Our Commitment to Your Privacy
At Asteria Advisory, we are committed to protecting the privacy and confidentiality of our clients, prospective clients, website visitors and business contacts.
Trust lies at the heart of every professional relationship. Whether you engage us for legal or advisory services, make an enquiry through our website or otherwise communicate with us, we are committed to processing your personal data lawfully, fairly and transparently.
As a legal practitioner, Dr Geraldine Spiteri is also bound by professional duties of confidentiality and professional secrecy under Maltese law, which complement and reinforce our obligations under applicable data protection legislation.
What Information We Collect
Depending on the nature of our relationship with you, we may collect:
- identification details, including your name, address, nationality, date of birth and contact details;
- copies of identification documents, proof of residence and, where required by law, additional due diligence documentation;
- company information, including constitutional documents, registers, certificates of good standing, certificates of incumbency and information relating to beneficial ownership;
- financial and commercial information necessary to provide our professional services;
- correspondence exchanged with you;
- information relating to instructions you provide us;
- technical information collected through our website, including IP address, browser type and cookies where applicable.
We collect only the information that is necessary for the purposes for which it is processed.
Why We Process Your Personal Data
We process personal data for one or more of the following purposes:
- providing legal and advisory services;
- responding to enquiries;
- complying with legal and regulatory obligations;
- carrying out client due diligence and anti-money laundering checks;
- managing our professional relationship with clients;
- administering our business;
- protecting our legal rights where necessary.
Where processing is based on consent, you may withdraw that consent at any time without affecting processing already carried out.
Anti-Money Laundering and Regulatory Compliance
Certain legal and advisory services require us to carry out customer due diligence in accordance with applicable anti-money laundering and counter-terrorism financing legislation.
Where applicable, we may request documentation to verify:
- identity;
- residential address;
- source of funds or source of wealth;
- beneficial ownership;
- corporate structure;
- other information required under applicable legislation.
Failure to provide information required by law may prevent us from accepting or continuing an engagement.
Confidentiality and Professional Secrecy
Protecting confidential information is a fundamental part of our professional obligations.
Information provided to us during the course of a professional engagement is treated as confidential and is protected by professional secrecy obligations under Maltese law, together with the applicable Code of Ethics governing legal practitioners.
We do not disclose confidential or personal information except:
- where authorised by the client;
- where necessary for the provision of our services;
- where disclosure is required by law or by a competent authority;
- where necessary to establish, exercise or defend legal claims.
Sharing Personal Data
Where necessary, personal data may be shared with trusted third parties assisting in the provision of our services, including:
- regulatory authorities;
- courts and tribunals;
- accountants, auditors or other professional advisers acting on your behalf or with your authority;
- financial institutions where required for a transaction;
- technology service providers supporting our business operations;
- other parties where disclosure is authorised or required by law.
We take reasonable steps to ensure that such third parties process personal data appropriately and securely.
Data Security
Appropriate technical and organisational measures are implemented to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Access to client information is restricted to those who require it for legitimate business or legal purposes.
Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, professional and contractual obligations.
Where retention periods expire, personal data will be securely deleted or anonymised.
Your Rights
Subject to applicable law, you may have the right to:
- access your personal data;
- request rectification of inaccurate data;
- request erasure of your personal data where applicable;
- request restriction of processing;
- object to certain processing activities;
- request portability of your personal data;
- withdraw consent where processing is based on consent;
- lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC).
Cookies
Our website may use cookies and similar technologies to improve functionality, analyse website usage and enhance your browsing experience. Further information is available in our Cookie Policy.
Contact Us
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us.