Skip to content
Malta Cultural InstituteFoundation

Legal

Privacy Policy

How personal information submitted through this website is handled.

Draft policy — not yet formally adopted

1. Introduction

This policy explains what personal data this website collects, why, and the rights you have. It will be reviewed and approved by the foundation before being treated as final.

2. Data controller

The data controller is Malta Cultural Institute Foundation (VO/1805). Verified contact details are listed on the Organisation Information page.

3. Information we collect

When you use the contact form we collect your full name, email address, enquiry category, subject, message, your privacy acknowledgement and, only if you choose, your consent to receive updates. We do not ask for sensitive information — please do not include it in your message.

4. Server logs and cookies

Our hosting provider may process technical data such as IP address and browser type to deliver and secure the website. Cookies and browser storage are described in the Cookie Policy.

5. Purposes and legal bases

We use enquiry data to respond to you (legitimate interests, or steps prior to an arrangement you request). Optional updates are sent only with your consent, which you may withdraw at any time.

6. Minimisation, retention and security

We collect only what is needed to respond. Retention periods will be confirmed by the foundation. Submissions are stored with a hosting provider using access controls and encrypted connections.

7. Service providers and transfers

The website is operated using third-party hosting and database services. A full list of processors and any international transfers will be confirmed by the foundation.

8. Your rights

Under the GDPR you may have rights of access, rectification, erasure, restriction, objection and portability, depending on the circumstances. See the GDPR & Data Protection page.

9. Complaints

You may lodge a complaint with the competent supervisory authority in Malta, the Office of the Information and Data Protection Commissioner (IDPC).

10. Children and updates

This website is not directed at children. We may update this policy; the latest version will always appear here.