Privacy Policy

Last updated: 13 August 2026

1. Scope and applicable law

This privacy notice explains how Neo Engenior Ltd. processes personal data when you use this website (including the contact form). Processing is governed by the EU General Data Protection Regulation (GDPR), the Maltese Data Protection Act (Chapter 586 of the Laws of Malta), and — for cookies and similar technologies and electronic communications — the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01).

2. Controller

The controller of personal data processed via this website is:

Neo Engenior Ltd.
INTERNATIONAL HOUSE • Triq l-Imdina • BIRKIRKARA • BKR 3000 • Malta
Registration Nr. C 114000
Phone: +356 999 393 24
Email:

We have not appointed a Data Protection Officer (appointment is not required for our organisation under Art. 37 GDPR). For all data-protection matters, contact us using the details above.

3. Categories of personal data

Depending on how you interact with us, we may process:

  • Identity and contact data — e.g. name, email address, phone number, company name and role (if you provide them);
  • Enquiry content — the message and project details you submit;
  • Technical usage data — e.g. IP address, browser and device information, referrer URL, pages requested and timestamps (server logs); and
  • Consent preference data — e.g. your cookie banner choice stored in your browser.

We do not intentionally collect special categories of personal data (Art. 9 GDPR), such as health, biometric or political data. Please do not include such information in enquiries.

Data are collected from you directly (forms/email) or automatically when you visit the website. We do not purchase marketing lists for this website.

4. Purposes and legal bases

Contact enquiries
Purpose: to receive, assess and respond to your enquiry and, where relevant, to take steps at your request prior to entering into a contract.
Legal basis: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR. Our legitimate interest is to handle business enquiries addressed to us as an engineering company.
Providing data is voluntary; without name and contact details we may be unable to reply.

Website operation and security
Purpose: to deliver the website, maintain availability, diagnose faults and prevent abuse (server logs / hosting).
Legal basis: Art. 6(1)(f) GDPR. Legitimate interests: secure and reliable operation of our online presence.

Cookies and similar technologies
Under S.L. 586.01 (Malta) and Art. 5(3) ePrivacy Directive, storing or accessing information on your device requires prior consent, except where strictly necessary to provide a service you requested or to transmit a communication.
Strictly necessary storage (e.g. remembering a consent choice or essential site function) may be used without consent. Non-essential cookies are used only after a clear affirmative action (Accept). Silence, scrolling or continued browsing is not treated as consent. You may withdraw consent as easily as you gave it (e.g. clear site data / change browser settings, or contact us). Legal basis for any related personal-data processing of non-essential cookies: Art. 6(1)(a) GDPR.

Legal obligations
We may process data where necessary to comply with a legal obligation (Art. 6(1)(c) GDPR), for example responding to lawful requests by competent authorities.

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects concerning you (Art. 22 GDPR).

We do not send unsolicited electronic marketing communications via this website without a lawful basis under S.L. 586.01 / applicable ePrivacy rules. If we ever do so on the basis of legitimate interests or soft opt-in where allowed, you may object at any time (Art. 21(2) GDPR).

5. Recipients

Personal data may be disclosed to:

  • authorised personnel of Neo Engenior Ltd. on a need-to-know basis;
  • processors providing hosting, IT, security or email services under our instructions and appropriate contracts (Art. 28 GDPR); and
  • public authorities where required by law.

6. Transfers outside the EEA

We aim to process personal data within the European Economic Area. If personal data are transferred to a third country without an adequacy decision of the European Commission, we implement appropriate safeguards, in particular Standard Contractual Clauses under Art. 46 GDPR. You may request information about such safeguards by contacting us (section 2).

7. Retention

We keep personal data only as long as necessary for the purposes stated above:

  • contact enquiries — for the duration of handling the enquiry and a limited follow-up period, and longer if needed for legal claims or statutory retention;
  • server logs — for the short period required for security and operations, then deleted or anonymised;
  • cookie consent preference — until you clear it or it expires in your browser.

8. Your rights

Under the GDPR and Chapter 586 you may request:

  • access to your personal data (Art. 15);
  • rectification (Art. 16);
  • erasure (Art. 17);
  • restriction of processing (Art. 18);
  • data portability (Art. 20);
  • objection to processing based on legitimate interests (Art. 21(1));
  • objection to direct marketing, including related profiling (Art. 21(2)); and
  • withdrawal of consent at any time (Art. 7(3)), without affecting prior lawful processing.

To exercise these rights, contact us using the details in section 2. We may need to verify your identity. You also have the right to lodge a complaint with a supervisory authority. For Malta, this is the Information and Data Protection Commissioner (IDPC):

Information and Data Protection Commissioner
Floor 2, Airways House, Triq Il-Kbira
Tas-Sliema SLM 1549
Malta
Website: https://idpc.org.mt
You may also complain to the authority of your habitual residence or place of work in the EU/EEA.

9. Security

Taking into account the state of the art, costs of implementation and the nature, scope, context and purposes of processing, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk (Art. 32 GDPR), including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

10. Changes

We may update this notice to reflect changes in our processing or in EU/Maltese law. The “Last updated” date at the top will be revised when we do.