Last updated: July 2026
Casa Moderna Limited ("we", "us", "our") is a furniture and interior design company registered in Malta. This policy covers the personal data we process through our website and online store, our customer registration and order forms at forms.casamodernadms.eu, and our showroom services.
When you complete the New Customer Registration form we collect:
When you place an order through our online store we collect:
Card payments are processed directly by our payment provider, myPOS, on their secure hosted page. Your card details are entered on myPOS's system. We never receive or store your full card number, expiry date or security code.
We use the information you provide to:
We do not sell or rent your personal data. We may share it with:
All processors are bound by GDPR-compliant data processing agreements.
Under the GDPR you have the right to:
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.
The registration form does not use cookies, tracking pixels, or analytics scripts. Your IP address is recorded solely for consent audit purposes and is not used for advertising or profiling.
Your data is transmitted over an encrypted HTTPS connection and stored on servers located within the EU. Access to your registration data is restricted to authorised Casa Moderna staff only.
This section applies when you apply for work with us through our careers page. It sits alongside the fuller notice given at the point of collection on that page.
What we collect: your name, email address and phone number, the area you are applying for, your confirmation that you already live in Malta and may legally work here and that you speak fluent Maltese and/or English, anything you write in the message box, and the CV and supporting documents you attach, plus the date, time and IP address of your submission as evidence of your consent. Those two confirmations are job requirements and are recorded as a plain yes; we do not ask your nationality or what type of permit you hold. We do not ask for your ID card number, date of birth, photograph, nationality, marital status, health information or any other special-category data under Article 9, and we ask candidates not to send it. We never ask what you are paid now or were paid before.
Why: solely to assess your application, contact you about it and arrange an interview. We do not use recruitment data for marketing, we do not profile candidates, and no decision about you is taken by automated means.
Legal basis: your consent (Article 6(1)(a) GDPR), given separately for holding your application and for keeping it on file for future roles; and, where an application moves towards an offer, steps taken at your request before entering into a contract (Article 6(1)(b)).
Who sees it: the person responsible for hiring, and where relevant the manager of the department applied to. Applications are held in our own business system on servers within the EU, are not shared with recruitment agencies, and are never transferred outside the EU/EEA. We do not approach a current or former employer for a reference without asking you first.
How long: six months from the date you apply, after which the application and every attached document are deleted automatically, or twenty-four months if you asked us to keep you in mind for future roles. If you are hired, your application becomes part of your employment record under a separate retention period.
Deleting it: the confirmation email we send you contains a one-click link that erases your application and its documents immediately, without needing to give a reason. You may also exercise any of the rights in section 7 by emailing [email protected].
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of our services constitutes acceptance of the updated policy.