Privacy Policy

 

By visiting the portal https://eforms.identita.gov.mt/  (the “Portal”) and completing the relevant forms, together with any relevant supporting documentation (the “Application”), you (“You”, the “User” or the “Data Subject”) provide Identità (“the Agency”, “we” or “us”) with personal data. We commit to processing the personal data you submit through the Website (the “Personal Data”) in a highly responsible manner and in observance of the applicable legislation. The aim of this policy (the “Policy”) is to comply with our transparency and fairness obligations under the General Data Protection Regulation (“GDPR”) and to inform you, as the user, about who will be processing your data, for what purpose, for how long it will be kept, with whom it will be shared and about your rights as a data subject under GDPR.

 

1. Data Controller and Data Protection Office

 

Identità is the data controller, meaning the entity that defines the purposes and means for collecting and processing your Personal Data through this Portal. We are an Agency pertaining to the Government of Malta and we deliver public services related to identity management, namely, Identity Cards, Passports, Visas, Expatriate affairs, and Public Registry in Malta. Our Data Protection Officer is the individual responsible to attend any query related to this Policy and in general to data protection, and may be contacted at:


Postal Address:
Data Protection Officer
Identità 
Valley Road
Msida - MSD9020
Malta


Email address: [email protected]

 

2. Purposes and legal basis
 

i. Visiting the Portal

When you visit the Portal, by logging in through your e-ID or as a Guest User, we collect your Personal Data in order to allow you to make use of the Portal, improve the content, functionality, and services we offer you through the Portal, and better understand our categories of users. Personal Data collected when you visit the Portal includes cookies. Cookies are small files that are placed on your device in order to help the Portal keep track of your visits and activity. For ease of reference, we have created a dedicated Cookie Policy accessed through this same Portal. 

The legal basis for processing data is the legitimate interest pursued by Identità. A balance test was conducted in this regard. The legitimate interest is not overridden by the interests or fundamental rights and freedoms of the Data Subject which requires the protection of Personal Data.

ii. Submitting an Online Application

When you submit the required documents, through the Online Payment Services Portal (“PSP”), Identità collects Personal Data in order to deliver a public service that is receiving and processing the applications and to populate its databases. The legal basis for processing is the performance of a task in the public interest pursued by Identità. The submission of an online application form may include details pertaining to other individuals, other than the User. Identità has assessed that, in said cases, informing these individuals proves impossible and would involve a disproportionate effort. Identità will still take appropriate measures to protect the rights, freedoms, and legitimate interests of these individuals.

 

3. Recipients of Personal Data

 

i. The recipients of Personal Data are:

  • Advanced Telecommunications Systems Limited, which is in charge of the design, hosting, and technical maintenance of the Portal;
  • Identità’s officers who are responsible for the processing and assessing of the Application;
  • Other Government Agencies and Departments which may be involved in the process; 

Transfers of Personal Data will be done in line with applicable laws, and arrangements are in place to guarantee the confidentiality, integrity, and availability of Personal Data within these transfers.

Under certain conditions outlined in law, we may disclose your information to third parties (such as other Government entities or law enforcement authorities) if necessary, and proportionate for lawful and specific purposes.

Personal Data is not transferred to third countries or international organizations.

ii. Storage periods

Personal data is retained as follows:

  • Personal Data collected whilst visiting the Portalis retained as established in the Cookie Policy;
  • Personal Data collected when you submit an Application is retained in line with the retention periods adopted by Identità;

iii. Your Rights

You have a number of rights under data protection legislation, which are listed below and may be invoked by contacting our Data Protection Officer.

  • Access

You have a number of rights under data protection legislation, which are listed below and may be invoked by contacting our Data Protection Officer.

  • Rectification

You have the right to obtain from us without undue delay the rectification of inaccurate Personal Data concerning yourself. Taking into account the purposes of the processing, you shall have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.

  • Erasure

In certain cases, you may have the right to have your Personal Data deleted.

  • Restriction

In case any of the conditions of the law apply, you have the right to restrict the processing of your Personal Data.

  • Data Portability

You do not have the right to port your Personal Data because we do not process it on the basis of your consent or on the basis of a contract. However, you can always request to access your Personal Data.

  • Object

You have the right to object to the processing of Personal Data at any time, on grounds relating to your particular situation. In the said case, we will no longer process your Personal Data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

  • Complaint

You can lodge a complaint with the supervisory authority of the Member State of your habitual residence or place of work, or of an alleged infringement of data protection legislation.

  • Automated decision-making/profiling

Personal Data is not the object of automated decision-making or profiling.

 

4. Changes to this Privacy Policy

 

This Policy is subject to change.

Please visit this page regularly to be aware of any changes which may occur from time to time.

Last updated date: 15/04/2024

i
×
Text:
Links:
Colour Scheme: