Privacy Policy

Last updated: 4 August 2026

1. Who we are

This website is operated by One Media & Events, through GEM — Gibraltar Executive Management and the OME Privé service.

Website: https://www.gemgibraltar.com/
Related website: https://www.onemediaevents.com/
General enquiries: office@gemgibraltar.com
Data-protection contact: denise@onemediaevents.com

For the purposes of applicable data-protection law, One Media & Events is the data controller responsible for the personal data collected through this website and through enquiries submitted to GEM.

2. The information we collect

Depending on how you use our website or services, we may collect:

  • Your name, job title and organisation

  • Email address and telephone number

  • Country of residence or location

  • Information provided through contact or enquiry forms

  • Proposed dates, group size and service requirements

  • Details relating to corporate events, private visits, conferences, off-sites or destination-management programmes

  • Records of correspondence, meetings and service requests

  • Billing and transaction information

  • Website usage data, including IP address, browser type, device information and pages visited

  • Marketing preferences

  • Information supplied by professional advisers, referring firms or business partners where they are authorised to provide it

We may also receive information from publicly available professional sources, event registrations, referrals, suppliers and business contacts.

3. Sensitive and confidential information

Because GEM provides private-client, executive and destination-management services, an enquiry may sometimes involve confidential information. Please do not send passport copies, bank details, payment-card information, health information or other highly sensitive personal data through the general website contact form. Where sensitive information is genuinely required, we will arrange an appropriate and more secure method of collection.

We will only process special-category personal data where there is a lawful basis to do so, including where you have provided explicit consent or where processing is necessary to protect your vital interests.

4. How we use your information

We may use personal data to:

  • Respond to enquiries

  • Assess whether GEM is able to assist

  • Prepare proposals, programmes and itineraries

  • Coordinate accommodation, venues, transport, hospitality and related services

  • Arrange meetings and introductions requested by the client

  • Manage corporate events, conferences, off-sites, incentive programmes and private visits

  • Communicate with suppliers, venues and professional advisers

  • Manage bookings, payments and invoices

  • Maintain client and partner relationships

  • Follow up after a visit, event or introduction

  • Improve our website and services

  • Send relevant business or marketing communications where permitted

  • Comply with legal, tax, accounting, regulatory and security obligations

  • Establish, exercise or defend legal claims

  • Prevent fraud, misuse or unlawful activity

We will not sell personal data.

5. Our lawful bases for processing

Depending on the circumstances, we rely on one or more of the following lawful bases:

Contract

Where processing is necessary to provide a proposal, organise a service, fulfil a booking or perform an agreement with you.

Legitimate interests

Where processing is reasonably necessary for our business operations, including:

  • Responding to business enquiries

  • Managing client and supplier relationships

  • Maintaining records

  • Developing our services

  • Protecting our business and website

  • Providing relevant information to existing professional contacts

We will consider your rights and interests before relying on legitimate interests.

Consent

Where you have actively agreed to receive marketing communications or where consent is otherwise required. You may withdraw consent at any time.

Legal obligation

Where we need to keep information or disclose it in order to comply with applicable law, taxation, accounting, court orders or regulatory requirements.

Vital interests

In rare circumstances, where processing is necessary to protect someone’s life or physical safety.

6. Introductions and referrals

A central part of GEM’s service is connecting clients with appropriate businesses, advisers, venues, institutions and service providers. We will only share personal information for an introduction where:

  • You have asked us to make the introduction

  • It is necessary to deliver an agreed service

  • You have otherwise authorised the disclosure

  • There is another lawful basis for doing so

The receiving organisation may become an independent data controller and will process your personal data under its own privacy policy.

GEM may have commercial, referral or commission arrangements with selected providers. Such arrangements do not remove the provider’s responsibility to act lawfully, independently and in the client’s interests where applicable. GEM does not provide legal, tax, investment, banking or regulated financial advice.

7. Who we share information with

Where necessary, information may be shared with:

  • OME and GEM team members

  • Venues, hotels, restaurants and caterers

  • Transport, chauffeur and tour providers

  • Event-production and hospitality suppliers

  • Property and relocation providers

  • Professional advisers

  • Banks, corporate-service providers and wealth-management firms where requested

  • Government departments or public bodies where a meeting or service has been requested

  • Website, email, cloud-storage and IT providers

  • Payment processors

  • Marketing and newsletter platforms

  • Accountants, lawyers, insurers and other professional advisers

  • Law-enforcement, regulatory or public authorities where legally required

We only share the information reasonably necessary for the relevant purpose.

