Table of Contents
Privacy Policy
Last updated: June 2026
1. Introduction
Education Malta (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website https://educationmalta.org (the “Website”) or otherwise interact with us, and it sets out your rights in relation to your personal data.
We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta) and applicable subsidiary legislation.
Please read this Policy carefully. By using our Website or submitting your information to us, you acknowledge that you have read and understood this Policy.
2. Who we are (Data Controller)
Education Malta is a not-for-profit foundation established to promote the internationalisation of education in and from Malta. To attract foreign educational entities to establish a presence in Malta. Also, to attract international students to pursue studies at Universities and Further and Higher Institutions in Malta. It is a public-private partnership between the Ministry for Education and Sport and the Malta Chamber of Commerce, Enterprise and Industry.
The data controller responsible for your personal data is:
Education Malta Tübingen Centre, 19A Mosta Technopark, Il-Mosta MST 3000, Malta, LPF-240 Email: info@educationmalta.org Telephone: +356 2143 8206
If you have any questions about this Policy or how we handle your personal data, please contact us using the details above or our Data Protection Officer (see Section 13).
3. The personal data we collect
We may collect and process the following categories of personal data:
Information you provide to us directly — for example, when you complete the contact form on our Website, register interest in our programmes or events, or otherwise correspond with us:
- Name
- Email address
- Contact (telephone) number
- The content of any message or enquiry you send us
- Any other information you choose to provide in your communications with us
Information we collect automatically when you visit the Website:
- IP address and approximate location
- Browser type and version, operating system, and device information
- Pages visited, time and date of visit, time spent on pages, and referring website
- Cookies and similar technologies (see Section 7)
We do not intentionally collect special categories of personal data (such as health, religious, or political data) through the Website. Please do not submit such information through our contact form.
4. How we use your personal data and our legal bases
Under the GDPR we must have a lawful basis for processing your personal data. We rely on the following bases, depending on the purpose:
| Purpose | Legal basis |
| Responding to enquiries submitted via the contact form and managing our correspondence with you | Our legitimate interests in responding to enquiries and operating our organisation; or, where applicable, steps taken at your request prior to entering into an arrangement |
| Providing information about our programmes, events, and the education sector in Malta where you have requested it | Consent, and/or legitimate interests |
| Operating, maintaining, and securing the Website | Legitimate interests in ensuring our Website functions correctly and securely |
| Analysing Website usage to improve our services | Consent (for non-essential cookies) and/or legitimate interests |
| Complying with legal and regulatory obligations | Compliance with a legal obligation |
| Pursuing our remit of promoting and internationalising Malta’s education sector and attracting foreign educational entities | Legitimate interests and/or performance of a task carried out in the public interest |
Where we rely on consent, you may withdraw it at any time (see Section 9). Where we rely on legitimate interests, we have assessed that these interests are not overridden by your rights and freedoms.
5. Marketing communications
If you have consented or where otherwise permitted by law, we may send you information about our activities, programmes, and events. You can opt out at any time by clicking the “unsubscribe” link in any email or by contacting us at info@educationmalta.org. We will not sell your personal data to third parties for their marketing purposes.
6. How we share your personal data
We do not sell your personal data. We may share it with:
- Service providers and processors who perform services on our behalf — for example, website hosting, IT support, email, and analytics providers — who are bound by contract to process personal data only on our instructions and to keep it secure.
- Public authorities, regulators, or law enforcement, where we are legally required to do so or to protect our legal rights.
- Partner education institutions or government bodies, where relevant to your enquiry and where a lawful basis applies.
- Professional advisers such as lawyers, auditors, and insurers, where necessary.
7. Cookies and similar technologies
Our Website uses cookies and similar technologies to function correctly, to remember your preferences, and to understand how the Website is used. Our Website is built on WordPress and may set cookies required for its operation, as well as cookies from embedded third-party services such as Google Maps (used to display our location) and any web fonts or analytics tools we use.
Cookies are categorised as:
- Strictly necessary cookies — required for the Website to function; these do not require consent.
- Functional, analytics, and other non-essential cookies — set only with your consent.
You can manage or withdraw your cookie consent at any time through our cookie banner or settings, and you can control cookies through your browser settings. Blocking some cookies may affect Website functionality.
| Cookie Id | Domain | Duration | |
|---|---|---|---|
| __cf_bm | .educationmalta.org | 1 hour |
| Description |
|---|
| This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
| Cookie Id | Domain | Duration | |
|---|---|---|---|
| rc::a | google.com | Never Expires |
| Description |
|---|
| This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks. |
| Cookie Id | Domain | Duration | |
|---|---|---|---|
| wpEmojiSettingsSupports | educationmalta.org | session |
| Description |
|---|
| WordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user’s browser can display emojis properly. |
| Cookie Id | Domain | Duration | |
|---|---|---|---|
| rc::c | google.com | session |
| Description |
|---|
| This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks. |
8. International transfers of personal data
Some of our service providers may be located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure an appropriate level of protection through legally recognised safeguards, such as an adequacy decision of the European Commission or the use of European Commission–approved Standard Contractual Clauses. You may contact us for more information on the safeguards in place.
9. Your rights
Under the GDPR, you have the following rights in relation to your personal data:
- Right of access — to obtain confirmation of, and a copy of, the personal data we hold about you.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure (“right to be forgotten”) — to have your data deleted in certain circumstances.
- Right to restriction — to limit how we process your data in certain circumstances.
- Right to data portability — to receive your data in a structured, commonly used, machine-readable format.
- Right to object — to object to processing based on legitimate interests or to direct marketing.
- Right to withdraw consent — where processing is based on consent, at any time, without affecting prior processing.
- Rights related to automated decision-making — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, please contact us at info@educationmalta.org. We will respond within one month, as required by law. There is normally no charge, and we may need to verify your identity before acting on a request.
10. Right to lodge a complaint
If you are concerned about how we handle your personal data, we encourage you to contact us first. You also have the right to lodge a complaint with the Maltese supervisory authority:
Information and Data Protection Commissioner (IDPC) Floor 2, Airways House, High Street, Sliema SLM 1549, Malta Telephone: +356 2328 7100 Email: idpc.info@idpc.org.mt Website: https://idpc.org.mt
11. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Contact-form enquiries are generally retained for 12 months unless a longer relationship or legal obligation requires otherwise, after which they are securely deleted or anonymised.
12. How we protect your personal data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These include access controls, secure hosting, and encryption in transit (HTTPS). While we take reasonable steps to protect your information, no transmission over the internet can be guaranteed to be completely secure.
13. Data Protection Officer
Data Protection Officer Education Malta Email: liane.p.castillo@educationmalta.org
14. Children’s privacy
Our Website is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
15. Third-party links
Our Website may contain links to third-party websites or services that we do not operate. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top indicates when it was last revised. We encourage you to review this page periodically. Material changes will be communicated where appropriate.
17. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Education Malta Tübingen Centre, 19A Mosta Technopark, Il-Mosta MST 3000, Malta Email: info@educationmalta.org Telephone: +356 2143 8206