Privacy Policy
Criteria for
Processing Personal Data
St. Dorothy’s School shall ensure that personal data is processed
fairly and lawfully, and in accordance with good practice. Personal
data shall be collected solely for specific and legitimate purposes
and shall only be processed for such purposes that are compatible
with that for which the information is collected.
Only personal data
which is essential to the specific purposes of the processing, shall
be correctly processed. Personal data is not kept for a period
longer than is necessary, having regard to the purposes for which
they are processed.
Personal data shall be processed only:
a) Upon clear consent by the data subject;
b) Where St. Dorothy’s School needs to comply with a legal
obligation to which it is subject;
c) Where critical interests of the data subject need to be
safeguarded;
d) Where it is required for the performance of a contract to which
the data subject is party.
Subject Access Policy
Information held by St. Dorothy’s School may be provided in reply to
any subject access request. The requests shall be made in writing
and signed by the data subject. A request shall only be accepted if
made at reasonable intervals. St. Dorothy’s School guarantees that
data are kept in an accessible form to facilitate subject access.
Upon approval of the subject access request, St. Dorothy’s School
shall provide in writing:
a) Information about the data subject which is processed;
b) Where this information has been collected;
c) Purpose of the processing;
d) List of recipients to which information has been disclosed.
Governing Law
This privacy policy is exclusively regulated and governed by the
Laws of Malta.
Questions / Queries
Kindly contact us if you have any questions or queries about this
privacy policy.
|