Who we are
Carlo Schembri &bold (“the studio”, “we”, “us”) is an independent design and photography practice based in Lija, Malta. This website, carloschembri.com, is the public portfolio of the studio.
Questions relating to personal data can be sent to carlo@carloschembri.com. We respond personally.
What we collect
We collect very little. In most visits we collect nothing that identifies you. The exceptions are:
- Contact form submissions — when you write to us through the contact form, we receive the name, email address and message you enter. These are sent directly to the studio inbox; nothing is stored on the server.
- Server logs — our server records standard access logs (IP address, timestamp, user agent, requested URL). Logs are rotated and discarded after 30 days, and are never joined to other data sets.
We do not use advertising cookies, tracking pixels, behavioural profiling or third-party analytics.
Why we use it
Under Article 6 of the EU General Data Protection Regulation (GDPR), each piece of data listed above has a specific lawful basis:
| Data | Purpose | Lawful basis |
|---|---|---|
| Contact form entries | Replying to your message | Consent (Art. 6(1)(a)) |
| Server access logs | Diagnostics & abuse prevention | Legitimate interest (Art. 6(1)(f)) |
How long we keep it
- Contact messages — sent directly to the studio inbox and not stored on the server. Retention is determined by the studio's own email practices.
- Server logs — rotated and deleted after thirty days.
Who sees it
Nobody outside the studio. We do not sell, rent, share or transfer personal data to third parties. The site is hosted on infrastructure we control; there are no third-party service providers with access to your submissions.
Your rights
As a data subject under the GDPR you have the right to:
- Request a copy of the personal data we hold about you.
- Correct inaccurate information.
- Request deletion of your data (“right to be forgotten”).
- Object to processing based on legitimate interests.
- Lodge a complaint with the Office of the Information and Data Protection Commissioner of Malta — idpc.org.mt.
To exercise any of these rights, email carlo@carloschembri.com. We aim to reply within fourteen days.
Children
This is a professional portfolio. We do not knowingly collect personal data from anyone under the age of sixteen. If a minor has submitted information to us through the contact form, a parent or guardian can request its removal at any time.
Changes
If this policy changes in a material way, we will update the effective date at the top of the page and, where appropriate, announce the change on the site. The current version was effective from April 2026.