Privacy Notice

Fiorini Distributors Ltd is the data controller for personal data collected through this website. This notice explains what we collect, why we collect it, who we share it with, and what rights you have under the General Data Protection Regulation and the Maltese Data Protection Act.

Who we are

Fiorini Distributors Ltd, Energeia Building, Mdina Road, Żebbuġ ZBG 9018, Malta.

For any question about this notice, or to exercise any of the rights described below, contact accounts@fdl.com.

What we collect

When you use the contact form. Your name, email address, the enquiry type you select, and whatever you write in your message.

When you use the supplier enquiry form. Your company name, email address, and the content of your message.

When you apply for a role. Applications reach us by email, so we receive whatever you choose to send — usually your name, contact details, curriculum vitae and covering note.

When you report a suspected adverse reaction. These reports are taken by telephone or email and not through this website. They may include health information about a patient. Where we are required to do so, we forward them to the marketing authorisation holder for the product and to the Malta Medicines Authority.

Automatically, when you visit. Our hosting provider records standard server log data, including IP addresses, to keep the site available and secure.

This website sets no cookies of its own. It uses no analytics, advertising or tracking services, and the typefaces are served from our own domain rather than from a third party. The only third-party content on the site is the map described below, which loads only if you ask for it.

Why we use it, and our legal basis

To answer your enquiry — our legitimate interest in responding to people who contact us, or, where you are asking about supply, steps taken at your request before entering a contract.
To consider your job application — steps taken at your request before entering an employment contract.
To meet our pharmacovigilance obligations — a legal obligation under EU and Maltese medicines legislation. Where an adverse reaction report contains health data, we process it because it is necessary for reasons of public interest in the area of public health.
To keep the site running and secure — our legitimate interest in protecting the website and the systems behind it.

Google provides the map on our contact page. The map does not load until you ask for it: until you do, no request reaches Google and no Google cookie is set. If you choose to load it, Google receives your IP address and sets cookies in your browser. Your choice is remembered in your browser so you are not asked again.
Netlify hosts this website, processes the server logs described above, and receives what you send through the forms on this site.
Marketing authorisation holders and the Malta Medicines Authority receive adverse reaction reports, where we are required to forward them.

We do not sell personal data, and we do not share it for advertising.

Transfers outside the European Economic Area

Some of the providers listed above operate outside the EEA. Where personal data is transferred outside the EEA, it is protected by appropriate safeguards. [Specific safeguards — adequacy decision or standard contractual clauses — to confirm for each provider.]

How long we keep it

[Retention periods to confirm.] In general, we keep enquiries for as long as we need them to deal with the matter and for a reasonable period afterwards. Applications from candidates we do not appoint are kept for [period to confirm]. Pharmacovigilance records are kept for the period required by medicines legislation, which is longer than our other retention periods.

Your rights

You have the right to ask us to:

give you a copy of the personal data we hold about you
correct data that is inaccurate or incomplete
delete data where we no longer have a reason to hold it
restrict how we use it, or object to our using it
provide it to you, or another controller, in a portable format

Some of these rights are limited where we are legally required to keep records, which is most often the case for pharmacovigilance data.

To make a request, contact accounts@fdl.com. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, you can complain to the Office of the Information and Data Protection Commissioner, the supervisory authority for Malta, at idpc.org.mt.

Changes to this notice

We revise this notice when our practices change. The date at the top shows when it was last updated.