GDPR & Personal data

Privacy policy

Last updated: May 2026

1. Introduction

Mira is committed to protecting the privacy of all users of the Platform at www.mira-estate.eu. This Privacy Policy explains what personal data Mira collects, how it is used, stored and protected, and the rights available to users under applicable data protection law, including the General Data Protection Regulation (GDPR) and the laws of Malta. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for the personal data collected through the Platform is Mira, reachable at:

3. Data We Collect

3.1 Data provided directly by users

When you register, contact us or use the Platform, we may collect:

  • Full name
  • Email address
  • Phone number
  • Type of user (buyer, renter, agency, developer, private owner)
  • Property preferences (location, budget, type of property)

3.2 Data collected automatically

When you browse the Platform, we automatically collect:

  • IP address
  • Browser type and version
  • Pages visited and time spent on the Platform
  • Referring website
  • Device type (desktop, mobile, tablet)

3.3 Data provided by partner agencies

Agencies and developers who list properties on Mira provide us with:

  • Agency name and contact details
  • Property information (descriptions, photos, prices, location)
  • XML feed data where applicable

4. How We Use Your Data

Mira uses the personal data collected for the following purposes:

  • To operate and improve the Platform and its features
  • To allow users to search for and contact property owners or agencies
  • To manage agency and developer accounts and subscriptions
  • To send transactional communications (account confirmations, subscription updates)
  • To send marketing communications, where you have given your consent
  • To comply with our legal obligations under Maltese and EU law
  • To detect and prevent fraud or misuse of the Platform

5. Legal Basis for Processing

Mira processes your personal data on the following legal bases:

  • Contract performance: to provide the services you have requested
  • Legitimate interests: to improve the Platform and ensure its security
  • Legal obligation: to comply with applicable laws and regulations
  • Consent: for marketing communications and non-essential cookies

6. Cookies

The Platform uses cookies and similar tracking technologies to enhance your browsing experience and analyse Platform usage. Cookies used include:

  • Essential cookies: necessary for the Platform to function correctly
  • Analytics cookies: to understand how users interact with the Platform (e.g. Google Analytics)
  • Preference cookies: to remember your settings and preferences

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

7. Data Sharing

Mira does not sell your personal data to third parties. We may share your data with:

  • Partner agencies and developers: only to the extent necessary to facilitate property enquiries you initiate
  • Service providers: including hosting providers, analytics tools and payment processors, who process data on our behalf under strict confidentiality obligations
  • Legal authorities: where required by law or to protect the rights and safety of Mira or its users

8. Data Retention

Mira retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. Account data is retained for the duration of your account and for a period of 3 years following account closure, unless a longer retention period is required by law.

9. Your Rights

Under the GDPR and applicable Maltese law, you have the following rights regarding your personal data:

  • Right of access: to obtain a copy of the personal data we hold about you
  • Right to rectification: to request correction of inaccurate or incomplete data
  • Right to erasure: to request deletion of your personal data in certain circumstances
  • Right to restriction: to request that we limit how we use your data
  • Right to data portability: to receive your data in a structured, machine-readable format
  • Right to object: to object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at business@mira-estate.eu. We will respond to your request within 30 days.

10. Data Security

Mira implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include secure server infrastructure, encrypted data transmission (HTTPS), and restricted access to personal data.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Mira will notify the relevant supervisory authority and affected users in accordance with applicable law.

11. International Transfers

Your personal data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA, Mira ensures that appropriate safeguards are in place in accordance with GDPR requirements.

12. Supervisory Authority

You have the right to lodge a complaint with the Maltese data protection supervisory authority, the Information and Data Protection Commissioner (IDPC), if you believe that the processing of your personal data infringes applicable data protection law.

13. Changes to This Policy

Mira reserves the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated date. We encourage you to review this Policy periodically. Continued use of the Platform following any changes constitutes acceptance of the updated Policy.