The General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act (Cap 586) regulate the processing of personal data whether held electronically or in manual form. Arts Council Malta is set to fully comply with the Data Protection Principles as set out in such data protection legislation.

Purposes for collecting data

Arts Council Malta collects and processes information to carry out its obligations in accordance with present legislation. All data is collected and processed in accordance with Data Protection Legislation and Arts Council Malta ACT – ACT No. XV of 2015.

Recipients of data

Personal Information is accessed by the employees who are assigned to carry out the functions of Arts Council Malta. Personal Data will be disclosed to ACM staff members responsible for processing fund applications. Disclosure can also be made to third parties but only as authorized by law. In the case of Kultura.mt, the personal data will be disclosed for other purposes including marketing of events by the Public Cultural Organisations falling under Act XV of 2015.

Your rights

You are entitled to know, free of charge, what type of information Arts Council Malta holds and processes about you and why, who has access to it, how it is held and kept up to date, for how long it is kept, and what the Unit is doing to comply with data protection legislation.

The GDPR establishes a formal procedure for dealing with data subject access requests. All data subjects have the right to access any personal information kept about them by Arts Council Malta either on computer or in manual files. Requests for access to personal information by data subjects are to be made in writing and sent to the Data Controller, Executive Chairman of Arts Council Malta Mr Albert Marshall. Your identification details such as ID number, name and surname have to be submitted with the request for access. In case we encounter identification difficulties, you may be required to present an identification document.

Arts Council Malta aims to comply as quickly as possible with requests for access to personal information and will ensure that it is provided within a reasonable timeframe and in any case not later than one month from receipt of request, unless there is good reason for delay. When a request for access cannot be met within a reasonable time, the reason will be explained in writing to the data subject making the request. Should there be any data breaches, the data subject will be informed accordingly.

All data subjects have the right to request that their information is not used or is amended if it results to be incorrect. Data subjects may also request that their data is erased. 

These rights may be restricted, if applicable, as per Data Protection Legislation.

In case you are not satisfied with the outcome of your access request, you may refer a complaint to the Information and Data Protection Commissioner, whose contact details are provided below.

 

Retention Policy

Your personal data is collected through Arts Council Malta’s website (artscouncilmalta.org), its Customer Relationship Management system (CRM) used by the Funding & Strategy and Accounts departments, Kultura.mt and ACM’s mailing system (MailChimp), should users choose to subscribe to ACM’s newsletter.

The following schedule outlines the retention requirements for the Corporate section of documentation within Arts Council Malta:

 

Category of Document

Retention Period

Justification

Mailing list - customer email details

6 months

To continue receiving news and updates from ACM and the Public Cultural Organisations falling under Act XV of 2015.

 

The following schedule outlines the retention requirements for the Funding and Strategy section of documentation within Arts Council Malta:

 

Category of Document

Retention Period

Justification

First and last name

4 years

Due to the longest project length.

Email

Residential Address

Mobile

I.D Number (including scanned document)

 

The following schedule outlines the retention requirements for the Kultura.mt section of documentation within Arts Council Malta:

 

Category of Document

Retention Period

Justification

First and last name

3 years

For sales comparative analysis to give Kultura.mt undistorted figures

Email

Telephone Number

Mobile Number

Id / Passport number

Data that needs to be destroyed after the noted timeframes will be disposed of in an efficient manner ensuring that such information is no longer available within Arts Council Malta.


The Data Protection Officer
may be contacted on kathryn.demicoli.1@artscouncil.mt or by telephone on 2334 7251.

The Executive Chairman

The Data Controller is Arts Council Malta’s Executive Chairman who may be contacted on 23347221 or by email on albert.marshall@artscouncil.mt

 

The Information and Data Protection Commissioner

The Information and Data Protection Commissioner may be contacted at:

Level 2, Airways House,

High Street,

Sliema SLM 1549

Telephone: 23287100 

Email: idpc.info@idpc.org.mt