Privacy Policy

Data controller: World Party Vibes (VAT MT32283622), info@maltapartyvibes.com.

World Party Vibes (worldpartyvibes.com) is the hub of the Party Vibes family of websites (Malta, Zante, Mykonos, Tenerife, Punta Cana and Albania). The requests you make through the forms on those websites, and on some partner websites, are saved by those websites' servers in the same central database that this policy describes.

• Our waitlist (on this website): your email address and the language of the page.
• Forms on the family websites: depending on the form, your name, email address, mobile number (optional, or asked for in a second step), language, travel dates, group size, the list, party or venue you are interested in, the date and number of people for a VIP table request, the event you want to hear about when it goes on sale, your message and the page you sent the form from.
• Chat assistant: the messages you write in the chat available on some of the family websites, which is answered from this website.
• Emails we send you: a copy of each email, when it was sent and the delivery status reported by our email provider (for example, delivered or bounced).
• Technical data: to protect the forms against spam and abuse, we use your IP address for a short time and check how the form was filled in (for example, how long it took). The IP address is not saved with your request. If a submission is rejected as suspected spam, we keep a security record for 90 days (an irreversible fingerprint of the IP and the partly hidden email address). Our hosting provider keeps standard technical logs.

We don't ask for sensitive data, and we don't use analytics or advertising cookies (see our Cookie Policy).

• To answer your requests (contact messages, VIP table requests, questions to the chat): because you ask us to, as a step before a possible booking (Art. 6(1)(b) GDPR), and our legitimate interest in answering you (Art. 6(1)(f) GDPR).
• To send you the confirmation and the emails you signed up for (alerts about the parties during your travel dates, a notice when an event you are waiting for goes on sale, season openings, new destinations and pre-sales, and — when the form says so — parties and offers from all the Party Vibes destinations): your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time: every email includes an unsubscribe link.
• To keep the website and the forms secure, prevent spam and abuse, and keep a record of the emails we send: our legitimate interest (Art. 6(1)(f) GDPR).

Writing to us through a contact form or requesting a VIP table does not sign you up for promotional emails. If you gave us your mobile number, we may also write to you on WhatsApp about your request or about the parties you asked to hear about.

We never sell your data. We only share it with:

• The team of World Party Vibes and of the Party Vibes website where you made your request, so they can answer you. If you write through a partner brand's website, that brand's team also receives your request.
• The venue hosting the party, only for VIP table requests: your name, the number of people, your email and your mobile number (if you gave it), so the venue can book your table.
• Our service providers, who process the data on our behalf: Supabase (database), Resend (sending emails and managing our mailing lists), Netlify (hosting of this website) and the AI providers OpenAI, Google (Gemini) and Groq, which generate the chat assistant's answers and only receive the messages you write in the chat.
• WhatsApp, only if we write to you there.

When you click a ticket link on our websites or in our emails, you go to GetYourTickets, the ticket platform that sells the tickets and processes your purchase under its own terms and privacy policy. Our links include our affiliate code, so the platform knows the sale came through us.

Some of these providers are based outside the European Economic Area (for example, in the United States) or may process data there. In that case, the transfer is protected by the European Commission's standard contractual clauses or by another safeguard provided for in the GDPR, such as an adequacy decision.

• Lists and alerts: while you stay subscribed. Alerts linked to a trip stop on their own once your travel dates have passed. If you unsubscribe, we stop emailing you straight away; 7 days later we erase your details and keep only your email address marked as unsubscribed, so that nobody can add you to our lists again by mistake.
• Requests (contact, VIP): in the central database, so we can follow them up and recognise you if you write to us again, for 2 years after your last request; after that they are erased.
• Chat: messages are not saved in our database; they are only used to generate the answer (a first question and its answer may stay in a temporary memory for up to 15 minutes). The AI providers may keep them for a limited time under their own terms.
• Record of the emails we send: kept for 1 year to document our communications, then erased.
• Technical logs: kept by our hosting provider for a limited period.

You can request access to your data, its rectification or erasure, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time (this does not affect anything done before). Write to info@maltapartyvibes.com, ideally from the email address concerned, and we will reply within the time limits set by law. To unsubscribe from a list, just use the link at the bottom of any of our emails.

You may also lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (idpc.org.mt), or with the authority of your country of residence.

Your data travels encrypted (HTTPS). The database can only be accessed from our websites' servers, our internal scripts and an internal panel protected by a password.

If we change this policy, we will publish the new version on this page with its date.