1. Controller
This website, goldenharbor.rest, is operated by Golden Harbor Casino & Hotel ("Golden Harbor", "we", "us"), the controller of the personal data described here. Privacy contact: info@goldenharbor.rest.
Postal address: 58 Golden Quay Promenade, St. Julian's STJ 3310, Malta
2. Scope
This policy covers data processed through this website and through requests you send us by e-mail or phone. Data processed at the hotel itself — such as registration at check-in or the ID check at the entrance to the hotel casino — is covered by separate notices available at the reception.
3. Data we process
- Technical data recorded by our hosting server: IP address, date and time, requested page, browser type and referring page.
- Consent data: a small cookie that remembers your cookie choices. Analytics or advertising cookies are used only with your consent (section 6).
- Request data: your name, e-mail or phone number, dates, number of guests and anything else you choose to tell us, such as dietary or accessibility needs.
We do not take payments on this website and never ask for card details by e-mail.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Running the website securely and preventing abuse | Technical data | Legitimate interests (Art. 6(1)(f) GDPR) |
| Remembering your cookie choices | Consent cookie | Legal obligation and legitimate interests |
| Answering requests and preparing a reservation you ask for | Request data | Steps taken at your request before a contract (Art. 6(1)(b) GDPR) |
| Special requests (dietary or accessibility needs) | Information you choose to share | Your explicit consent, which you can withdraw at any time |
| Measuring visits and advertising, if enabled | Cookie identifiers, technical data | Your consent, which you can withdraw at any time |
We process personal data in line with the EU General Data Protection Regulation (GDPR) and Malta's Data Protection Act (Cap. 586).
5. Recipients
- Our hosting provider (website and server logs).
- Our e-mail provider (correspondence).
- Google, only if you consent to analytics or advertising cookies.
- Authorities, where disclosure is required by law.
We do not sell personal data and do not share it with gaming or betting companies.
6. Cookies
A necessary cookie stores your cookie choices. Analytics and advertising cookies load only after you accept them; you can change your choice at any time via "Cookie settings" at the bottom of each page. See our Cookie Policy.
7. Transfers outside the EEA
Some providers, such as Google, may process data outside the European Economic Area. Such transfers rely on recognised safeguards, such as an adequacy decision of the European Commission, the EU–US Data Privacy Framework or Standard Contractual Clauses.
8. Retention
- Server logs: up to 30 days, longer only to investigate a security incident.
- Cookie choice: up to 6 months.
- Requests without a booking: up to 12 months after our last reply.
- Requests that lead to a booking: as long as needed for the stay and legal or accounting obligations.
9. Security
The website uses HTTPS, server access is restricted and automated protection blocks repeated intrusion attempts. Only team members who need request data can see it.
10. Your rights
Under the GDPR you may ask for access to your data, rectification, erasure, restriction of processing and a portable copy, and you may object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time. Write to info@goldenharbor.rest; we reply within one month.
You may also lodge a complaint with a supervisory authority — in Malta, the Information and Data Protection Commissioner (IDPC) (idpc.org.mt), or the authority in the EU country where you live or work.
11. Children
This website is intended for adults planning a stay. We do not knowingly collect data from children under 16. The hotel casino admits adults aged 18 and over only.
12. Automated decisions
We make no decisions about you based solely on automated processing.
13. Updates
We update this policy when our website, services or the law change; the date above shows the current version.