LEGAL
Website Terms & Conditions
Last updated: 21 July 2025
1. IntroductionÂ
1.1 This website (the “Website”) is owned and operated by Fleur Mifsud Bons, doing business as Bons Psychology (the “Website Owner”). Ms Mifsud Bons is a psychologist and psychotherapist holding a Bachelor of Psychology with Honours, a Master in Clinical Psychology, a Diploma in Gestalt Psychotherapy and a Diploma in Applied Systemic Theory. She is warranted by the Malta Psychology Profession Board as a clinical psychologist in Malta and operates under warrant registration number MPPB082. The applicable professional rules for psychologists can be found on https://family.gov.mt/public-bodies/malta-psychology-profession-board/. She is also registered as a psychotherapist with the Council for Professions Complementary to Medicine with warrant number 17. The applicable rules of the Council for Professions Complementary to Medicine can be found on https://cpcm.gov.mt/en/resources/legislations/. Ms Mifsud Bons is also an EMDR Practitioner, registered with EMDR Association Malta, as well as a Cognitive Behavioural Hypnotherapist, registered with the General Hypnotherapy Register, UK. The code of conduct of the UK General Hypnotherapy Register can be found on https://general-hypnotherapy-register.com/code-of-ethics/.Â
    Â
2. Scope
2.1 These terms and conditions (the “T&Cs”) govern the use of this Website by a user (the “User”, “You” or “Your”). By accessing and using this Website, You confirm that You have read and accepted these T&Cs. If you do not agree to these T&Cs, you must not use the Website.
2.2 These T&Cs may be amended from time to time, in which case they shall be updated accordingly on this page. By continuing to access the Website after the date of any such amendment, You agree that You have accepted the T&Cs as amended.Â
Â
3. Website Purpose and Disclaimer
3.1 The purpose of this website (the “Website”) is the provision of online, educational programmes to enhance and support the psychological well-being of the User (the “Programmes”). These Programmes contain information, guidance and resources designed to assist Users with a variety of psychological conditions, such as anxiety.
3.2Â The information, guidance and resources offered on this Website are intended for educational and information purposes only. The material on this Website does not constitute personalised medical, psychological or therapeutic advice, diagnosis or treatment. Your reliance in any manner on any material on this Website and the Progammes is solely at your risk. The Website Owner makes no guarantee of any specific outcome or result from the use of the information, guidance and resources offered on this Website. In particular, the material on this Website is not suitable for any kind of medical or psychological crisis intervention.
3.3 If You are in a crisis situation, experiencing any mental or physical health emergency, or require immediate assistance, please contact the emergency helplines in your area immediately.Â
3.4 The information and Programmes provided are not a substitute for professional psychological, medical, or other advice, diagnosis, or treatment.
3.5 No Healing Promises or Guarantees. Whilst the Website Owner is committed to providing high-quality educational resources, the Website Owner makes no promises, warranties or guarantees regarding healing, recovery or specific therapeutic outcomes. Individual results may vary significantly based on numerous factors, including but not limited to individual circumstances, commitment to the programme materials, and pre-existing conditions. Users should not interpret any course titles, descriptions or marketing materials as promises of specific results
Â
4. No Psychologist-Client Relationship
Your access and use of this Website, the Website Content (as defined under clause 8.1 of these T&Cs) and/or the Programmes shall not create a psychologist-client or psychotherapist-client relationship between You and the Website Owner.Â
Â
5. Account Registration and EligibilityÂ
5.1 In order to access the Programmes offered on this Website, You are required to create an account here.Â
5.2 If You are currently a member of the staff or student body of the Ä .F. Abela Junior College or the University of Malta, You will be directed to create a dedicated account which will entitle You to acquire the Programmes free of charge (a “Free Account”). In order to create a Free Account, You will be requested to submit proof that You are currently a member of the staff or student body of the Ä .F. Abela Junior College or the University of Malta. This is typically Your staff or student email address. Once Your Free Account is created, You may, from time to time, and at least once a year, be required to submit proof that You are still a member of the staff or student body of the Ä .F. Abela Junior College or the University of Malta. If no such proof is provided within the required timeframe (as may be specified on the Website at the time when such proof is requested from You), Your Free Account shall be deactivated and You shall be directed to switch to a Standard Account (as defined under clause 5.3 below).Â
5.3 If You are not currently a member of the staff or student body of the Ä .F. Abela Junior College or the University of Malta, You will be directed to create a standard account, which will allow You to purchase any of the Programmes at a fee (a “Standard Account”).
