Privacy Policy
Privacy Policy
Last updated: 14 November 2026
1. Controller
The controller responsible for processing personal data on cars.com.mt is:
XX Consulting LLC, 8051 N Tamiami Trl, Ste E6, Sarasota, FL 34243, USA
Email: mail@cars.com.mt
As the Platform is directed at users in Malta and the European Union, we process personal data in accordance with the EU General Data Protection Regulation (GDPR).
2. Data we process
- Visiting the website: IP address, date and time of access, browser type, operating system, referring page. Purpose: delivering and securing the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Vehicle listings: name, telephone number, email address, location, vehicle details and photos provided by sellers. Purpose: publishing the listing and enabling buyers to contact the seller. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and the seller’s consent to the display of their telephone number via the Seller Contact Unlock (Art. 6(1)(a) GDPR).
- Seller Contact Unlock (payment): transaction data such as amount, date, listing and payment status. Card data is processed exclusively by our payment service provider; we do not receive or store full card details. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations such as accounting and tax rules (Art. 6(1)(c) GDPR).
- Contact form and emails: name, email address, telephone number (optional) and your message. Purpose: answering your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
- Newsletter (if you subscribe): email address. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link.
3. Cookies, analytics and advertising
We use technically necessary cookies to operate the website. With your consent (Art. 6(1)(a) GDPR), which you can give or refuse in our cookie banner, we may also use analytics and advertising services provided by Google (such as Google Analytics, Google Site Kit and Google AdSense). These services may set cookies and process usage data, including your IP address. You can withdraw your consent at any time by changing your cookie settings.
4. Recipients and processors
We share personal data only where necessary with:
- our hosting provider IONOS SE (Germany), which hosts the website and database;
- payment service providers that process payments for the Seller Contact Unlock;
- Google Ireland Limited / Google LLC for analytics and advertising (only with your consent);
- email service providers used to send transactional emails and newsletters.
These providers process data on our behalf under data processing agreements or as independent controllers under their own privacy policies.
5. Transfers outside the EU/EEA
As the operator is a company based in the USA, and as some service providers (e.g. Google) process data in the USA, personal data may be transferred to countries outside the EU/EEA. Such transfers take place on the basis of an adequacy decision (in particular the EU-US Data Privacy Framework, where the recipient is certified) or the EU Standard Contractual Clauses (Art. 46 GDPR).
6. Retention
We store personal data only for as long as necessary for the purposes stated above. Listings are deleted or anonymised after they are removed, unless longer retention is required by law. Payment and accounting records are kept for the statutory retention periods.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw your consent at any time with effect for the future. To exercise your rights, contact us at mail@cars.com.mt.
You also have the right to lodge a complaint with a supervisory authority, in Malta the Office of the Information and Data Protection Commissioner (IDPC), idpc.org.mt.
8. Changes
We may update this Privacy Policy when our services or legal requirements change. The current version is always available on this page.