Privacy Policy

Last updated: 06/07/2026

This Notice explains how we process the personal data of visitors to thebridgettmt.com (the “Site”), in accordance with Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act (Chapter 586 of the Laws of Malta).

This Site is informational: it presents The Bridge’s activities and the group’s training programmes, with links to the dedicated site for each programme. It does not collect data through contact forms and does not use profiling or advertising tools.

1. Who processes your data (Data Controller)

The Bridge – The Third Millennium Teaching Ltd
Registered office: CMS House, Third Floor, St. Peter’s Street, San Gwann SGN 2310, Malta
Registration number: C116263
VAT number: MT 3292-4705
Privacy email: privacy@thebridgettmt.com

We have not appointed a Data Protection Officer (DPO), as we are not legally required to do so.

2. What data is processed

Browsing data. The server hosting the Site automatically records technical information: your IP address, browser and device, date and time of the visit, pages viewed. This is used only for the Site’s operation, security, and defence against abuse.

Technical cookies. The Site uses only technical cookies, necessary for its operation. It does not use profiling cookies, statistical tools, or advertising pixels. Fonts are hosted on our own servers.

Video (Vimeo). Some pages embed videos hosted on Vimeo, which only start if you choose to press play. If you start playback, Vimeo may receive your IP address and set technical cookies needed for playback. Vimeo is provided by Vimeo Inc. (USA); the transfer is covered by the safeguards provided under the GDPR.

3. Why we process it, and on what legal basis

Operating the Site, security, abuse prevention → Legitimate interest (Art. 6.1.f)
Complying with legal obligations or authority requests → Legal obligation (Art. 6.1.c)
Playback of embedded videos, at your choice → Legitimate interest (Art. 6.1.f)

4. Who else sees your data

Browsing data passes through our hosting provider, which processes it on our behalf (Art. 28 GDPR). We do not sell, disclose, or share your data with third parties for commercial or advertising purposes. We may disclose it to competent authorities if required by law.

5. Links to other sites

This Site presents and links to the sites of the group’s individual training programmes (including cylacademy.com and the sites dedicated to each programme). By clicking these links you leave this Site: from that point your data is processed according to the destination site’s own notice, which we invite you to consult.

6. Your data stays within the European Union

The Data Controller is based in Malta (EU). The only transfer to a third country concerns Vimeo (USA), covered by the safeguards provided under the GDPR. Beyond this, we do not transfer personal data outside the European Economic Area.

7. How long we keep your data

Server logs (with IP addresses) are kept for no longer than 12 months. Technical cookies last for the duration of the session or as specified by your browser.

8. Are you required to provide anything?

No. The Site does not ask you to provide data. Browsing information is collected automatically, as on any website.

9. Your rights

You may at any time ask us to access, correct, delete, or restrict the use of your data, object to processing based on legitimate interest, and obtain data portability. Where processing is based on consent, you may withdraw it at any time. Write to us at privacy@thebridgettmt.com: we will respond within one month.

As the Data Controller is based in Malta, the competent authority is the Information and Data Protection Commissioner (IDPC) — idpc.org.mt. You may also contact the data protection authority of the country where you live.

10. How we protect your data

We adopt appropriate technical and organisational measures to protect data from unauthorised access, loss, or misuse. No system is 100% secure, but we work to make it as secure as possible.

11. If this Notice changes

We may update it over time. Changes will be published on this page; the “last updated” date always indicates the current version.

12. AI Act Transparency Notice (EU AI Act)

In accordance with Regulation (EU) 2024/1689, thebridgettmt.com informs users that some support processes, graphic layout elements, or educational materials may make use of generative Artificial Intelligence tools. All textual, educational, and training content on our site and in our programmes is fully reviewed, verified, and approved by our team before publication. Any audio or video materials created using voice synthesis or digital avatars are clearly indicated, in compliance with legal requirements.

13. Contact

For any questions: privacy@thebridgettmt.com