5.4 You agree to provide accurate, current, and complete information during registration and to update such information as necessary.
5.5 You are solely responsible for the activities carried out through Your Free Account or Standard Account (an “Account”) and for any content posted or otherwise shared on the Website through Your Account (“User Content”). You represent and warrant that You own or have the necessary rights and permissions to share the User Content and that it does not infringe any third-party rights or violate any laws or these T&Cs. You agree not to post or otherwise share any User Content on the Website which:
(a) is illegal, harmful, threatening, abusive, harassing, defamatory, obscene or discriminatory;
(b) infringes any third-party rights, including but not limited to intellectual property rights and the right to privacy and data protection;
(c) includes spam, malware or any form of unsolicited promotion; or
(d) violates any applicable laws or these T&Cs.       Â
The Website Owner reserves the right to remove any User Content which is, or is suspected to be, in violation of this clause 5.5 from the Website without notice to You.Â
Â
5.6 Any views and information expressed in any content posted or otherwise shared by users on this Website are those of the relevant user and do not necessarily reflect the views or positions of the Website Owner. The Website Owner does not endorse or guarantee the accuracy, completeness or reliability of any user-generated content. Â
5.7 You are solely responsible for maintaining the confidentiality of the login credentials of Your Account.Â
5.8 You may only log onto Your Account from one device at any given time.Â
5.9 You must notify the Website Owner immediately of any unauthorised use of your Account or any other breach of security. Contact details are found in clause 16 below.
Â
6. Exclusion of Warranties
6.1 The Website Owner does not warrant that access to and use of this Website, or any feature or content thereon (including the Programmes and/or the Website Content), will be uninterrupted or free of bugs, errors or defects. The availability of all or any part of this Website may be suspended or withdrawn for business and operational reasons. The Website Owner will try to provide You with reasonable notice of any such suspension or withdrawal, where possible.Â
6.2 You hereby acknowledge and accept that access to the Website, the Website Content and/or the Programmes are provided “as is” and the Website Owner excludes any express or implied warranties, including but not limited to any implied warranties of merchantability and fitness for a particular purpose.Â
Â
 7. Third-Party Content
7.1 Where the Website contains links to other websites and resources provided by third parties (“Third-Party Content”), these links are provided solely for Your information. Such links should not be interpreted as approval by the Website Owner of such Third-Party Content or the information You may obtain from it.Â
7.2 The Website Owner has no control over, and is in no way responsible for, any Third-Party Content. Your access and use of any Third-Party Content is at Your sole risk and is subject to the terms, conditions and policies of the owners of such Third-Party Content. The Website Owner does not accept any liability in relation to any Third-Party Content on the Website.Â
Â
 8. Intellectual Property
8. 1 Unless otherwise indicated, the Website Owner is the owner of all content on the Website and the Programmes including but not limited to text, graphics, logos, audio, video, and any other material (the “Website Content”), and of all intellectual property rights in such content, including but not limited to business names, trademarks, copyright, and domain names.Â
8.2 You agree that You shall not, and shall not attempt to:
(a) Use the Website in any manner that could damage, disable, overburden, or impair the Website or interfere with any other person’s use;
(b) Attempt to gain unauthorised access to any part of the Website, other accounts, or computer systems;
(c) Reproduce, distribute, modify, or create derivative works from any content on the Website without the Website Owner’s express written permission;
(d) Use the Website or its content for any commercial purpose without the Website Owner’s prior written consent;
(e) Upload or transmit any viruses, malware, or other harmful code; and/or
(f) Engage in any conduct that is unlawful, fraudulent, or otherwise objectionable.
8.3 Subject to Your compliance with these T&Cs, the Website Owner grants You a personal, non-exclusive, revocable, non-sublicensable and non-transferable licence to access and use the Website, the Website Content and the Programmes for Your own personal, non-commercial purposes. You shall not access or use the Website, the Website Content or the Programmes for commercial purposes of any kind without obtaining express written permission and any necessary licences from the Website Owner and/or any other relevant party to do so.Â
8.4 If, for any reason other than as set out in this clause 8, you acquire any intellectual property rights in or over the Website, the Website Content, and/or the Programmes, you agree to assign all such rights to the Website Owner in accordance with these T&Cs and not to challenge the Website Owner's ownership or use of those rights.