8. Professional referrers and partner clients

GEM may receive enquiries from banks, law firms, family offices, corporate-service providers, DMCs, event agencies and other professional referrers.

Where a referring organisation provides personal data, it is responsible for ensuring that it has an appropriate lawful basis to share that data with us. Depending on the arrangement, GEM and the referring organisation may act as separate data controllers or under agreed data-processing terms.

9. Marketing communications

We may send relevant news, event information, service updates or business communications where:

  • You have consented

  • You are an existing client or professional contact and the communication is relevant to our relationship

  • We otherwise have a lawful basis to contact you

You may unsubscribe at any time by using the unsubscribe link in an email or contacting us directly. Withdrawing from marketing does not prevent us from contacting you about an active booking, enquiry, event or contractual matter.

10. Cookies and website analytics

This website may use cookies and similar technologies to:

  • Operate essential website functions

  • Remember preferences

  • Understand website usage

  • Measure traffic and performance

  • Support embedded content

  • Improve the user experience

Non-essential analytics or marketing cookies should only be activated in accordance with the choices made through the website cookie banner. Please see our separate Cookie Policy for details of the cookies and services currently in use.

11. Website and service providers

Depending on the configuration of the website, data may be processed by providers including:

  • Squarespace

  • Google Workspace

  • Google Analytics

  • Mailchimp or another email-marketing provider

  • Payment processors

  • Social-media platforms

  • Event-ticketing or registration platforms

Only include providers in this policy that are actually being used. These providers operate under their own privacy policies and contractual terms.

12. International transfers

Some of our technology providers, professional partners or service providers may process data outside Gibraltar.Where personal data is transferred internationally, we will take reasonable steps to ensure that an appropriate safeguard or lawful transfer mechanism is in place, such as:

  • An adequacy decision

  • Approved contractual clauses

  • Another recognised legal safeguard

  • Your explicit instruction or consent where legally appropriate

13. Data retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.

Typical retention periods may include:

  • General enquiries: up to two years after the final meaningful contact

  • Client, event and booking records: generally six years after completion, where required for contractual, tax, accounting or legal purposes

  • Supplier and partner records: for the duration of the relationship and a reasonable period afterwards

  • Marketing records: until you unsubscribe or we determine that the information is no longer relevant

  • Complaints or legal claims: for as long as necessary to resolve the matter and meet legal requirements

We may retain limited information where necessary to record an unsubscribe request or protect our legal rights.

14. Information security

We use reasonable organisational and technical measures to protect personal data from:

  • Unauthorised access

  • Accidental loss

  • Misuse

  • Alteration

  • Disclosure

  • Destruction

Access is limited to people who need the information for legitimate business purposes. No method of online transmission is completely secure. Please avoid sending sensitive information through ordinary email or general contact forms unless agreed with us.

15. Your rights

Subject to applicable law, you may have the right to:

  • Request access to your personal data

  • Ask us to correct inaccurate or incomplete information

  • Request deletion of your personal data

  • Ask us to restrict processing

  • Object to processing based on legitimate interests

  • Withdraw consent

  • Request data portability

  • Object to direct marketing

  • Lodge a complaint with the supervisory authority

Some rights are subject to legal exceptions. For example, we may need to retain certain information for tax, contractual, regulatory or legal reasons.

To exercise a right, contact: denise@onemediaevents.com

We may ask for reasonable information to verify your identity before responding.

16. Complaints

Please contact us first so that we have the opportunity to address your concern. You may also complain to the Gibraltar Regulatory Authority, which is the supervisory authority for data protection in Gibraltar.

Gibraltar Regulatory Authority
Information Rights Division
2nd Floor, Eurotowers 4
1 Europort Road
Gibraltar

Email: privacy@gra.gi
Telephone: +350 200 74636

17. Third-party websites and embedded content

Our website may link to or display content from third-party websites, including maps, videos, social-media pages and booking platforms. Those organisations may collect information, place cookies or monitor your interaction with their content. We do not control their privacy practices and recommend reviewing their privacy notices.

18. Children

Our services are not generally directed at children.

Where personal data relating to a child is required for a family booking, event or travel programme, it should be provided by a parent, guardian or other properly authorised adult. We will only collect information reasonably necessary to provide the requested service.

19. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, website, technology or legal obligations. The latest version will always be published on this page, together with the date of the most recent update.

20. Contact us

For questions about this Privacy Policy or our handling of personal data, contact:

One Media & Events / GEM — Gibraltar Executive Management
Email: team@gemgibraltar.com
Data-protection enquiries: denise@onemediaevents.com
Website: https://www.gemgibraltar.com/
Related website: https://www.onemediaevents.com/