consent.
• Legitimate interests — operating and securing the Website, preventing abuse, responding to general enquiries, troubleshooting, improving support and establishing or defending legal claims, where those interests are not overridden by your rights.
• Pre-contract steps / contract — where you ask us to take steps relating to a possible future business relationship or, after launch, where processing is necessary to perform an agreement with you.
• Legal obligation — where processing is required to comply with applicable law.

4. Your rights

Depending on the circumstances and subject to statutory conditions/exceptions, GDPR rights may include:

• Access — confirmation of whether we process your personal data and a copy of eligible data.
• Rectification — correction of inaccurate personal data and completion of incomplete data where appropriate.
• Erasure — deletion in circumstances provided by law.
• Restriction — temporary limitation of processing in circumstances provided by law.
• Portability — receipt/transmission of eligible data in a structured, commonly used and machine-readable format where the statutory conditions apply.
• Objection — objection to processing based on legitimate interests and an absolute right to object to direct marketing.
• Withdrawal of consent — at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Complaint — the right to complain to a competent supervisory authority.

5. Exercising rights

Send a request to info@servx.mt with “Data Protection” in the subject line. We may ask for information reasonably necessary to confirm identity and locate the relevant data. We will respond within the timeframe required by law. If a request is manifestly unfounded or excessive, or an exemption applies, the GDPR permits us to respond as provided by law.

6. Automated assistant

The ServX Assistant automatically generates replies to messages. It is used as a support/information tool and is not intended to make decisions producing legal or similarly significant effects about you. Do not submit sensitive personal data, payment data or credentials to the Assistant. Assistant messages are normally retained for up to 90 days as described in the Privacy Policy.

7. International transfers

Some processors or service providers may operate outside the European Economic Area. Where GDPR transfer restrictions apply, ServX relies on an applicable lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another approved safeguard, and applies supplementary measures where required.

8. Supervisory authority

You may lodge a complaint with a competent supervisory authority. In Malta, the supervisory authority is the Information and Data Protection Commissioner (IDPC). You do not have to contact ServX before exercising your right to complain, although we welcome the opportunity to address concerns directly.

9. More information

For the categories of personal data, purposes, recipients, retention, security, cookies, children’s data and future-platform changes, refer to the ServX Privacy Policy and Cookie Policy.