Â
 9. Prices and Payment
9.1 All prices listed on this Website are in Euro and inclusive of VAT. Prices are subject to change from time to time at the Website Owner’s discretion. Any changes in prices will be communicated to You prior to Your purchase.Â
9.2 Payment must be made online and in full at the time of purchase of any Programme on the Website.Â
9.3 If You are not satisfied with Your purchase of any Programme, You may submit a request for a full refund of the price paid for such Programme. Such request must be submitted via email to [email protected] within 30 calendar days from the date of purchase of the Programme for which a refund of the price is being requested.Â
Â
10. Lifetime Access
10.1 When You purchase a Programme on this Website, You shall have access to the Programme for as long as the Programme is available on the Website and for as long as the Website Owner continues to operate her business.Â
10.2 While the Website Owner strives to provide ongoing access to the Programmes purchased on the Website, the Website Owner reserves the right to modify, update, or discontinue a Programme for any reason, including but not limited to legal compliance, technological updates or advancements in the field of psychology or psychotherapy. In the event that a Programme You have purchased is discontinued, the Website Owner shall provide You with advance notice where feasible.Â
Â
11. Data Protection Â
The Website Owner may process Your personal data in order to provide You with access to this Website, the Website Content and the Programmes. For information on the manner in which the Website Owner processes Your personal data, kindly refer to the Privacy Notice.Â
Â
12. Termination of AccountÂ
12. 1 The Website Owner reserves the right to terminate Your access to Your Account, the Website, the Website Content and/or the Programmes at the Website Owner’s sole discretion if, in the Website Owner’s opinion, You have violated, or are likely to violate, any provision of these T&Cs or You have otherwise accessed or used, or are likely to access or use, the Website in an inappropriate, malicious, negligent, unlawful or otherwise unacceptable manner. In such an event, You shall be given reasonable notice of the termination of Your access to the Website and/or to Your Account, unless there are serious grounds for such notice not to be given.Â
12.2 You may deactivate Your account at any time by logging in and following the directions on the Website for account deactivation.Â
Â
13. Liability
13.1 Subject to clause 13.2 below, in no event shall the Website Owner be liable for any damages (including direct, indirect, special, punitive, incidental, consequential or similar damages), costs, expenses or other liabilities with respect to any claims based on contract, tort or otherwise (including negligence) arising out of or in connection with these T&Cs, this Website, Your Account, the Website Content and/or the Programmes.Â
13.2 Nothing in these T&Cs shall be deemed to exclude or limit the Website Owner’s liability for:
(a) Death or personal injury;
(b) Fraud;
(c) Wilful misconduct; or
(d) Gross negligence.Â
Â
14. IndemnificationÂ
You agree to defend, indemnify and hold the Website Owner harmless from and against any and all claims, damages, costs, expenses or other liabilities arising from Your misuse of this Website and/or Your violation of these T&Cs.Â
Â
15. Governing Law
These T&Cs shall be governed by the laws of Malta and any dispute arising in relation to the interpretation or enforcement thereof shall be subject to the exclusive jurisdiction of the Maltese Courts.Â
Â
16. Contact
Should you have any queries or complaints regarding this Website, the Website Content or the Programmes, kindly contact the Website Owner at the following details:
Fleur Mifsud Bons
Email address: [email protected]Â
Telephone number: 356 99822378Â
Business address: 47, Triq San Publju, Rabat, Malta
Website Privacy Notice
Last updated on: Â Â Â Â Â 10 July 2025
1. Definitions
In this Privacy Notice, the below terms shall have the following meanings:
a. “Applicable Laws” shall mean the GDPR and the DP Act;
b. “Consent” means any freely given, specific, informed and unambiguous indication of Your wishes by which You (by a statement or by a clear affirmative action) signify agreement to the Processing of Your Personal Data;Â
c. “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of your Personal Data;
d. “Data Subject” means any identified or identifiable natural person to whom Personal Data relates;
e. “DP Act” shall mean Chapter 586 of the Laws of Malta (the Data Protection Act) and the subsidiary legislation thereunder, as may be amended from time to time;
f. “GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);Â
g. “Personal Data” means any information relating to an identified or identifiable natural person;
h. “Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; and
i. “Processor” means the natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of the Controller.
Â
 2. Introduction
This Privacy Notice applies to the Processing of Personal Data of individuals who visit or use this website (the “Website”) (each individually a Data Subject, “You” or “Your”) by the website owner, Fleur Mifsud Bons (the “Controller”). It is the aim of this Privacy Notice to give You information on how the Controller collects and Processes Your Personal Data when You visit or use the Website.
The Controller does not knowingly collect data relating to minors since this Website is not intended for minors.
