Data Protection Notice
This Notice explains how and why Melita Limited, operating under the brand “melita.io”, processes personal data in the context of Machine-to-Machine (“M2M”) and Internet of Things (“IoT”) services it provides. Melita Limited is a company registered in Malta (Company Registration Number C 12715), with its registered office at Gasan Centre, Triq il-Mergħat, Zone 1, Central Business District, Birkirkara, CBD 1020, Malta.
For the purposes of applicable data protection laws, Melita Limited (“Melita”, “we”, “us”, or “our”) acts as the data controller of the personal data (“Personal Data”) relating to the Customer’s account, billing, network operations, security, customer support and contractual management. Where Personal Data is transmitted via the M2M connectivity Service, generated by devices or relates to the Customer’s end users, employees or clients, Melita processes such Personal Data strictly on behalf of and under the instructions of the Customer and acts as a data processor.
Melita’s Data Protection Officer (DPO) may be contacted at dpo@melitaltd.com. Melita is fully committed to protecting your privacy and processing your Personal Data in compliance with Maltese data protection laws and all other applicable legislation.
Categories of Personal Data: Personal Data means your name and surname, or that of the authorised representative and of any employees exchanging correspondence with Melita personnel, address, identity card (identification number) and/or passport, contact number/s, email address, payment information, your interests and preferences in relation to the service or any other identifiable information depending on the service requested by you. Personal Data may also be generated through your use of service which includes sim card information and status, traffic meta data containing internet records and network identifiers, location data and device information such as IP address or device identification. When registering for the Global IoT and melita.io portal, Melita processes users’ account credentials, as well as their name, surname, mobile number, and email address. In addition, the use of the portal generates audit logs and API activity logs. Personal data may also be generated through interactions you make with Us, such as through Our web chat, calls, emails and/or online forms.
In subscribing to Our services Melita processes these Personal Data and may require you to provide other Personal Data depending on the services requested. Provision of your Personal Data is not a statutory requirement. It is a voluntary act, for the purposes: (1) of entering into an agreement for the services requested from Melita (“Agreement”); and (2) for specific processing activities based on the Customer’s consent. Our legal basis for processing Personal Data is primarily the performance of the Agreement, compliance with legal obligations, and Melita’s legitimate interests. Consent is relied upon only where required under applicable law.
Our Processing on the basis of the Agreement: In processing your Personal Data on the basis of the Agreement, We shall process your data in order to provide you the service, for the purpose of: i) Service Support; ii) Customer Satisfaction; iii) Billing and Payments; iv) Maintenance, Outage and Planned Upgrades Notification; v) Call Placement vi) Global IoT and melita.io Portal Functionality; and vii) Network security and fraud prevention. As you may understand, in the event that you refuse to provide your Personal Data that is strictly required to provide the service, We would not be able to provide you with the required services. We can assure you that your Personal Data will always be used in accordance to current legislation.
Our Processing in relation to promotional material: Melita may process Customer’s Personal Data for direct marketing and may send information about Our products and services that we think may interest the Customer by mail, telephone, email, and electronic messaging including text messaging. If you do not want us to, you may at any time, oppose to the processing of your Personal Data for direct marketing purposes by contacting Melita, or, in the case of email communications, by clicking the unsubscribe link included at the bottom of the email. We do not send any promotional content to the end users of the M2M service.
Automated Decisions – Billing: Please note that we employ an automated decision-making process in order to monitor your payment of any fees due to Us and determine whether you are in compliance with the Agreement. Should you repeatedly fail to pay the fees due to Us, an automated decision to stop the provision of the services, may be taken.
As you may appreciate, such an automated-decision making process is necessary to enable performance of the Agreement from a billing perspective.
Automated Decisions – Traffic Management: In certain circumstances, excessive, abnormal or unauthorised use of the M2M IoT connectivity service may adversely affect network performance, security or other customers. Where this occurs, Melita may apply automated network management measures, which may include temporary speed limitation, suspension or termination of all or part of the service, as necessary to ensure network integrity, prevent fraud, or ensure compliance with the Agreement. You will be sent a notification advising you of such action. You may contact Us should you wish to contest or express your views on any decision arrived at via automated processes and a Melita employee will assess your request.
Legitimate Interest: We may also have a legitimate interest to process Personal Data about you which is available in publicly accessible sources in the process of debt collection.
Legal Obligation: You acknowledge that We are obliged to provide the Services in conformity with Maltese Law including laws dealing with data retention and lawful intercept. Accordingly we reserve the right to store and forward any records, data and recordings to the relevant authorities when requested to do so by a lawful order of the Police, Court, Tribunal or any other Regulatory Authority.
Other Automated Decisions: We may collect and analyse information generated through your use of our services, including by automated means. This may involve profiling within the meaning of applicable data protection laws. Such processing is carried out to improve the performance and quality of our services, to understand usage patterns and trends, and to develop and personalise products and services that better meet your needs and preferences. We may also analyse how you react to correspondence that We send you, or which links you choose to click. This will help Us gather feedback on how We may further optimise Our services. Our automated decisions will not produce any legal or significant effect upon you, they are all limited to improving your experience of the service in minor ways and offer you relevant products and services. Nevertheless, if you do not wish to be subject to such minor automated decisions, you may object to such processing by contacting Us . We may also analyse or monitor certain information for Melita’s own statistical purposes. No action or decision in relation to the data subject will be undertaken as a result of such monitoring.
Recipients of your Personal Data: The recipients and processors of your Personal Data are Melita and Our employees. We may also share your Personal Data with Our intra-group companies, with other authorised electronic communications operators and roaming operators, public authorities or law enforcement agencies and with third parties that provide services to Melita on a contractual relationship: for the purpose of being able to provide you the service requested; market research; to be able to contact you and assist in customer care services such as chat, and customer satisfaction surveys; for payment collection services, including debt collection and providing you with an electronic payment gateway facilitating your bill payment methods; credit referencing; fraud detection services; and. In order to provide you with your Service Melita may be required to transfer your Personal Data to recipients located outside of the EU. In doing so Melita ensures that the 3rd party recipients are either subject to an adequacy decision or to appropriate safeguards in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) and any other applicable legislation and that Melita has a justifiable ground for such a transfer, such as Our legitimate interest.
Retention: Your Personal Data shall be retained for the duration of the Agreement and thereafter no longer than it is strictly necessary to enable Us to fulfil any obligation imposed on Us at law which requires that We process your Personal Data.
Your rights: You have a right to object to Our processing of your Personal Data, access the Personal Data We hold about you and to request that We port such Personal Data in a structured, commonly used and machine-readable format to you or to another controller indicated by you. You also have a right to request that We immediately rectify, block or erase your Personal Data. Blocking and erasure of Personal Data provided for the purposes of the Agreement may only be effected by Us in accordance with the terms of the applicable Agreement and any other obligations incumbent on Us.
Queries: Any queries you may have regarding Our processing of your Personal Data may be addressed to Melita or Our DPO. Furthermore, you have a right to lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta (www.idpc.gov.mt).
This notice is governed by the laws of Malta. For a more detailed overview of how We process your Personal Data, kindly visit www.melita.com or you may otherwise obtain a copy through one of our retail outlets. Where Melita acts as a data processor, data subjects should direct their requests to the relevant service provider acting as their data controller, and Melita will assist as required under applicable data protection laws.
This Data Protection Notice was last updated on 13th May 2026.