STR Canopy (“STR Canopy”, “we”, “us” or “our”) is committed to protecting and respecting your privacy, including any personal information that you may choose to provide to us (“Personal Information”).

For all our services, the data controller — that is, the company responsible for your personal data — is STR Canopy.
If you have any questions regarding this Privacy Policy or how we process your personal data, you may contact us at:
📧 marcin@strcanopy.com

This Privacy Policy, together with our Terms & Conditions and Cookie Policy, describes our practices relating to the personal data of visitors to the STR Canopy website.

By using this website, you agree to the terms of this Privacy Policy.

We assure you that we will only use and disclose personal data collected from you in accordance with this policy.

Every time you connect to the internet, your device is automatically assigned a unique identifying number known as an Internet Protocol (IP) address. This IP address may contain information regarding your general location, country of origin, and internet service provider (ISP). This information may be logged automatically when you visit our website.

When you access our website, your browser may also download cookies or similar technologies. These are small text files stored on your device and are explained in more detail in our Cookie Policy.

Most of the personal information we collect is provided directly by you when you choose to do so.

We may collect personal information when you:

• Fill in a contact or inquiry form
   
• Contact us by email
   
• Submit booking or rental-related inquiries
   

The information we may collect includes:

• Name and surname
   
• Email address
   
• Phone number
   
• Contact and inquiry details
   
• Information about the device used to access our website (e.g. computer or mobile device)
   
• Technical data such as IP address, browser type, and usage logs (via cookies)
   

If you contact us by email, the personal data we process will depend on the information you choose to provide.

We use your personal data only where necessary and for legitimate business purposes, including:

• Responding to inquiries and communication requests
   
• Providing short-term rental services
   
• Managing guest communication and bookings
   
• Identifying you when communicating via email or phone
   
• Improving our website and services
   
• Diagnosing technical issues and administering the website
   
• Carrying out internal analysis and service improvement
   
• Complying with legal and regulatory obligations
   

You are not required to provide personal information; however, failure to do so may limit your ability to use certain features of the website or receive requested services.

We may also anonymise and aggregate data so that it no longer identifies you. This information may be used for analytics, service improvement, and operational purposes and may be shared with third parties in anonymised form only.

We process personal data in accordance with the Data Protection Act (Chapter 440 of the Laws of Malta), the General Data Protection Regulation (EU) 2016/679 (GDPR), and all applicable Maltese data protection legislation.

We process personal data on the basis of one or more of the following legal grounds:

• Performance of a contract or steps prior to entering into a contract
   
• Legitimate business interests, provided these do not override your rights and freedoms
   
• Compliance with legal obligations
   
• Your consent, where applicable
   
• Protection of vital interests
   
• Public interest or official authority, where applicable
   

We have implemented appropriate technical and organisational measures to safeguard your personal data against accidental loss, unauthorised access, alteration, or disclosure.

Access to personal data is restricted to authorised persons who require it for legitimate business purposes and who are subject to confidentiality obligations.

Your personal data may be disclosed to trusted third parties where necessary for the purposes described in this policy, including:

• IT and website hosting providers
   
• Booking or rental service platforms
   
• Professional advisers (legal, accounting, regulatory), where required
   

All third-party processors are contractually required to protect your data in accordance with applicable data protection laws.

We may also disclose personal data where required by law or to comply with regulatory or governmental authorities.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Once data is no longer required, we take appropriate steps to ensure secure deletion or anonymisation.

You have the following rights under GDPR:

• Right to be informed about how your personal data is processed
   
• Right of access to your personal data
   
• Right to rectification of inaccurate or incomplete data
   
• Right to erasure (right to be forgotten), subject to legal exceptions
   
• Right to restriction of processing
   
• Right to data portability
   
• Right to object to processing based on legitimate interests or direct marketing
   
• Right to withdraw consent at any time, where processing is based on consent
   

To exercise any of these rights, please contact us in writing at marcin@strcanopy.com.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta:
🌐 https://idpc.org.mt/

We would, however, appreciate the opportunity to address your concerns first, so please contact us directly before submitting a complaint.

We may update this Privacy Policy from time to time. Any changes will be published on our website and will take effect upon publication.