Privacy notice

The controller is P MAIA AI LTD, a private limited liability company registered in Malta, registration number C99026, with its registered office at Palace Court, Church Street, St Julians STJ 3049, Malta.

You can reach us about anything in this notice by email at info@maiabrain.com or by telephone on +356 2010 2020.

We are not required to appoint a Data Protection Officer under Article 37, and we have not appointed one. Privacy correspondence reaches a monitored mailbox at the address above.

This website is a set of static pages. It runs no analytics, sets no advertising or measurement tags, builds no visitor profile, and loads nothing from any third party. Every font, image and script is served from this domain, and the build fails if that stops being true.

To deliver a page to you, our content delivery network necessarily receives the technical information that any web request carries: the network address you connect from, the page requested, and your browser's user agent. This is processing of personal data, and we do not pretend otherwise.

Access logging is switched off on that distribution. We do not receive, store or have any means of retrieving a record of your visit. We cannot tell you which pages you read, because nothing here records it.

Our legal basis is Article 6(1)(f), our legitimate interest in operating and securing a website that people have asked to read. The interest is narrow, the processing is transient, and it is the minimum required to send you the page you requested.

This site sets no cookies. It writes nothing to local storage, session storage, or any other store on your device. Nothing is stored that you would need to consent to, and for that reason you will not be shown a consent banner.

That is a design decision, not an omission. Regulation 5 of the Processing of Personal Data (Electronic Communications Sector) Regulations, Subsidiary Legislation 586.01, governs the storing of information on your equipment whatever the technology. The site previously kept a single value recording that an opening animation had already played; it was removed rather than made the subject of a consent request.

A build check fails if any storage interface reappears in what we publish.

There is one form on this site: the application to our partner programme. What you enter in it is sent to our own service at talk.maiabrain.com and stored there, in the European Union, in Frankfurt. We hold the details you give us — your name and email address, and whatever you choose to add about your organisation, your business and why you are applying — with the date it arrived, whether you ticked the certification course box, and, to keep the form from being abused, a one-way fingerprint of the network address and browser it was sent from rather than the address itself.

We use an application to consider it and to answer you. The legal basis is Article 6(1)(b): by applying, you have asked us to take steps before entering into a contract with you.

Consent is asked for one thing only: whether we may contact you about the certification course when its dates are set. The box is unticked unless you tick it. You may withdraw that consent at any time by writing to info@maiabrain.com, and withdrawing it does not affect anything done before.

You can also write to us by email or telephone, and you decide what to tell us. We then hold your address, your name and signature if you give them, the message itself, anything attached to it, and the correspondence that follows.

We use it to answer you, to take any steps you have asked for before entering into a contract, to keep ordinary business records, and to establish or defend legal claims. The legal bases are Article 6(1)(b) where you have asked us to take steps towards a contract, Article 6(1)(f) for ordinary business correspondence and for protecting our legal position, and Article 6(1)(c) where a record must be kept by law. We do not rely on consent to reply to you.

Two processors act on our instructions. Amazon Web Services delivers this website and runs the service that receives partner applications: both have their origin in Frankfurt, and both are reached through edge locations. GoDaddy provides our email, our domain and our DNS, which means our correspondence with you is held on their systems.

Both act under written data processing terms. We do not sell personal data, we do not share it for advertising, and nobody profiles you here.

Beyond those two, personal data reaches only our own staff and, where it is necessary, our professional advisers or a public authority entitled to it.

We will not tell you that everything stays inside the European Economic Area, because it does not. Our content delivery network serves from edge locations in the United States, Canada, Israel and Europe, and the request that fetches a page, or carries a partner application on its way to Frankfurt, may be handled by any of them. An application is stored only in Frankfurt. Our email and domain provider is a United States group.

Those transfers rest on the mechanisms in Chapter V of the Regulation: adequacy decisions where the European Commission has adopted one, and the Standard Contractual Clauses incorporated into our processors' terms where it has not. You may ask us for information about the safeguards that apply.

Nothing is kept from your visit to the site, because nothing is recorded.

A partner application, and the record of any consent given with it, is deleted twenty-four months after it reached us.

Correspondence is reviewed and deleted two years after our last substantive exchange with you, unless a contract, a statutory retention period or a live or anticipated dispute requires us to keep it longer.

Our own administrative access records — who did what inside our infrastructure — are kept for four hundred days for security and accountability. They concern our staff and contractors, not visitors to this site.

You may ask for access to your personal data, for it to be corrected or erased, for its processing to be restricted, and, where the conditions in Article 20 are met, for it to be given to you in a portable form.

Where we process on the basis of our legitimate interests, you may object at any time on grounds relating to your particular situation, and we will stop unless we can show compelling legitimate grounds that override your interests.

Where we rely on your consent — for the certification course, and for nothing else — you may withdraw it at any time.

Write to info@maiabrain.com. We answer within one month, and we will tell you if we need longer and why. For a visit to this website the honest answer is that we hold nothing to give you; for a partner application, we hold what you sent us.

You may lodge a complaint with the Information and Data Protection Commissioner, the supervisory authority for Malta, or with the authority in the country where you live or work. Doing so does not affect any other remedy available to you.

We would rather you told us first, but you are not obliged to.

Some links on this site lead somewhere else:

• LinkedIn
• Facebook
• a map of our registered office
• talk.maiabrain.com, where you can talk to us

Nothing is sent to any of them until you follow the link. Once you do, the site you arrive at is responsible for what it does there, and this notice no longer applies to you.

This notice describes what the site does today, and it is written from the configuration that was running when it was published. If that changes, this notice changes with it.