Data Controller
The Malta Financial Services Authority (“MFSA”) is the controller of personal data in terms of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 96/46/EC (General Data Protection Regulation – “the GDPR”) and the Data Protection Act (Chapter 586 of the Laws of Malta – “DPA”).
The MFSA shall ensure that personal data is processed in accordance with the GDPR, the Data Protection Act (Chapter 586 of the Laws of Malta – the “DPA”) and any other relevant European Union (“EU”) and national law. The MFSA shall ensure inter alia the confidentiality and security of such personal data.
The MFSA is situated at Triq l-Imdina, Zone 1, Central Business District, Birkirkara, CBD 1010.
Purpose of Processing
The MFSA shall process your personal data in order to be able to provide you with training courses and in order to implement correct registration procedures in terms of law.
The MFSA shall also be processing personal data in relation to the provision and management of training courses to attendees, including the handling, review and resolution of complaints or concerns raised by participants in relation to training courses. This processing is carried out in line with Article 4(1)(gA) of the Malta Financial Services Authority Act (Chapter 330 of the Laws of Malta) and Article 6(1)(f) of the GDPR.
Categories of Personal Data Processed
The MFSA may process personal data upon registration for training courses including:
- Identification data including name, ID/passport details, date of birth;
- Contact details including address, email address, telephone number;
- Professional and employment information.
Recipients or Categories of Recipients of Personal Data
The MFSA shall process your personal data in relation to the provision of training services which shall be processed by MFSA employees.
For the purposes of Continued Professional Education or Continued Professional Development, personal data may be passed on to the Malta Accountancy Board or other similar institutions, as per the consent acquired from attendees upon registration.
Retention Period
The MFSA retains personal information contained within the enrolment form for 15 years from date of event.
Personal data contained in complaint forms, including complaints relating to discrimination or other grievances concerning training activities, are retained for a period of two (2) years following the closure of the complaint and the completion of any related review.
Individuals’ Rights
In terms of the GDPR and the DPA, individuals have the following rights, subject to any applicable legal restrictions:
- The right for erasure of personal data;
- The right for restriction of the processing;
- The right to object to the processing of the personal data;
- The right to data portability;
- The right to be informed;
- The right of access to their personal data;
- The right of rectification of inaccurate or incomplete personal data;
- The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
Requests to exercise these rights must be submitted in writing to the MFSA’s Data Controller on [email protected]. In addition, an individual has a right to lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta (IDPC).
Automated Decision-Making
For the purposes of the processing activities covered by the FSA Privacy notice, the MFSA does not take decisions concerning individuals based solely on automated processing, including profiling, which produce legal effects concerning them or similarly significantly affect them, without human involvement.
Contact Details of the Data Protection Officer
The Data Protection Officer may be contacted by:
- E-mail at [email protected];
- Phone on (356) 21441155;
- Postal mail at Malta Financial Services Authority, Triq l-Imdina, Zone 1, Central Business District, Birkirkara, CBD 1010.
