Stivala Group Finance p.l.c. (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and what rights you have over it, in line with the General Data Protection Regulation (GDPR) and Malta’s Data Protection Act.
Last updated: 01/09/2026
Who we are
This website, https://stivala-group-2026.stagingcloud.co, is operated by Stivala Group Finance p.l.c., the finance arm of the Stivala Group, with its registered office at Level 2, 60, Sir Frederick Ponsonby Street, Gzira, Malta, GZR 1070.
For any question about this policy or how we handle your personal data, contact us at [insert dedicated data-protection contact email] or by post at the address above.
Personal data we collect
We collect personal data directly from you when you interact with this website, specifically:
- Enquiry form: when you contact us through the enquiry form, we collect your name, email address, the subject of your enquiry, and any message you send us.
- Newsletter sign-up: if you subscribe to receive Group updates, we collect your email address.
- Cookies and similar technologies: technical and usage data collected automatically when you browse the site. Details of the specific cookies we use, their purpose and duration are set out in our Cookies Policy.
We do not knowingly collect personal data from minors through this website, and this site is not directed at children.
How and why we use your data
We use the personal data described above to:
- respond to enquiries submitted through the enquiry form, including investor, corporate, supplier, property, hospitality, careers and media enquiries;
- send you Group news, investor notices and corporate announcements, where you have subscribed to receive these;
- maintain records of correspondence with investors and other stakeholders for corporate governance and regulatory purposes;
- operate, secure and improve this website; and
- comply with our legal and regulatory obligations, including those arising from Stivala Group Finance p.l.c.’s status as a bond issuer.
Our legal basis for this processing is: your consent (for example, when you subscribe to updates or accept non-essential cookies); our legitimate interest in responding to enquiries and maintaining stakeholder relationships; and, where applicable, compliance with a legal obligation.
Cookies
This website uses cookies and similar technologies. For details of what these are, which ones we use, and how you can control them, please see our Cookies Policy.
Embedded content from other websites
Pages on this site may include embedded content, such as a map on our Contact page. Embedded content from another website behaves in the same way as if you had visited that website directly, and the provider of that content may collect data about your interaction with it in accordance with its own privacy policy.
Who we share your data with
We do not sell your personal data. We may share it with:
- service providers who help us run this website (for example, our hosting and website-development providers), acting on our instructions;
- professional advisers, auditors and regulators, where required for corporate governance, financial reporting or legal compliance; and
- other parties where we are required to do so by law, or to protect our rights or the safety of others.
Where any service provider is located outside the European Economic Area, we take steps to ensure your data continues to receive an equivalent level of protection, such as through EU Standard Contractual Clauses.
How long we keep your data
We keep enquiry-form submissions for as long as needed to deal with your enquiry and for a reasonable period afterwards in case of follow-up, and in any event no longer than [insert retention period, e.g. 24 months] unless a longer period is required for legal, regulatory or accounting purposes. If you subscribe to Group updates, we keep your email address until you unsubscribe. Corporate and investor correspondence may be retained for longer where this forms part of our statutory or regulatory record-keeping obligations.
Keeping your data secure
We use appropriate technical and organisational measures to protect the personal data we hold from unauthorised access, loss, misuse or alteration.
Your rights
Under the GDPR, you have the right to: request access to the personal data we hold about you; request that inaccurate data be corrected; request erasure of your data; object to or request restriction of certain processing; and request a copy of your data in a portable format. Where processing is based on consent (such as our newsletter), you can withdraw that consent at any time, for example by using the unsubscribe link in any email we send you.
To exercise any of these rights, contact us using the details in the “Who we are” section above.
If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with Malta’s Information and Data Protection Commissioner:
Office of the Information and Data Protection Commissioner
Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema, SLM 1549, Malta
Telephone: +356 2328 7100
Email: [email protected]
Website: idpc.org.mt (complaints are submitted via the online form on their website)
Changes to this policy
We may update this policy from time to time, for example to reflect changes to this website or to data protection law. Any changes will be posted on this page with an updated “Last updated” date.