Â
3. The Controller
Fleur Mifsud Bons, a warranted clinical psychologist in Malta operating under warrant registration number MPPB082, is the Controller of Your Personal Data.
Should You wish to contact the Controller for any reason with respect to the Processing of Your Personal Data, You may do so using the below details.Â
Â
Fleur Mifsud BonsÂ
Email address: [email protected]Â
Telephone number: 356 99822378Â
Business address: 47, Triq San Publju, Rabat, Malta
Â
4. Complaints
You have the right to make a complaint with respect to the Processing of Your Personal Data at any time to any supervisory authority. The supervisory authority in Malta is the Office of the Information and Data Protection Commissioner (the “IDPC”), the contact details of which are as follows:Â
Name: Information and Data Protection Commissioner
Address: Floor 2, Airways House, Triq il-Kbira, Tas-Sliema SLM 1549, Malta
Email: [email protected]Â
Landline: +356 2328 7100
The Controller would appreciate the chance to deal with Your concerns before You approach the IDPC, so please contact the Controller in the first instance.
Â
5. Your Personal DataÂ
In the context of this Privacy Notice, the Controller may process different kinds of Personal Data about You, which have been grouped together below:
- Identity Data includes Your first name and last name.
- Contact Data includes Your email address and mobile or telephone number.
- Account Data includes the username and password of Your Account on the Website, as well as Your purchase history on the Website. If You create a Free Account, Account Data will also include information proving Your eligibility for a Free Account. This is typically Your student or staff email address at the Ä .F. Abela Junior College or the University of Malta.
- Cookie Data includes information collected via cookies placed on the Website, as further detailed in the Cookie Notice.Â
- Financial Data includes banking and payment information.
Â
6. How is Your Personal Data collected? Â
The Controller may collect Your Personal Data in the following manner:
Â
- Direct interactions: You may give the Controller Your Personal Data when creating an account on the Website or by corresponding with the Controller by post, phone, email, or otherwise.Â
- Cookies on the Website: The Controller may collect Personal Data about You via the cookies placed on the Website, as further detailed in the Cookie Notice.
Â
7. Purposes and Lawful Bases for the Processing of Your Personal Data  Â
If You create an account on the Website, the Controller will Process Your Identity Data, Contact Data and Account Data in order to register Your account. If You make a purchase on the Website through Your account, the Controller will Process Your Financial Data for the purpose of processing the payment in relation to that purchase. The lawful basis for the Processing of this Personal Data is necessity for the performance of the contract between You and the Controller, namely the terms and conditions of this Website.
If You visit the Website, the Controller will Process Your Cookie Data in order to administer the Website efficiently and securely.Â
If You contact the Controller via post, phone, email, or otherwise, the Controller will Process Your Identity Data and Contact Data, as well as any other information You may provide, in order to respond to Your correspondence (such as answering Your query or complaint).
 Â
8. Automated Decision-Making and ProfilingÂ
The Controller does not use Your Personal Data in order to carry out any automated decision-making or profiling. In the event that the Controller decides to carry out any such automated decision-making or profiling in the future, You shall be informed prior to Your Personal Data being used in such a manner.Â
Â
9. Disclosures of Your Personal Data Â
In the course of the Controller’s business, the Controller works with third parties, typically service providers or subcontractors, who may also be the Controller’s Processors. In particular, the Controller may have to share Your Personal Data with the third parties set out below.
Â
|
IT Service Providers |
Service providers that manage and/or provide support in relation to the Controller’s Website and IT systems. |
|
Third-Party Consultants and Professional Advisors |
Service providers that assist the Controller in various matters relating to the Controller’s business, including lawyers, accountants and insurers. |
|
Regulators, courts, law enforcement and other authorities |
Entities that may require the disclosure of the Controller’s Processing activities in certain circumstances, such as the executive police. |
Â
The Controller will, in usual circumstances, not disclose Your Personal Data to third parties without Your Consent. There may, however, be times where the Controller may need to disclose Your Personal Data to third parties without Your Consent, such as when abiding by a court order, and the Controller shall only do so in accordance with the law, including the Applicable Laws.Â
The Controller requires all third parties to respect the security of Your Personal Data and to treat it in accordance with the law, including the Applicable Laws. The Controller does not allow third-party service providers to use Your Personal Data for their own purposes and only permits them to Process Your Personal Data for specified purposes and in accordance with the Controller’s instructions.
Â
10. International Transfers Â
The Controller may transfer Your Personal Data to persons or entities outside the EU and the European Economic area (the “EEA”), primarily its website service provider.
