PRIVACY
POLICY

Twiys Ltd is a recruitment and outsourcing company registered in Malta. We act as the data controller for the personal information you provide to us.

Contact: hrtwiys@gmail.com
2, Triq San Franġisk, San Ġwann, Malta

We collect personal information in two ways: directly from you when you submit an enquiry or application, and from employers requesting staffing services.

From candidates, we collect:

• Full name and home address
• Email address and mobile number
• Nationality
• CV and employment history (where provided)

From employers, we collect:

• Contact name and business email
• Company name and phone number
• Industry sector and staffing requirements
• Role descriptions and required skills

We use the information you provide to:

• Assess candidate suitability for available roles
• Match candidates with employer requirements
• Communicate with you regarding your enquiry or application
• Fulfil our contractual obligations to employers and candidates
• Comply with our legal obligations, including work permit administration

We do not use your data for automated decision-making or profiling.

We rely on the following legal bases under GDPR to process your personal data:

• Consent (Art. 6(1)(a)) — when you submit a form on our website, you are providing explicit consent for us to process your information for recruitment purposes.
• Contract (Art. 6(1)(b)) — processing necessary to take steps at your request prior to entering an employment or service contract.
• Legitimate Interests (Art. 6(1)(f)) — to manage and improve our services and maintain contact with candidates and clients.
• Legal Obligation (Art. 6(1)(c)) — where we are required to process data to comply with Maltese employment and immigration law.

We retain candidate data for up to 24 months from the date of submission, unless you request deletion earlier or we are legally required to retain it for longer.

Employer data is retained for the duration of our business relationship and for up to 6 years thereafter to comply with tax and contract record-keeping obligations.

We do not sell or rent your personal data to third parties. We may share your information with:

• Prospective employers, where you have applied for a role (candidates only)
• Government authorities and regulators in Malta, where required by law
• Web3Forms (web3forms.com) — our form submission processor, which receives and delivers enquiry and application data to us by email. Web3Forms acts as a data processor on our behalf and processes data in accordance with GDPR.

Any third parties with whom we share data are contractually required to protect it in line with GDPR.

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request that we delete your personal data
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting prior processing

Our website does not currently use tracking cookies or analytics tools. If this changes, this policy will be updated and visitors will be notified accordingly.

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS and hosted on Vercel's infrastructure, with strict HTTP security headers enforced on all pages.

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.

IDPC Website: idpc.org.mt

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.