Privacy Notice

Last updated: March 2026

Overview

 At Pit Stop, operated by the Malta-based Seaview and Sons Limited, we work hard to supply our customers with good-quality fuel and all-round vehicle related services. To be able to do this, we need to collect, process and store certain types of personal data about you, which personal data we take great care in keeping safe.

Through this Privacy Notice we wish to be as transparent as possible in outlining and explaining to you our data collection and processing procedures, as well as your rights, and this in line with the European Union’s General Data Protection Regulation [EU] 2016/679 (the “GDPR”) and the Data Protection Act (Chapter 586 of the Laws of Malta) (the “Act”), together the “Data Protection Laws”.

For this purpose, our Privacy Notice, which applies whether you visit our fuel stations, on-premise auto shops, browse our website (accessible here, https://pitstopmalta.com/, the “Website”) or otherwise engage with us, whether in person or through our social media pages, is intended to provide you with information about:

1. Seaview and Sons Limited
2. What Personal Data do we collect?
3. How do we collect your Personal Data?
4. How do we use your Personal Data?
5. Disclosures of Personal Data to third parties
6. Transfers to third countries
7. Protection of your Personal Data
8. Data retention
9. Your rights

 

This Privacy Notice was last updated in March 2026, and we may update it from time to time. If we believe that any changes will impact you significantly, we will notify you before they are made.

1. Seaview and Sons Limited

In this Privacy Notice, the terms ‘we’, ‘us’ and ‘our’ refer to Seaview and Sons Limited, and, as elaborated upon below, we collect and handle Personal Data in the course of operating our business under the Pit Stop brand. The Personal Data we collect relates primarily to our customers when they make use of our services and purchase our products, as furhter explained below. This makes Seaview and Sons Limited the ‘Controller’ (as defined under the GDPR) of the Personal Data.

Our contact details are as follows: 

Full name of Controller: Seaview and Sons Limited

Company registration number: C-24540

Postal address: Pit Stop Service Complex, Mdina Road, Attard, Malta

Email address: dataprivacy@salvgroup.com

Telephone number: (+356) 21 422 154

2. What Personal Data do we collect?  

We may collect, use, store and transfer different kinds of Personal Data about you for the purposes of providing you with our auto and mechanical services, providing feedback to your queries whenever you get in touch with us through our Website, our social media platforms or otherwise, and to offer you a better and more personalised experience throughout.

In the course of operating our business, we may also engage with suppliers, service providers, and other business partners. We may therefore also collect and process Personal Data relating to individuals representing these organisations, such as contact persons, account managers, or sales representatives.

We have, therefore, grouped the Personal Data that we may collect, use, store and transfer together, as follows:

General

Identity Data includes name, surname, identity card number, date of birth, vehicle number plate, log book information, and footage of you which may be captured by the CCTV cameras installed and operating within and outside of our stores.

Contact Data includes home address, billing address, email address and telephone and/or mobile number.

Financial and Transaction Data includes bank account and payment card details, as well as details about payment from and to you.

Technical Data includes details about the device that you use to access our Website. This could be information that identifies your device, its operating system, internet address, your login data such as browser and plug-ins, as well as your location details.

User Data includes information about you as a user of our fuel stations, products and/or services, including our Website. This may include information collected whenever you engage with us in a survey or questionnaire, provide feedback on your experience at our fuel stations and/or about our products or services.

Marketing and Communications Data includes data which we may collect for marketing, advertising, and communications purposes, as well as for social media interactions and competitions, including information relating to your preferences in receiving marketing/communications from us.

Special Categories of Data includes certain other ‘special information’ which, by law, requires greater security measures to guarantee its protection. These include any information relating to the following;

• Racial or ethnic origin;
• Political opinions;
• Religious or philosophical beliefs;
• Trade union membership;
• Genetic data;
• Biometric data for the purpose of uniquely identifying a natural person;
• Data concerning health;
• Data concerning a natural person’s sex life or sexual orientation.

 

We generally do not collect any special categories of Personal Data and we shall not collect, process and store any other data which is deemed to consist of special categories of data unless:

• you have made your sensitive data manifestly public;
• you have given your explicit consent;
• there is a law which governs a specific type of data processing for a specific purpose related to public interest or health;
• a law including adequate safeguards provides for the processing of sensitive personal data in areas such as public health, employment and/or social protection.

 

Personal Data concerning Minors

We do not knowingly collect or maintain any Personal Data from minors below the age of eighteen (18) years. If we learn that data of persons under the age of eighteen (18) years has been in some manner collected, we will take all the appropriate measures to safely delete this information. 

