Last updated: 23 September 2026.
Who is responsible
The controller for personal data processed through this website is TFL Concepts p.l.c., a company registered in Malta with company number C 114777, registered office at 170 Pater House, Level 1, Suite A355, Triq Salvu Psaila, Birkirkara BKR 9077, Malta. Requests about personal data can be sent in writing to this address.
What this website collects
Server logs
When you open a page, the web server records technical details needed to deliver it: your IP address, the date and time, the page requested, the referring page and your browser type. These logs are used to keep the website secure and working, on the basis of our legitimate interest in running a reliable and secure website (Article 6(1)(f) GDPR). Logs are kept for a short period and then deleted.
Analytics, only with your consent
With your permission we use Google Analytics 4, a service of Google Ireland Limited, to understand in aggregate which pages are useful. Google Analytics is not loaded, and no analytics cookies are set, unless you choose “Accept all” or switch analytics on in the cookie banner. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time through “Cookie settings” in the footer. IP addresses are truncated before they are stored. Google may transfer data to servers outside the European Economic Area; such transfers rely on the EU–US Data Privacy Framework and Google’s standard contractual clauses. See the cookie policy for the cookies involved.
When you contact us
This website has no contact form. If you write to us by post, we process what you send us to answer your request, on the basis of our legitimate interest in responding to enquiries or, where relevant, to take steps before entering into a contract (Article 6(1)(b) and (f) GDPR). Correspondence is kept for as long as needed to deal with the matter and to meet legal record-keeping duties.
Links to other websites
This website links to the eXo Hotels website and to Google Maps. Those websites have their own privacy policies and are not covered by this one.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting the lawfulness of processing before the withdrawal. To exercise a right, write to the registered office above.
You also have the right to lodge a complaint with a supervisory authority. In Malta this is the Office of the Information and Data Protection Commissioner (IDPC), idpc.org.mt (opens in a new tab).
Changes to this policy
We may update this policy when the website or the law changes. The date at the top shows the current version.