In the event of any such transfer of Your Personal Data to countries which are outside the EU/EEA, the Controller shall ensure that a lawful basis for this exists and that appropriate safeguards are implemented for the protection of Your Personal Data, in accordance with the Applicable Laws.Â
Â
11. Data Retention Â
The Controller will only retain Your Personal Data for as long as there is a valid reason to do so. To determine the appropriate retention period for Personal Data, the Controller considers the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of Your Personal Data, the purposes for which the Controller processes Your Personal Data and whether the Controller can achieve those purposes through other means, and the applicable legal requirements.
The Controller’s standard practice is to determine whether there are any specific laws permitting or obliging the Controller to keep certain Personal Data for a certain period of time, in which case the Controller will typically keep the Personal Data for the maximum period indicated by any such law.
Without prejudice to the hereunder, the Controller would also determine whether there are any laws and/or contracts that may be invoked against the Controller by You and/or third parties and, if so, what the prescriptive periods for such actions are. These periods are usually of two or five years. In such cases, the Controller will keep any relevant Personal Data needed for the Controller to defend itself against any claims, challenges or other such actions by You and/or third parties for such time as is necessary.Â
If You contact the Controller by post, phone, email, or otherwise, the Controller will retain Your Personal Data for as long as necessary to respond to Your correspondence (such as handling Your query or complaint).Â
If You create an account on the Website, the Controller will retain Your Personal Data until Your account is terminated in accordance with the terms and conditions of the Website.Â
For information on the Controller’s retention of Your Cookie Data, kindly refer to the Cookie Notice.
Â
12. Your Legal Rights
In terms of the Applicable Laws, as a Data Subject and for as long as the Controller retains Your Personal Data, You have the following rights in relation to such Personal Data:
a. Access – You have the right to request access to Your Personal Data and information related to the Processing thereof, as well as obtain a copy thereof;
b. Rectification – You have the right to request the rectification of any inaccuracies or any missing Personal Data of Yours;
c. Erasure – You have the right to request the erasure of Your Personal Data;
d. Restriction – You have the right to request the restriction of the Processing of Your Personal Data in cases explicitly provided for by law, including if You believe that the Controller is unlawfully Processing Your Personal Data or that the Personal Data that the Controller holds about You is inaccurate;
e. Portability – You have the right to request that the Controller provide You with Personal Data which it holds about You in a structured, commonly used and machine-readable format (except where such Personal Data was provided to the Controller in handwritten format, in which case, upon Your request, such Personal Data will be provided to You in such handwritten format). Where technically feasible, You may also request that the Controller transmit such Personal Data to a third-party Controller indicated by You;
f. Objection – You have the right to object to the Processing of Your Personal Data where the Controller is relying on legitimate interests for such Processing;
g. Automated decision-making and profiling – You have the right to object to a decision taken solely on the basis of automated Processing, including profiling, which has an impact on You or significantly affects You;
h. Withdrawal of consent – if You have provided Consent for the Processing of Your Personal Data, You have the right to withdraw that Consent at any time, which will not affect the lawfulness of the Processing carried out such withdrawal; and
i. Information about the source – where the Personal Data the Controller holds about You was not provided to the Controller directly by You, You also have the right to receive any available information as to the source of such Personal Data.
If you wish to exercise any of the rights set out above, please contact the Controller.
You will not have to pay to exercise any of the above-listed rights. However, the Controller may charge a reasonable fee if Your request is clearly unfounded, repetitive or excessive.
Please note that none of above-listed rights are absolute and such rights must generally be weighed against the Controller’s own legal obligations and legitimate interests. If the Controller is permitted, and if a decision is taken to override Your Data Subject request, You shall be informed by the Controller accordingly.Â
Website Privacy Notice
Last updated on: Â Â Â Â Â 10 July 2025
1. Definitions
In this Privacy Notice, the below terms shall have the following meanings:
a. “Applicable Laws” shall mean the GDPR and the DP Act;
b. “Consent” means any freely given, specific, informed and unambiguous indication of Your wishes by which You (by a statement or by a clear affirmative action) signify agreement to the Processing of Your Personal Data;Â
c. “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of your Personal Data;
d. “Data Subject” means any identified or identifiable natural person to whom Personal Data relates;
e. “DP Act” shall mean Chapter 586 of the Laws of Malta (the Data Protection Act) and the subsidiary legislation thereunder, as may be amended from time to time;
f. “GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);Â
g. “Personal Data” means any information relating to an identified or identifiable natural person;
h. “Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; and
i. “Processor” means the natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of the Controller.
