Single Permit Online Application

Online Application

Non-EU: Single Permit

Privacy Policy

By visiting the website https://singlepermit.gov.mt (the “Website”), logging in with your Government e-ID Account (the “e-ID”), submitting an online Single Permit Application (the “Application”), and sending a payment via the Online Payment Services Portal (“PSP”), you (“You”, the “User” or the “Data Subject”) provide Identity Malta Agency (“Identity Malta”, “we” or “us”) with personal data. We commit to process the personal data you submit through the Website (the “Personal Data”) in a highly responsible manner and in observance with applicable legislation. The aim of this Policy (“Policy”) is to comply with our transparency and fairness obligations under GDPR and to inform you about who will be processing your Data, for what purpose, for how long it will be kept, with whom it will be shared and about your rights as a data subject under GDPR.

1. Data Controller and Data Protection Officer

Identity Malta is the data controller, meaning the entity that defines the purposes and means for collecting and processing your Personal Data. We are an Agency pertaining to the Government Malta and we deliver public services related to Citizenship, Identity Cards, Passports, Visas, Expatriate affairs and Public Registry in Malta. Our Data Protection Officer is the individual responsible to attend any query related to this Policy and in general to data protection, and may be contacted at:

Postal Address:
Data Protection Officer
Identity Malta Agency
Onda Building
Aldo Moro Road
Marsa, MRS1965
Malta

Email address: dataprotection@identitymalta.com

2. Purposes and legal basis
2.1 Visiting the website

When you visit the Website, we collect your Personal Data in order to enable you to have access to it, improve the content, functionality and services we offer you through the Website and better understand our categories of visitors. Personal Data collected when you visit the Website includes cookies. Cookies are small files which are placed on your device in order to help the Website keep track of your visits and activity. For ease of reference, we have created a dedicated Cookie Policy which is available at https://singlepermit.gov.mt/Home/CookiesPolicy. The legal basis for processing is the legitimate interest pursued by Identity Malta. A balance test was conducted in this regard. The legitimate interest is not overridden by the interests or fundamental rights and freedoms of the Data Subject which requires protection of Personal Data.

2.2 Logging in With your e-ID

When you log in with your e-ID, Identity Malta collects Personal Data in order to easily populate your details, facilitate your identification, verify that you are legitimately representing an employer based in Malta, and allow you to submit an Application. The legal basis for processing is the performance of a task in the public interest by Identity Malta.

2.3 Submitting an Online Application and sending payments

When you submit an Application and payment, Identity Malta collects Personal Data in order to deliver a public service that is receiving and processing applications for Single Permits and to populate its databases. The legal basis for processing is the performance of a task in the public interest by Identity Malta. You may submit personal data of individuals other than yourself with an Application. Identity Malta has assessed that, in said cases, informing these individuals proves impossible and would involve a disproportionate effort. Identity Malta will still take appropriate measures to protect the rights, freedoms and legitimate interests of these individuals.

3. Recipients of personal data

The recipients of Personal Data are:

  1. ID Global Solutions Limited and Exigy Ltd, which are in charge of the design, hosting and technical maintenance of the Website;
  2. Malta Information Technology Agency, which is in charge of the technical aspects related to the e-ID;
  3. Other Government Agencies and Departments involved in processing and assessing the Application;
  4. Transactium Ltd, which is our supplier managing the Online Payment Services Portal and processing your payments.

Transfers of Personal Data will be done in line with applicable laws, and arrangements are in place in order to guarantee the confidentiality, integrity and availability of Personal Data within these transfers.

Under certain conditions outlined in law, we may disclose your information to third parties, (such as other Government entities or law enforcement authorities) if it is necessary and proportionate for lawful, specific purposes.

Personal Data is not transferred to third countries or international organizations.

4. Storage periods

Personal data is retained as follows:

  • Personal data collected whilst visiting the Website is retained as established in the Cookie Policy;
  • Personal data collected when you log in with e-ID is retained as established in the Privacy Policy of the Subscriber’s Agreement. You can find the latest version of this document on: https://repository.qca.gov.mt/ ;
  • Personal data collected when you submit an Application is retained indefinitely in Identity Malta databases;
  • Personal data collected when you submit a payment is retained in line with the records retention period set in by Cap. 174 of the Laws of Malta (Financial Administration and Audit Act).
5. Your rights

You have a number of rights under data protection legislation, which are listed below and may be invoked by contacting our Data Protection Officer.

5.1 Access

You have the right to obtain confirmation from us as to whether we are processing your Personal Data or not, and, where that is the case, access to the Personal Data, obtain information about the processing and a copy of it.

5.2 Rectification

You have the right to obtain from us without undue delay the rectification of inaccurate Personal Data concerning yourself. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

5.3 Erasure

In certain cases, you may have the right to have your Personal Data deleted.

5.4 Restriction

In case any of the conditions of law apply, you have the right to restrict processing of your Personal Data.

5.5 Data Portability

You do not have the right to port your Personal Data because we do not process it on the basis of your consent or on the basis of a contract. However, you can always request to access your Personal Data.

5.6 Object

You have the right to object processing of Personal Data at any time, on grounds relating to your particular situation. In said case we will no longer process your Personal Data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

5.7 Complaint

You can lodge a complaint with the supervisory authority of the Member State of your habitual residence or place of work, or of alleged infringement of data protection legislation.

5.8 Automated decision-making/profiling

Personal Data is not object of automated decision-making or profiling.

6. Changes to this Privacy Policy

This Policy is subject to change.

Please visit this page regularly to be aware of any change which may occur from time to time.

Last updated date: 08/05/2019.