Privacy Policy

Thank you for visiting our website. We take the protection of your personal data very seriously — we are committed to providing you with a comprehensive online service while guaranteeing your right to informational self-determination. This policy applies solely to the WorldWide website and does not cover any third-party websites accessed via external links.

Owner & Data Controller

• Worldwide Company Limited
• karen@worldwide.com.mt

Type of Data Collected

Personal Data may be freely provided by the user or, in the case of Usage Data, collected automatically when using this website. Unless stated otherwise, all data requested is mandatory — failure to provide it may prevent the website from delivering its services.

• Users uncertain about which data is mandatory are welcome to contact the Owner.
• Cookies and other tracking tools are used solely to provide the requested Service and any purposes described in this policy.
• Users are responsible for any third-party Personal Data they share through this website and confirm they have obtained the third party's consent.

Mode & Place of Processing

Methods of Processing

The Owner applies appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data. Processing is carried out using computers and IT-enabled tools, following strict organisational procedures. Data may be accessible to:

• Internal staff involved in the operation of the website (administration, sales, marketing, legal, system administration)
• External parties such as technical service providers, hosting providers, IT companies and communications agencies, appointed as Data Processors where necessary

The updated list of Data Processors may be requested from the Owner at any time.

Legal Basis of Processing

The Owner may process Personal Data when at least one of the following applies:

• The user has given explicit consent for one or more specific purposes
• Processing is necessary for the performance of a contract with the user or pre-contractual obligations
• Processing is required for compliance with a legal obligation
• Processing relates to a task in the public interest or exercise of official authority
• Processing is necessary for the legitimate interests of the Owner or a third party

Place of Processing

• Data is processed at the Owner's operating offices and wherever involved parties are located.
• Data transfers may involve transferring data to a country other than the user's own.
• Where applicable, users may inquire about the legal basis for transfers outside the EU and the security measures in place.

Retention Period

• Data collected for contract performance is retained until the contract is fully performed.
• Data collected for legitimate interests is retained as long as needed to fulfil those purposes.
• The Owner may retain data longer where required by law or upon authority order.
• Once the retention period expires, data is permanently deleted — rights of access, erasure, rectification and portability cannot be exercised after this point.

Your Rights

Users may exercise the following rights regarding their Personal Data at any time:

• Withdraw consent — where consent was previously given, it may be withdrawn at any time
• Object to processing — where processing is based on a legal basis other than consent
• Access your data — obtain confirmation of whether data is being processed and receive a copy
• Rectification — request correction of inaccurate or incomplete data
• Restrict processing — under certain circumstances, limit how your data is used
• Erasure — request deletion of your Personal Data under certain conditions
• Data portability — receive your data in a structured, machine-readable format and have it transferred to another controller
• Lodge a complaint — file a claim with your competent data protection authority

You may object to direct marketing processing at any time without providing any justification. All rights requests are free of charge and will be addressed within one month.

Broader Protection Standards (GDPR)

Broader protection standards apply when the processing:

• Is performed by an Owner based within the EU
• Concerns Personal Data of users in the EU related to the offering of goods or services
• Allows the Owner to monitor the behaviour of users within the EU

Additional Information

Legal Action

• Personal Data may be used for legal purposes by the Owner in court or pre-litigation proceedings arising from improper use of the website.
• The Owner may be required to disclose Personal Data upon request of public authorities.

System Logs & Maintenance

• For operation and maintenance purposes, this website and third-party services may collect system log files and usage data including IP addresses.

Changes to This Policy

• The Owner reserves the right to update this policy at any time by publishing the revised version on this page.
• It is recommended to check this page regularly for updates.
• Where changes affect consent-based processing, the Owner will collect new consent where required.

Definitions

Personal Data

Any information that directly or indirectly allows for the identification of a natural person.

Usage Data

Information collected automatically, including IP addresses, browser type, pages visited, time spent on pages and other device/environment parameters.

User

The individual using this website, who unless otherwise specified coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor

The person or body that processes Personal Data on behalf of the Controller.

Data Controller

The person or body that determines the purposes and means of processing Personal Data — unless otherwise specified, the Owner of this website.

Service

The service provided by this website as described in the applicable terms.

European Union

Includes all current member states of the European Union and the European Economic Area.

This privacy policy has been prepared in accordance with Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation) and relates solely to this website.