Legal
Privacy Policy
How personal information submitted through this website is handled.
Draft policy — not yet formally adopted
1. Introduction
This policy explains what personal data this website collects, why, and the rights you have. It will be reviewed and approved by the foundation before being treated as final.
2. Data controller
The data controller is Malta Cultural Institute Foundation (VO/1805). Verified contact details are listed on the Organisation Information page.
3. Information we collect
When you use the contact form we collect your full name, email address, enquiry category, subject, message, your privacy acknowledgement and, only if you choose, your consent to receive updates. We do not ask for sensitive information — please do not include it in your message.
4. Server logs and cookies
Our hosting provider may process technical data such as IP address and browser type to deliver and secure the website. Cookies and browser storage are described in the Cookie Policy.
5. Purposes and legal bases
We use enquiry data to respond to you (legitimate interests, or steps prior to an arrangement you request). Optional updates are sent only with your consent, which you may withdraw at any time.
6. Minimisation, retention and security
We collect only what is needed to respond. Retention periods will be confirmed by the foundation. Submissions are stored with a hosting provider using access controls and encrypted connections.
7. Service providers and transfers
The website is operated using third-party hosting and database services. A full list of processors and any international transfers will be confirmed by the foundation.
8. Your rights
Under the GDPR you may have rights of access, rectification, erasure, restriction, objection and portability, depending on the circumstances. See the GDPR & Data Protection page.
9. Complaints
You may lodge a complaint with the competent supervisory authority in Malta, the Office of the Information and Data Protection Commissioner (IDPC).
10. Children and updates
This website is not directed at children. We may update this policy; the latest version will always appear here.
