Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Infinite Fusion
Fusion House, Qormi, Malta
Email: bookings [at] aura.com.mt

2. What Data We Collect

When you submit an enquiry through our form, we collect the personal data you provide, which may include:

• First and last name
• Email address
• Phone number
• Property of interest, check-in / check-out dates, number of guests and purpose of stay
• Any additional information you choose to include in your message

We also process limited technical data (such as your IP address) for security and abuse-prevention purposes, including rate limiting and bot protection.

3. How We Use Your Data & Legal Basis

We process your personal data for the following purposes and on the following legal bases:

• To respond to your enquiry and arrange your stay — based on your consent and our taking steps at your request prior to entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR).
• To protect our website from spam and abuse — based on our legitimate interests in maintaining the security of our services (Art. 6(1)(f) GDPR).

4. Third-Party Processors

We share your data only with service providers that help us operate our website, under appropriate data-processing terms:

• Resend — to deliver enquiry emails to our team.
• Cloudflare Turnstile — to verify that submissions are made by humans and to prevent automated abuse.

Where any processor transfers data outside the European Economic Area, such transfers are safeguarded by appropriate measures such as the European Commission's Standard Contractual Clauses.

5. Data Retention

We retain enquiry data only for as long as necessary to respond to your request and to manage any resulting booking or relationship, after which it is securely deleted. Technical security data is kept for a short period only.

6. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request rectification of inaccurate data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to our processing of your data
• Request portability of your data
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at bookings [at] aura.com.mt. You also have the right to lodge a complaint with the Maltese supervisory authority, the Office of the Information and Data Protection Commissioner (IDPC), at idpc.org.mt.

7. Cookies & Analytics

Our website does not use tracking or advertising cookies. Cloudflare Turnstile may set a strictly necessary token to perform its security check. We do not sell your personal data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

9. Contact

For any questions about this policy or how we handle your data, please contact us at bookings [at] aura.com.mt.