 

CCTV

In line with our security procedures, we have installed CCTV cameras in the main areas of our fuel stations, stores and garages. Some of our cameras also monitor the pavement / pedestrian area that is located exactly outside our stores. Our cameras do not record audio. These cameras are used solely for security purposes.

We generally retain CCTV footage for a period of seven (7) days, unless we are required to retain CCTV footage for a longer period for security reasons, or upon request of any competent authority or the Police.

3. How do we collect your Personal Data? 

 

We use different methods to collect your Personal Data, including:

A. Direct Interactions: The collection of your Identity Data, Contact Data, Financial and Transaction Data, Technical Data, User Data, and Marketing and Communications Data when you engage with us directly in our fuel stations, stores, by phone, email, our Website or otherwise. This includes Personal Data you provide us with when:

• registering your marketing preferences with us
• purchasing our products and/or making use of our services
• contacting us with any queries, demands, requests, complaints or other feedback
• participating in a survey, competition, and/or complete a questionnaire compiled by us
• visiting our fuel stations, stores and/or garages and passing through our CCTV areas
• interacting with us through any one of our social media platforms

 

B. Automated technologies and/or interactions: The collection of your Technical Data whenever you access and make use of our Website. We generally collect Technical Data automatically via the use of cookies which are specifically covered in our Cookie Notice.

C. Publicly available sources: We may also need to collect Identity Data, Contact Data and Financial Data from various public sources, including the Malta Electoral Commission, credit reference agencies and court websites.

4. How do we use your Personal Data?

 

We will only process your Personal Data on the basis of legally permissible grounds in terms of the Data Protection Laws. We will mainly process your Personal Data for the following reasons:

 

• When we need to comply with a legal or regulatory obligation;
• Where it is necessary for our legitimate interests (or those of a third party), and your interests and fundamental rights do not override those interests;
• In order to satisfy any contractual obligations that we may have towards you, including the provision of our services and/or the sale of our products to you; and
• When you would have given consent to certain specific processing activites.

 

For more detail, please read the section directly below entitled, ‘LEGAL GROUNDS FOR PROCESSING’.

 

[NOTE: We acknowledge that in most instances, you will be free to provide us with your Personal Data and consent to our further use of such Personal Data. We draw to your attention that, however, if you opt not to provide the relevant Personal Data we need, or you are not in a position to provide it, then this may limit our ability to provide some of the services and/or products that we offer to you.] 

 

LEGAL GROUNDS FOR PROCESSING

The table below provides a description of the ways we process your Personal Data, and which of the legal bases under the GDPR we rely on to do so. We may process your Personal Data on the basis of more than one lawful ground depending on the specific purpose for which we are using your Data.

 

Purpose of Processing	Personal Data Processed	Legal Grounds for Processing
Processing your requests and orders whenever you choose to purchase products and/or services from our premises, including from our fuel stations, stores and garages, or online.	Identity Data; Contact Data; Financial and Transaction Data; Technical Data; User Data.	(a)    Performance of our contractual obligations to you.   (b)    Protection of our legitimate interests (or those of a third party), such that we may require this information for administrative and logistical purposes to better understand what products you are interested to find in our stores and to update our internal records; for security reasons; to recover monies due to us; and to inform you of the services/products that we genuinely believe that you may be interested in.   (c)     Complying with a legal or regulatory obligation.   (d)    Understanding your preferences, based on your consent, to receiving marketing material, including SMS, emails, postal mail and vouchers from us.
Receiving and reacting to: (i) your queries, demands, requests, complaints or other feedback; and/or (ii) your participation in a survey and/or a questionnaire compiled by us; and/or (iii) your participation in a promotional activity, including competitions.	Identity Data; Contact Data; Marketing and Communications Data; User Data.	(a)     Performance of our contractual obligations to you.   (b)     Protection of our legitimate interests (or those of a third party), such that we may require this information for administrative and logistical purposes in the general course of our business; to better understand what products you are interested to find in our stores; to better the services and products that we offer to you; to promote our business and to update our internal records as necessary.   (c)      Understanding your preferences, based on your consent, to receiving promotional material, including SMS, emails, postal mail and vouchers from us.
Delivering promotional material and advertising which is relevant to you.	Identity Data; Contact Data; Marketing and Communications Data; User Data; Technical Data.	(a)    Protection of our legitimate interests (or those of a third party), such that we may require this information: to better understand what products you are interested to find in our stores; to better the services and products that we offer to you; to exercise and update our marketing strategies as required; and to promote and continue growing our business.   (b)    Understanding your preferences, based on your  consent, to receiving promotional material, including SMS, emails, postal mail and vouchers from us.
Properly administering our business operations, Website and IT systems.	Identity Data; Contact Data; Technical Data.	(a)    Protection of our legitimate interests (or those of a third party), such that we may require this information for administrative and logistical purposes in the general course of running our business in the best possible way, and to manage our IT systems and ensure the security of our networks.   (b)    Complying with a legal or regulatory obligation.
Processing of CCTV footage as filmed by our CCTV cameras located in the main areas of our fuel stations, stores and garages.	Identity Data.	(a)    Protection of our legitimate interests (or those of a third party) such that we may require this information to enhance the security levels on and around our premises thereby protecting ourselves, our employees, our customers, walk-ins and passers-by.   (b)    Complying with a legal or regulatory obligation.
Using data analytics to improve your experience on our Website, the services and products that we offer and our relationship with you.	Technical Data; User Data.	(a)    Protection of our legitimate interests (or those of a third party), such that we may require this information for administrative and logistical purposes in the general course of running our business in the best possible way; to better understand what products and/or services you are interested to find on our premises; to update our marketing strategies as required; and to generally better the services and products that we offer to you.
Interacting with suppliers, service providers, and other business partners.	Identity Data; Contact Data; Financial and Transaction Data.	(a)    Performance of our contractual obligations to you.   (b)    Protection of our legitimate interests (or those of a third party), such that we may require this information for administrative and logistical purposes in the general course of running our business in the most efficient way; and to procure goods and services.

