The Institute of Professional Development (IPD) is the owner of the website
www.ipd.edu.mt. This notice is intended to provide you with information regarding our
policies for the collection, use and disclosure of personal data through this website. This
policy applies to any person visiting the website so it is important that you read this policy.
We are committed to your privacy and personal data in line with all relevant legislation.
All data is treated as confidential and anyone handling data on behalf of IPD will be made
aware of this obligation under this policy.

Reasons to collect data and type of data collected

When using this website, you may be asked to submit information about yourself. This
information is used for any one or all of the reasons listed below:

1. Applying to participate in an event or course organised by IPD;
2. Contacting the Institute;
3. Submitting a comment;
4. Subscribing to a service provided by the Institute;
5. For us to manage our relationship with you;
6. To protect and administer the Institute and this website;
7. To deliver content to you including advertisements and suggestions from our end.

A list of the data which we may collect is shown below:

1. Data related to your identity and contact information
2. Data related to financial transactions
3. Data related to your internet connection and the technology you use to access this website
4. Data related to the profile information once you register with the website or the Institute
5. Data related to how you use this website

We do not collect any data which falls outside these spheres without your consent.

Failure to supply the data when requested either by law or by means of the contract between you and us may result in IPD not being able to process any request made by you and may result in the cancelling of your application.

Processing of data

All processing of data shall be in line with the principles relating to the processing of personal data of GDPR. IPD shall ensure that:

a. all data is processed in a lawful, fair and transparent manner;
b. all data is processed only for the reasons in which it was collected;
c. it minimises the data collected and only collects data which is adequate, relevant
and limited to what is necessary in relation to the purposes for which they are
processed;
d. all data is kept up to date and accurate;
e. all data is not kept longer than it is necessary or as required by law;
f. all data is secure and adequately protected against unauthorised or unlawful
processing and against accidental loss, destruction or damage.

How your data is collected

Data is collected using different methods. The methods used are:

1. By filling of forms or correspondence through phone, email, post or other means;
2. Cookies and other technologies that track the activity on our website and hold
   information related to equipment used, browsing patterns, operating system used,
   etc.;
3. Publicly available sources;
4. Other third parties.

Data disclosure and sharing

As a general rule your data is not disclosed to or shared with anyone, but there may be
instances which may result in your data being shared as explained below:

1. If we are legally obliged by a competent authority to disclose your data e.g. the
   police, the courts, etc.;
2. If we need to protect our rights, property, safety of other people associated with IPD
   or to protect against legal liability;
3. Other service providers who may be carrying out work on our behalf;
4. Regulatory Authorities;
5. Other departments within IPD and involved parties

Data Security

IPD implements the necessary security measures to protect all data from misuse,
unauthorised access or alteration, destruction, disclosure or loss. Access to data is limited to
only those who are authorised and strictly require access and is governed by
the necessary policies regulating access and use.

Retention and disposal of data

IPD will abide by all applicable legislation when it comes to the retention and disposal of
data. All data is retained according to its need and shall not be retained for longer than is
necessary. Some data may be held longer and in so doing such data will be anonymised as
soon as the reason for which it was originally collected no longer requires identifiable data.

When so required, data will be disposed of in a secure manner with no possibility of retrieval
using recognised standards for such actions.

Use of photography and videography

The Institute may capture photographs or videos of students, staff and the general public
which it may use in its marketing, as part of the teaching process or as part of its content
creation for newsletters, social media and other such items. When this happens, IPD shall
seek the consent of the people involved.

Your rights

In certain circumstances you have the following rights:

1. The right to be informed in relation to the processing of your data;
2. The right to access the data we hold about you;
3. The right to request rectification of the data we hold about you;
4. The right to request erasure of the data we hold about you;
5. The right to object to or opt-out from the processing of your data;
6. The right to transfer the data we hold about you and which has been submitted to us
   by you to somewhere else;
7. The right not to be subjected to automated individual decision making;
8. The right to ask to be forgotten;
9. The right to lodge a complaint;
10. The right to withdraw your consent for us to process your data at any time.

Requests

If your data is held by IPD, you have a legal right to request access to your data. Any such
requests need to be made by email to [email protected]. IPD will reply to your
email within 7 working days.