Privacy Notice
If you contact Prison Break Malta about an event or register private interest in a future Open Experience, we use the minimum information needed to answer you and prepare the next step.
Last updated: 4 September 2026
1. Who is responsible
MULTI-MAXX LTD (Malta company registration C 56621) is the controller for corporate enquiries submitted to Prison Break Malta. The experience is operated at Kordin, Malta. Contact us at info@prisonbreakmalta.com.
2. What we collect
The corporate enquiry form asks for your company, name, work email, preferred event format and approximate group size. You may also provide a preferred date and event objective. The Open Experience interest register asks for your name, email, interested party size and usual availability, with an optional phone or WhatsApp number. If you contact us directly, we also receive the information contained in that message.
Please do not put health information or other sensitive personal information in the public enquiry form. If individual participation or accessibility information becomes necessary, we will ask for only what is needed through an appropriate channel.
For a corporate enquiry, your company, name, work email and estimated group size are required so that we can identify the enquiry and judge which format may fit. For Open Experience interest, your name, email, party size and usual availability are required so that we can assess whether a suitable shared date may be assembled. The other fields are optional. Without the required details, we may be unable to respond usefully.
3. How your enquiry leaves this page
When you press “Request a corporate date”, the website sends the minimum form details to our secure enquiry service, stores one enquiry record and returns a reference number on the page. Repeating the same request does not intentionally create a second record. This is an enquiry only: it does not take payment, reserve a place or confirm a date.
If you choose WhatsApp or an email link instead, you continue in that service and decide what to share there.
4. Why we use it
- to respond to your request and check availability;
- to assess interest in and privately propose a suitable future Open Experience date;
- to discuss the suitable event format, group requirements and pricing;
- to prepare a proposal, site visit or booking at your request;
- to keep an accurate record of the enquiry and our response.
When you enquire for yourself, processing may be necessary to take steps at your request before a contract (GDPR Article 6(1)(b)). When you contact us for an organisation, we rely on our legitimate interests in responding to genuine business enquiries and preparing or managing a proposal (Article 6(1)(f)), after considering your rights and expectations. If a booking proceeds, we may also use records to perform the contract and meet applicable legal or accounting obligations.
5. Marketing
Submitting an event enquiry or Open Experience interest does not add you to a general marketing list. If we introduce optional marketing, it will have a separate and clear choice. You may object to direct marketing at any time.
We do not use this enquiry form for solely automated decisions or profiling.
6. Who can receive the information
Access is limited to authorised Multimaxx staff and service providers needed to operate our website, secure enquiry database, email, IT and enquiry process. Our website and enquiry service use Cloudflare infrastructure. Your own email provider or WhatsApp may process the information when you choose and use that service. We may share only the necessary details with an event or service partner when this is needed to answer or fulfil your request, or where the law requires it. We do not sell enquiry data.
If a service provider processes information outside the European Economic Area, we require an appropriate transfer safeguard, such as an adequacy decision or approved contractual protections.
7. How long we keep it
We keep an enquiry only while it has a genuine business or legal purpose. The retention period depends on whether the enquiry becomes a booking, whether follow-up remains reasonably expected, and whether accounting, legal or dispute records must be kept. Enquiries that no longer serve one of these purposes are deleted or anonymised through periodic review.
8. Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your personal data, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing.
To exercise a right, email info@prisonbreakmalta.com. We may need reasonable information to confirm your identity. You also have the right to complain to Malta’s Information and Data Protection Commissioner.
9. Security and changes
We use proportionate organisational and technical controls and limit access to people who need it for the stated purpose. We will update this notice if the form, purposes, providers or legal requirements materially change.