 

In some cases, your Personal Data may also be processed by our entrusted third-party processors, in terms of the Data Protection Laws. These third-party processors will assist us in fulfilling our service standard. For more information on third party processors, please refer to section 5 of this Privacy Notice. 

 

MARKETING AND COMMUNICATIONS

 

Advertising

 

We may process your Personal Data, as an active customer, for marketing and communications purposes in the following instances:

 

1. when you would have specifically opted-in to directly receive marketing communications from us;
2. when we believe that any of our services and/or products may be of particular interest to you in being similar to those services and/or products that you might have obtained or purchased from us within a twelve (12) month period; and/or

• when we have legitimate reason to do so.

 

Any such Personal Data shall be collected and processed in line with the requirements and safeguards mandated by the Data Protection Laws, in line with the section above entitled, ‘LEGAL GROUNDS FOR PROCESSING’.

 

You can request us to stop sending you promotional material and, or communications for marketing purposes at any time should you wish to opt-out of our marketing chain, or should you no longer want us to keep you updated with our services and products, by following the opt-out links on any marketing message sent to you, or by contacting us directly via email, telephone or via our other channels of communication.

 

Social Media Interactions and Competitions

 

We also maintain a presence on social media platforms, such as Facebook and Instagram, to promote our products and services, share updates, and engage with our audience. Through these platforms, we may publish posts, run advertising campaigns, and occasionally organise competitions or other promotional activities.

 

Participation in such activities is completely voluntary, but it may involve interacting with our posts (for example, by commenting, sharing or tagging other individuals). Please ensure that you have obtained the prior permissions of any person you tag or reference on our posts when participating in such activities.

 

If you contact us through social media, or if you choose to participate in our promotional activities, we may collect and process Personal Data that would be necessary to respond to your enquiry or administer the relevant promotional activity, and which Personal Data you choose to provide us with.

 

Should any such interaction progress into a request for a product or service, we may need to request and process additional Personal Data, as outlined in the table under the section entitled ‘LEGAL GROUNDS FOR PROCESSING’ further above in this notice,  in order to process the transaction.

 

Please also note that when you interact with our social media pages, your Personal Data may also be processed by the relevant social media platform in accordance with its own privacy notices and terms of use over which we have no control.

 

HYPERLINKS

 

Our Website may contain hyperlinks to other websites not owned or managed by us who have their own data protection notices which we have no control over. It shall be your responsibility to check their privacy notices. We shall not be liable for how your Personal Data is dealt with by such external websites.

 

COOKIES

 

Cookies are text files placed on your computer or portable device when using our Website, and which in effect work to collect standard internet log information and visitor information on our Website. Our Website creates cookies every time you visit it. Cookies are used to analyse and record the traffic on and visits to our website.

 

You can set up your browser to refuse all or some cookies or to alert you when websites set or access cookies. However, please be aware that, should you choose to disable or refuse your consent to certain cookies, our Website or some parts of our Website may not function in the intended manner and your experience on our Website may be significantly diminished.

 

More specific details on the types of cookies used by our Website can be found in our Cookie Notice.

5. Disclosure of Personal Data to Third Parties

 

We may have to share your Personal Data with third-party processors for the purposes set out in the table in section 4 directly above. Such third-party processors are:

Related companies, including other entities within the Salv Group of companies, with whom we may share your Personal Data in order to properly render our services.

 IT security and software support service providers, including service providers who help us in ensuring that your Personal Data remains secure.

 Other service providers assisting us with IT backups, mainly to ensure that your Personal Data is securely stored whilst ensuring business continuity.

