Privacy policy
This site has no analytics, no tracking pixels, no advertising and no forms. What follows is the short, complete account of what is left — written under Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679.
Controller
Tobias Liauw, trading as Liauw Media
28, Triq Il-Knisja
MSD 1534 Msida, Malta
hello@liauw-media.com
No data protection officer has been appointed. The criteria in Article 37(1) GDPR are not met: this is a single-person business, data processing is not its core activity, it does not process special-category data at scale, and it carries out no systematic monitoring of individuals.
Server logs
Every request to this site is written to the web server's access log. Each entry contains your IP address, the date and time, the resource requested, the HTTP status, the referring page where the browser sends one, and your browser's user-agent string.
Purpose and legal basis. Operating the site, diagnosing faults and defending it against abuse. The legal basis is Article 6(1)(f) GDPR — our legitimate interest in a site that works and is not being attacked. Logs are not used to profile visitors and are not combined with any other source.
Retention. Log entries are kept for 14 days and then rotated out automatically.
The server is operated on our behalf by our hosting provider, which acts as a processor under Article 28 GDPR. The server is located in the European Union.
Cookies
Two, both strictly necessary. That is why you are not asked to consent to anything — there is nothing optional to consent to.
- liauw_media_session
- Identifies your browser's session so the site can serve pages consistently. Expires when the session ends.
- XSRF-TOKEN
- A security token that protects against cross-site request forgery. Expires when the session ends.
Both are set by this site, are read by nobody else, and are technically required to deliver the service you requested. Storage of that kind does not require consent. There are no analytics, preference or advertising cookies on this site, and no third party sets a cookie here.
Resources loaded from elsewhere
Two files on this page are fetched from other servers. To fetch them, your browser connects to those servers directly, which means your IP address reaches them. Nothing else is sent, and neither sets a cookie.
- fonts.bunny.net
- Serves the Inter typeface used throughout the site. Operated by BunnyWay d.o.o., Slovenia — inside the EU.
- cdn.jsdelivr.net
- Serves Alpine.js, the small script behind the mobile navigation menu. A public open-source content delivery network with servers worldwide, so this request may be answered from outside the EU.
Legal basis. Article 6(1)(f) GDPR — presenting the site as designed and keeping its interactive elements working. Both files could equally be served from this site's own server, and moving them here is on our list; until that is done, this section describes what actually happens.
If you email us
There is no contact form on this site. The contact links open your own mail program, so the message travels from your mail provider to ours — this website does not see it and stores nothing.
What we then hold. Your name, your email address and whatever you chose to write. The legal basis is Article 6(1)(b) GDPR where you are asking about an engagement, and otherwise Article 6(1)(f) — our legitimate interest in answering business correspondence.
Retention. Correspondence that leads to an engagement is kept for as long as commercial and tax law requires us to keep it. Enquiries that lead nowhere are deleted once it is clear they will not be taken further.
Your rights
Under the GDPR you have the right to:
- 15ask what personal data we hold about you and get a copy
- 16have inaccurate data corrected
- 17have data erased, where no legal duty requires us to keep it
- 18have processing restricted while a dispute is resolved
- 20receive data you gave us in a portable, machine-readable form
- 21object to processing we base on legitimate interest
Write to hello@liauw-media.com. We answer within one month, as Article 12(3) requires. Exercising these rights is free and costs you nothing.
Complaints
Under Article 77 GDPR you may lodge a complaint with a supervisory authority. The competent authority in Malta is:
Office of the Information and Data Protection Commissioner
Floor 2, Airways House, Triq il-Kbira
Tas-Sliema SLM 1549, Malta
+356 2328 7100
idpc.org.mt
What does not happen here
No automated decision-making or profiling within the meaning of Article 22 GDPR. No newsletter, no mailing list, no advertising. No social media plugins or embedded players. No analytics of any kind. No accounts and no logins on this site.
Providing personal data is neither a statutory nor a contractual requirement. You can read this entire site without providing any.
Last updated 2026-09-12