Privacy at
Tal-Kondominju.

01Data controller and business identity

Service brand: Tal-Kondominju, a condominium management service promoted at kondominju.com in Malta.

Legal operator: the legal entity or sole-trader name, business registration details (where applicable), registered address and verified privacy email have not yet been provided. Those details must be included before collecting real enquiries.

Launch status: The public proposal form remains disabled pending the operator details and secure configuration. This notice is a substantive draft, not a complete final GDPR notice.

02What data we use

Proposal requests: your name, email, optional telephone, role, building locality, optional building name, number of apartments and garages, services requested, current administration status, optional notes and submission date.

Owner and staff portals: account identifiers, authenticated roles, condominium/apartment assignments, reported maintenance issues, published common expenses, notices and private unit balances.

Security data: technical logs and Turnstile verification, potentially including IP-related information. Please do not send passwords, codes or sensitive personal information through a proposal form.

03Purposes and legal bases

We use enquiries to prepare proposals and respond to the person making the request. The applicable basis may be pre-contractual steps requested by the person (GDPR Article 6(1)(b)) or our legitimate interest in responding to a genuine enquiry made on behalf of a building (Article 6(1)(f)).

Once appointed, appropriate information is used to administer a building, maintain accounts, coordinate approved services and update assigned owners, where necessary for contracts, legitimate interests or legal obligations. Anti-abuse processing protects the service. A proposal request does not sign anyone up for unrelated marketing.

04Suppliers and international processing

The public website is hosted by Cloudflare, including its Turnstile security verification. Supabase provides a separate Tal-Kondominju authentication and application database. Resend may notify authorised staff of new proposals when configured. Google Fonts supplies website typography.

Approved building suppliers may receive only the information needed for authorised work. Technical providers may process information outside the European Economic Area. Their data-processing agreements, transfer mechanisms and geographic scope need final review before real enquiry collection; we do not claim this review is complete.

05How long we retain records

Data will be retained only as needed for its purpose and the relevant legal, contractual and accounting duties.

Prospective enquiries: a proposed 12-month period after the last substantive communication for requests that do not lead to a contract, unless an applicable legal need justifies longer retention. The actual deletion workflow must be approved and implemented before live collection.

Active building accounts: an approved accounting and management record schedule will apply. Provider-side security and authentication logs follow their applicable retention controls.

06What owners can see

Assigned owners may see building-wide notices, appropriately published shared expenses and common-area issue status updates. A reporter's private details, another owner's balance and personal apartment requests are restricted to the relevant account and authorised staff. Separate condominium memberships and database policies restrict access between blocks.

07Your rights and privacy contact

Depending on the situation you may request access, correction, erasure, restriction, portability or object to processing. Where consent is used, it may be withdrawn. You may lodge a complaint with Malta's Information and Data Protection Commissioner.

A verified operator privacy email and/or postal address must be published here before the public request system goes live. We will not invent a contact method or publish an inbox that cannot receive messages.