 CCTV security systems and maintenance providers, including service providers who help us ensure that your Personal Data remains secure and that our security systems are properly maintained and working as expected.

Administrative software and assistance provided by third-parties, mainly to enable us to organise and manage our internal administrative processes in a more efficient manner.

Third-party consultants and professional advisors, including experts who assist us in various matters, including legal advisors, auditors, payroll assistants, accountants, insurers and brokers.

Payment services providers, including service providers that facilitate payment transactions.

 Marketers and media partners, including service providers who assist us with our marketing, advertising and communications practices and activities.

 Regulatory, governmental or legal authorities, including entities that may require the disclosure of processing activities in certain circumstances.

Third-parties involved in business transfers, including third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business then the new owners may use Personal Data in the same way as set out in this Privacy Notice.

We require all third parties with whom we share Personal Data to respect the security of such Personal Data and to treat it in accordance with the law. We do not allow our third-party processors to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.

6. Transfers to Third Countries

We do not generally transfer your Personal Data to persons or entities outside the European Union. However, should this become necessary:

• for the performance of contractual or pre-contractual obligations between you and Seaview and Sons Limited;
• for the purpose of IT security / software support;
• for adherence with our legal and/or regulatory obligations;
• for the establishment, exercise or defence of legal claims; or
• for any other reason where any such transfer would be permitted in terms of law,

 

we shall endeavor to only transfer Personal Data to countries in the European Economic Area (the “EEA”) or to third countries outside the EEA which ensure an adequate standard of protection for such Data in terms of the GDPR. Should a transfer to countries which are outside the EEA be required, we shall ensure that appropriate safeguards are implemented for the protection of your Personal Data.

7.  Protection of your Personal Data

We have implemented appropriate security measures to prevent your Personal Data from being accidentally lost, altered or disclosed in an unauthorised manner. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third-party processors who have a business need to know. They will only process your Personal Data on our instructions and are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Data Retention

We retain your Personal Data only as long as we have a valid legal reason to do so, which includes satisfying any legal, accounting or reporting requirements.  

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In general, we will keep Personal Data for as long as you continue making use of our services or until such time as you ask us to stop communications with you, and for some years thereafter, unless we need to keep the data for a longer period. Indeed, we may retain different types of Personal Data for different lengths of time in line with legal requirements.

In some circumstances we may anonymise your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

9. Your Rights

As a data subject, you have certain data protection rights at law. Your rights as a data subject are being listed and explained in the table below:

Your rights under the GDPR	What does this mean?
ACCESS	You have the right to access your Personal Data and request a copy thereof.
RECTIFICATION	You have the right to rectify any incorrect Personal Data that we may hold about you.
ERASURE	You have the right to be forgotten, which enables you to ask us to delete your Personal Data where there is no good reason for us continuing to process it. On this point, note that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. We may not be able to provide you with some of our services if we do not hold your Personal Data.
RESTRICTION OF PRCOCESSING	You have the right to request the restriction of our processing. This can be done in the following cases: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
PORTABILITY	You have the right to data portability. Your data may be requested in a machine-readable format and you may also ask that your data be transferred directly to another person or service provider.
OBJECTION TO PROCESSING	You may object to the processing of your data where we are relying on legitimate interests (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
WITHDRAWAL OF CONSENT	If you have provided consent for the processing of your data you have the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.

 

[NOTE: We may not be able to provide you with some of our services if you opt to: restrict processing, or object to processing, or withdraw your consent.]

 

If you wish to exercise any of the rights set out above, please contact us. We will try to respond to all legitimate requests within one month and may require that you send over specific information to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights as outlined directly above). This is a security measure.

You will not have to pay to access your Personal Data (or to exercise any of the other rights mentioned above). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may, in such circumstances, refrain from complying with your request.

 

QUESTIONS AND COMPLAINTS

If you have any further questions about the processing of your Personal Data, please feel free to contact us. We are re-including our contact details below for your ease of reference:

Postal address: Pit Stop Service Complex, Mdina Road, Attard, Malta

Email address: dataprivacy@salvgroup.com

Telephone number:(+356) 21 422 154

 

Should you feel that our data protection practices have infringed your rights in any manner, you may lodge a complaint with the competent data protection supervisory authority. In Malta, this would be the Office for the Information and Data Protection Commissioner, the contact details of which are as follows:

 

OFFICE OF THE INFORMATION AND DATA PROTECTION COMMISSIONER [MALTA]

Email: idpc.info@idpc.org.mt
Phone: +356 2328 7100

We do, however, endeavour to receive and address your data protection concerns, and would therefore appreciate it if you were to contact us first should you feel that our practices may have violated any privacy rules.