1. Who We Are

GKF Legal is a Malta-based boutique law firm specialising in regulatory and commercial law for businesses operating at the intersection of law and technologyAt GKF Legal, we are committed to protecting your privacy and safeguarding your personal data when you visit our website or interact with us. This policy explains how we collect, use, store, and protect your information, and the rights you have under the General Data Protection Regulation (GDPR) and Maltese law.

By using our website, you accept this Privacy & Cookies Policy. If you have any questions, please contact us at: info@gkflegal.com

2. What Data We Collect

We may collect and process the following types of personal data::

• Your name and contact details (e.g., email) when you contact us, apply for a job, or make an enquiry.
• Any personal data you include in uploaded documents.
• Technical information, such as your IP address, browser type, device data, and browsing behaviour on our site.
• Your preferences if you consent to receive marketing or newsletters.

We only collect the minimum data necessary and process it lawfully, transparently, and for specific purposes.

3. How We Use Your Data

We process your personal data for:

• Managing and improving our website and services.
• Responding to your enquiries and applications.
• Fulfilling legal or contractual obligations.
• Sending you marketing communications (if you have given consent).
• Ensuring compliance with our Terms of Use and preventing misuse.

We will never use your data for automated decision-making or profiling without your consent.

4. Sharing and Security

We may share your data with trusted service providers (e.g., IT, hosting, or marketing platforms) under strict data protection agreements. We do not transfer your data outside the EU unless adequate safeguards are in place.

Your data is kept secure through appropriate technical and organisational measures and only accessed by authorised personnel bound by confidentiality.

5. How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes for which it was collected, or to comply with legal obligations, resolve disputes, or enforce agreements. After this, it is securely deleted.

6. Your Rights

You have the right to:

• Access and receive a copy of your personal data.
• Request correction or deletion of inaccurate or unnecessary data.
• Restrict or object to certain processing.
• Data portability.
• Withdraw your consent at any time (without affecting prior lawful processing).
• Lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC)

To exercise your rights, please email info@gkflegal.com

7. Cookies

Our website uses basic session cookies to ensure it functions properly and to improve your experience. These cookies:

• Do not collect personally identifiable information.
• Expire when you close your browser.

We do not use cookies for advertising or tracking. By using our site, you consent to our use of cookies. You can disable cookies in your browser settings, though this may affect website functionality.

8. Governing Law & Jurisdiction

This policy and any disputes arising from it are governed by Maltese law, and any legal proceedings fall under the exclusive jurisdiction of the courts of Malta.