Privacy Policy
Last updated: 30 August 2026
Hnejja Stays processes personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Maltese data protection legislation.
1. Who We Are
Hnejja Stays is the trading name used by Kristan Gera in connection with the short-let accommodation business.
Kristan Gera is the person responsible for the processing of personal information described in this Privacy Policy.
Name: Kristan Gera
Trading as: Hnejja Stays
Address: 45, Triq L-Iljun, Floriana, Malta
Email: hnejjastays@gmail.com
2. Information We May Collect
Depending on how you interact with Hnejja Stays, we may collect information such as:
- Your name and contact details.
- Booking and reservation information.
- Information you provide when contacting us.
- Information relating to your stay.
- Payment or transaction information where necessary to process a booking or payment.
- Information you voluntarily provide to us through email or other communication channels.
- Basic technical information relating to your visit to our website where this is automatically processed by our website provider.
3. How We Use Your Information
We may use personal information for purposes including:
- Responding to enquiries and requests.
- Managing and administering bookings.
- Communicating with guests before, during and after their stay.
- Providing information relating to your accommodation and stay.
- Processing payments where applicable.
- Meeting legal, regulatory, tax or accounting obligations.
- Protecting the security of our website, accommodation and guests.
- Improving our services and guest experience.
4. Legal Basis for Processing
Depending on the circumstances, we may process your personal information on one or more of the following legal bases under the GDPR:
- Processing necessary to take steps at your request before entering into a contract or to perform a contract with you.
- Processing necessary to comply with a legal obligation.
- Processing based on your consent, where consent is required.
- Processing necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
5. Booking Platforms and Third Parties
If you make a reservation through a third-party booking platform, such as Booking.com, that platform may separately process your personal information under its own privacy policy.
We may receive information from booking platforms that is necessary to manage your reservation and provide accommodation services.
We may also share information with service providers where reasonably necessary to operate our accommodation business, provide services requested by you, process payments or comply with legal obligations.
We do not sell your personal information.
6. Payments
Where payments are processed through a third-party payment provider or booking platform, payment information may be processed directly by that provider in accordance with its own privacy and security practices.
Hnejja Stays does not intentionally retain full payment card details unless this is specifically required and legally permitted.
7. Cookies and Website Technologies
Hnejja Stays does not currently use Google Analytics, Meta Pixel, newsletters or other dedicated marketing tracking tools on this website.
Squarespace may nevertheless use cookies and similar technologies that are necessary for the operation, security and functionality of the website.
Some cookies may be placed by third-party services integrated into the website. You can manage cookies through your browser settings and, where provided, through the website's cookie controls.
8. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, managing bookings, resolving disputes and complying with legal, tax or accounting requirements.
The exact retention period depends on the type of information and the reason for processing it.
9. Your Data Protection Rights
Subject to applicable law, you may have the following rights regarding your personal information:
- The right to access your personal information.
- The right to request correction of inaccurate or incomplete information.
- The right to request erasure of your personal information in certain circumstances.
- The right to request restriction of processing in certain circumstances.
- The right to object to certain processing.
- The right to data portability where applicable.
- Where processing is based on consent, the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at hnejjastays@gmail.com .
10. Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
11. International Data Transfers
Some third-party platforms or service providers used in connection with bookings, website hosting or other services may process personal information outside Malta or the European Economic Area.
Where personal information is transferred outside the EEA, appropriate safeguards will be used where required by applicable data protection law.
12. Children's Privacy
Our website is not intended to knowingly collect personal information directly from children.
If you believe that a child has provided us with personal information without appropriate consent, please contact us.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, website, legal requirements or data processing practices.
The latest version will always be made available on this page, together with the date on which it was last updated.
14. Contact Us
If you have any questions about this Privacy Policy, would like to exercise your data protection rights, or have concerns about how your personal information is being handled, please contact us.
15. Right to Lodge a Complaint
If you believe that your personal information has been processed in a way that does not comply with applicable data protection law, you have the right to lodge a complaint with the relevant data protection supervisory authority.
In Malta, the relevant supervisory authority is the Information and Data Protection Commissioner (IDPC).