GDPR

The General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data

Protection Act 2018 (Cap 586 of the Laws of Malta) regulate the processing of

personal data whether held electronically or in manual form. The Foundation

Information Technology Accessibility (FITA) is set to fully comply with the Data

Protection Principles as set out in such data protection legislation.

Policies and Forms can be downloaded from the following links:

Privacy Policy for the Foundation for Information Technology Accessibility

This Privacy Policy describes how the Foundation for Information Technology

Accessibility handles, uses, and protects personal data. The General Data Protection

Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018 (Cap 586 of the

Laws of Malta) regulate the processing of personal data whether held electronically

or in manual form. The Foundation Information Technology Accessibility (FITA) is set

to fully comply with the Data Protection Principles as set out in such data protection

legislation.

Information Collection

We may collect and process the following personal data:

• Basic Information: Name, email address, contact number.
• User-Generated Information: Any data voluntarily provided by users through

interaction with our website or services.

• Technical Information: IP address, browser type, device details, and other

technical data for analytics and security purposes.

Data Usage

Your personal information is collected for the following purposes:

• Communication: To respond to inquiries, provide requested information, and

communicate with users.

• Improvement: To enhance our website, services, and user experience.
• Legal Compliance: To adhere to legal obligations and regulatory

requirements.

Legal Basis for Processing Personal Data

Our legal basis for processing personal data adheres to the GDPR, relying on the

user's consent, contractual necessity, legal obligations, and our legitimate interests.

Data Security and Retention

We maintain robust security measures to protect your personal information from

unauthorized access, disclosure, alteration, and destruction. Your data is retained

only for as long as necessary for the purposes outlined in this policy.

Third-Party Sharing

We do not sell, trade, or transfer your personal data to external parties without your

explicit consent, except as required by law or to support the provision of our

services.

User Rights

Under the GDPR, users have the right to:

• Access: Request access to the personal data we hold about them.
• Rectification: Request correction of incomplete or inaccurate data.
• Erasure: Request erasure of personal data under specific circumstances.
• Restriction of Processing: Object to or restrict certain processing of

personal data.

• Data Portability: Request to receive the personal data in a structured,

commonly used, and machine-readable format.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve user experience. By

using our website, you consent to the use of cookies in accordance with our Cookie

Policy.

Contact Us

For any inquiries, to exercise your rights under the GDPR, or for further information

regarding our Privacy Policy, you can contact our Data Protection Office through:

[email protected].

Policies and Forms can be downloaded from the following links: