Privacy policy
Webooking is an editorial directory operated by Supero Ltd, a web agency based in Gozo, Malta. This policy explains how we handle personal information when you browse the directory or contact our editorial team.
Who is responsible for your information?
The data controller is Supero Ltd, 1, Triq It-Tramuntana, NDR 1222, In-Nadur (Ghawdex), Republic of Malta. For privacy questions or requests concerning your personal information, contact privacy@webooking.net.
Messages and error reports
When you use a contact form, we receive the information you enter, such as your message, the address of a listing and your email address if you provide one. Please do not send sensitive personal information or information about other people that is unnecessary for your request.
We use these details to read and respond to messages, investigate errors and maintain the directory. Our legal basis is our legitimate interest in managing the website and communicating with its readers. Providing an email address is optional, but without it we cannot reply. We retain form submissions for 12 months. Messages received by email are retained for 24 months. Backup copies follow the backup retention arrangements described below.
Server logs and security
Our server records technical information about requests, which may include an IP address, request time, requested page, browser information and response status. We use these logs to keep the website secure, investigate problems and prevent abuse, on the basis of our legitimate interest in operating a reliable service. Server logs are deleted after 24 months.
Contact forms use Cloudflare Turnstile and a honeypot to reduce automated spam. Turnstile processes technical signals, including network and browser information, to assess whether a request is legitimate. Cloudflare also processes information for the purposes described in its Turnstile Privacy Addendum. These checks support our legitimate interest in protecting the website and editorial team from abuse.
Website statistics
We use Matomo, self-hosted on a Supero server in the European Union, to understand how visitors use the directory and improve its contents. It records usage information such as pages visited, visit times, referring websites and browser or device information. Standard Matomo tracking cookies are disabled. We configure Matomo to mask IP addresses before they are stored. We do not use these statistics for advertising. Our purpose is to measure readership and improve the directory; where personal data is involved, we rely on our legitimate interest in operating and improving the website. Analytics records are currently retained without a fixed deletion date. Disabling cookies and masking IP addresses do not, by themselves, mean that every analytics record is fully anonymous. You may contact privacy@webooking.net to object to processing based on legitimate interests.
Cookies, advertising and external services
We do not display advertising or use advertising pixels. Administrative login functions use essential cookies. Matomo tracking is configured without its standard tracking cookies. The integration may set a technical session cookie named matomo_has_js when it recognises certain AI bot browsers, to help distinguish requests. Security checks may also use technical browser signals or storage.
The website currently loads fonts from Google Fonts. Your browser contacts Google servers to retrieve them, which discloses your IP address and technical request information to Google. This supports the presentation of the website. Google handles these requests under its Privacy Policy.
Where information is stored and who can access it
The website runs on a Supero server located in the European Union. Backups are also stored on a server in the European Union. Access is limited to authorised editorial and technical staff and service providers who need it to operate the website or handle messages. We do not sell personal information.
Email notifications are sent through the same Supero server as the website, without an external SMTP service. Backups are retained for 24 months. Consequently, information deleted from the live website may remain in backup copies until those copies expire. Backups are used for recovery and access is restricted. Cloudflare and Google operate internationally and their services may involve processing outside the European Economic Area. Their privacy notices describe the applicable processing locations and transfer safeguards; further information about our use of these services is available from privacy@webooking.net.
Your rights
Subject to the conditions in data protection law, you may request access, correction, deletion or restriction of your personal information, and object to processing based on legitimate interests. Data portability and withdrawal of consent apply where relevant. Contact us using the privacy email above. You can complain to Malta’s Information and Data Protection Commissioner, or to the supervisory authority where you live or work.
Links to other websites
Directory links lead to independent websites. Once you visit one, its own privacy policy and practices apply.
Last updated: 4 October 2026. We may update this policy when the website or its services change.