This Privacy Policy explains what personal data BLOKKA collects, why we use it, when we share it, and the rights available to you. It applies to our condominium management services, portal and website.
Who We Are
BLOKKA Condominium ("BLOKKA", "we", "us") provides condominium management services for blocks across Malta and Gozo. This policy explains how we collect, use and protect personal data belonging to committee members, residents, unit owners and visitors to our website, in line with the EU General Data Protection Regulation (GDPR) and Maltese data protection law.
What We Collect
The personal data we collect depends on your relationship with us:
Committee members, owners & residents
- Your name, email address, telephone number and unit reference
- Information about your block, including its name, address, units, floors, lifts, common areas and facilities
- Service-charge records, payment history and other financial information relevant to your block
- Messages, enquiries, maintenance requests and reports you submit through the portal
- AGM attendance, voting records, documents and photographs submitted in connection with your block
- Login and profile information needed to provide and secure your portal access
Website visitors
- Contact details submitted through our quote or enquiry forms
- Basic technical data (browser type, pages visited) via standard website analytics
- IP address, device information and similar technical data where collected by our hosting or security services
How We Use It
We use personal data to:
- Administer your block's finances, maintenance and compliance obligations
- Communicate updates, notices and AGM information to residents and committees
- Respond to quote requests and general enquiries
- Maintain accurate records required under the Condominium Act
- Improve our services and the BLOKKA portal
- Send service-related communications, including notices, reminders and updates about your block
We do not sell personal data or use it for unrelated purposes or third-party advertising. Essential block and enquiry messages are service communications, not marketing. We send promotional messages only where lawful, with consent where required, and you may opt out.
Legal Basis
We process personal data under one or more of the following legal bases: performance of a contract (managing your block), legal obligation (statutory record-keeping under the Condominium Act), legitimate interest (responding to enquiries, improving our service), and consent, where specifically requested.
International Transfers
Some of our service providers may process personal data outside the EU or EEA. Where this happens, we take steps required by applicable data-protection law to ensure that appropriate safeguards are in place, such as an adequacy decision or approved contractual safeguards.
Data Retention
We retain personal data for as long as necessary to manage your block, meet our statutory obligations, and resolve any disputes. Financial and compliance records are typically retained for the periods required under Maltese law, after which they are securely deleted or anonymised.
Keeping Data Secure
We use appropriate technical and organisational measures to protect personal data, including access controls and role-based permissions where applicable. No online service can be guaranteed to be completely secure, and we review our security practices on an ongoing basis.
Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data, subject to our legal retention obligations
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta
To exercise any of these rights, contact us using the details below.
Children
Our website and portal are intended for adults who manage, own, occupy or support a condominium. They are not directed at children, and children should not create accounts or submit enquiries. Information about a child may nevertheless appear incidentally in block records, for example when an authorised adult records residents or visitors. If you believe a child's data has been provided unlawfully, please contact us so we can review it.
Changes To This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will always reflect the most recent revision.
Contact Us
If you have any questions about this policy or how your data is handled, get in touch directly.