Last updated: 12 August 2026
This Policy explains how we process the personal data of visitors to onisonevolution.com (the “Site”), under Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act (Chapter 586 of the Laws of Malta).
This Site presents the ONISON Evolution School training programme and lets you request enrolment by filling in an online form.
1. Who processes your data (Controller)
The Bridge – The Third Millennium Teaching Ltd, with registered office at CMS House, Third Floor, St. Peter’s Street, San Gwann SGN 2310 (Malta), and TAX ID MT 3292-4705.
Privacy email: privacy@thebridgettmt.com
We have not appointed a Data Protection Officer (DPO), as we are not required to by law.
2. What data we process
Browsing data. The server hosting the Site automatically logs technical information: IP address, browser and device, date and time of visit, pages viewed. This is used only to run the Site, keep it secure and prevent abuse.
Technical cookies. The Site uses technical cookies necessary for it to function.
Data provided via the enrolment request form. On the “How to access” page you can fill in a form to request to be contacted about enrolling in the programme. The data you choose to provide (e.g. name, email and phone number) is collected and processed through HubSpot, the contact management platform we use.
3. Why we process it, and on what legal basis
- Running the Site, security, abuse prevention → Legitimate interest (Art. 6(1)(f))
- Handling your enrolment request and contacting you → Steps taken at your request prior to entering into a contract (Art. 6(1)(b))
- Complying with legal obligations or authority requests → Legal obligation (Art. 6(1)(c))
4. Who else sees your data
Browsing data passes through our hosting provider (SiteGround), which processes it on our behalf (Art. 28 GDPR). Data you submit through the enrolment form is processed by HubSpot Ireland Limited, which handles it as our processor. We do not sell, disclose or transfer your data to third parties for commercial or advertising purposes. We may share it with competent authorities where required by law.
5. Transfer of data outside the EU
The Controller is based in Malta (EU). HubSpot Ireland Limited processes data from Ireland (EU); any transfers to the United States by HubSpot are covered by the safeguards provided under the GDPR (standard contractual clauses). Beyond this, we do not transfer personal data outside the European Economic Area.
6. Links to other sites
The Site contains a link to thebridgecart.com to purchase the book. Clicking that link takes you away from this Site: from that point your data is handled under that page’s own privacy policy, which we invite you to read.
7. How long we keep data
Server logs (including IPs) are kept for no more than 12 months. Data provided through the enrolment form is kept for as long as needed to handle your request and, if a relationship with the school follows, for the duration of that relationship plus legally required periods; if no relationship follows, we delete or anonymise it after a reasonable period, unless you ask us to delete it sooner.
8. Are you required to give us anything?
No. The Site does not require you to provide data simply to browse it. If you want to request enrolment, the form data (at least a name and one contact detail) is needed so we can get back to you.
9. Your rights
You can at any time ask us to access, correct, delete, or restrict the use of your data, object to processing based on legitimate interest, and obtain data portability. Where processing is based on consent, you can withdraw it at any time. Write to us at privacy@thebridgettmt.com: we will respond within one month.
As the Controller is based in Malta, the competent authority is the Information and Data Protection Commissioner (IDPC) — idpc.org.mt. You can also contact the authority of your own country: if you live in Italy, the Garante (www.garanteprivacy.it); in Spain, the AEPD (www.aepd.es); in France, the CNIL (www.cnil.fr); in the UK, the ICO (www.ico.org.uk).
10. How we protect data
We adopt appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse.
11. AI Transparency Notice (EU AI Act)
In accordance with Regulation (EU) 2024/1689, onisonevolution.com informs users that certain support processes, graphic layout elements or teaching materials may make use of generative Artificial Intelligence tools. All textual, educational and training content on our site and in our programmes is fully reviewed, checked and approved by our team before publication. Any audio or video materials created using voice synthesis or digital avatars are duly flagged in compliance with legal requirements.
12. If this Policy changes
We may update it over time. Changes will be published on this page; the “last updated” date always indicates the version in force.
13. Contact
For any question: privacy@thebridgettmt.com