
How we handle personal data under Maltese law and the GDPR — in plain language, with no small print games.
Owls Eye ("Owls Eye", "we", "us") is a travel discovery and affiliate comparison platform operating from Malta. We are the data controller for personal data processed through this website, within the meaning of Regulation (EU) 2016/679 (the "GDPR") as supplemented in Malta by the Data Protection Act (Chapter 586 of the Laws of Malta)and its subsidiary legislation.
Data protection contact: help@owls-eye.com.
Owls Eye is not a travel agency, tour operator or organiser of package travel. We surface offers and redirect you to third-party partners who conclude and fulfil any booking.
We do not knowingly collect special categories of personal data, nor payment card data — payments occur on partner sites.
Cookies are governed by the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01). Only strictly necessary cookies are placed without consent; everything else is set only after you agree through our cookie banner. Full detail is in our Cookie Policy.
We never sell personal data.
Data is primarily processed within the EU/EEA. Where a provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses together with appropriate supplementary measures.
Under the GDPR and Cap. 586 you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.
Write to help@owls-eye.com; we reply within one month. You may also lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC), Floor 2, Airways House, High Street, Sliema SLM 1549, Malta — idpc.org.mt.
This website is not directed at children under 16. Our "Kids Destinations" pages are aimed at adults planning family travel. We do not knowingly process the data of minors.
We apply appropriate technical and organisational measures under Article 32 GDPR, including encryption in transit and access controls. We may update this policy; material changes are reflected in the "last updated" date and, where consent is affected, by re-asking through the cookie banner.