Â
 2. Introduction
This Privacy Notice applies to the Processing of Personal Data of individuals who visit or use this website (the “Website”) (each individually a Data Subject, “You” or “Your”) by the website owner, Fleur Mifsud Bons (the “Controller”). It is the aim of this Privacy Notice to give You information on how the Controller collects and Processes Your Personal Data when You visit or use the Website.
The Controller does not knowingly collect data relating to minors since this Website is not intended for minors.
Â
3. The Controller
Fleur Mifsud Bons, a warranted clinical psychologist in Malta operating under warrant registration number MPPB082, is the Controller of Your Personal Data.
Should You wish to contact the Controller for any reason with respect to the Processing of Your Personal Data, You may do so using the below details.Â
Â
Fleur Mifsud BonsÂ
Email address: [email protected]Â
Telephone number: 356 99822378Â
Business address: 47, Triq San Publju, Rabat, Malta
Â
4. Complaints
You have the right to make a complaint with respect to the Processing of Your Personal Data at any time to any supervisory authority. The supervisory authority in Malta is the Office of the Information and Data Protection Commissioner (the “IDPC”), the contact details of which are as follows:Â
Name: Information and Data Protection Commissioner
Address: Floor 2, Airways House, Triq il-Kbira, Tas-Sliema SLM 1549, Malta
Email: [email protected]Â
Landline: +356 2328 7100
The Controller would appreciate the chance to deal with Your concerns before You approach the IDPC, so please contact the Controller in the first instance.
Â
5. Your Personal DataÂ
In the context of this Privacy Notice, the Controller may process different kinds of Personal Data about You, which have been grouped together below:
- Identity Data includes Your first name and last name.
- Contact Data includes Your email address and mobile or telephone number.
- Account Data includes the username and password of Your Account on the Website, as well as Your purchase history on the Website. If You create a Free Account, Account Data will also include information proving Your eligibility for a Free Account. This is typically Your student or staff email address at the Ä .F. Abela Junior College or the University of Malta.
- Cookie Data includes information collected via cookies placed on the Website, as further detailed in the Cookie Notice.Â
- Financial Data includes banking and payment information.
Â
6. How is Your Personal Data collected? Â
The Controller may collect Your Personal Data in the following manner:
Â
- Direct interactions: You may give the Controller Your Personal Data when creating an account on the Website or by corresponding with the Controller by post, phone, email, or otherwise.Â
- Cookies on the Website: The Controller may collect Personal Data about You via the cookies placed on the Website, as further detailed in the Cookie Notice.
Â
7. Purposes and Lawful Bases for the Processing of Your Personal Data  Â
If You create an account on the Website, the Controller will Process Your Identity Data, Contact Data and Account Data in order to register Your account. If You make a purchase on the Website through Your account, the Controller will Process Your Financial Data for the purpose of processing the payment in relation to that purchase. The lawful basis for the Processing of this Personal Data is necessity for the performance of the contract between You and the Controller, namely the terms and conditions of this Website.
If You visit the Website, the Controller will Process Your Cookie Data in order to administer the Website efficiently and securely.Â
If You contact the Controller via post, phone, email, or otherwise, the Controller will Process Your Identity Data and Contact Data, as well as any other information You may provide, in order to respond to Your correspondence (such as answering Your query or complaint).
 Â
8. Automated Decision-Making and ProfilingÂ
The Controller does not use Your Personal Data in order to carry out any automated decision-making or profiling. In the event that the Controller decides to carry out any such automated decision-making or profiling in the future, You shall be informed prior to Your Personal Data being used in such a manner.Â
Â
9. Disclosures of Your Personal Data Â
In the course of the Controller’s business, the Controller works with third parties, typically service providers or subcontractors, who may also be the Controller’s Processors. In particular, the Controller may have to share Your Personal Data with the third parties set out below.
Â
|
IT Service Providers |
Service providers that manage and/or provide support in relation to the Controller’s Website and IT systems. |
|
Third-Party Consultants and Professional Advisors |
Service providers that assist the Controller in various matters relating to the Controller’s business, including lawyers, accountants and insurers. |
|
Regulators, courts, law enforcement and other authorities |
Entities that may require the disclosure of the Controller’s Processing activities in certain circumstances, such as the executive police. |
Â
The Controller will, in usual circumstances, not disclose Your Personal Data to third parties without Your Consent. There may, however, be times where the Controller may need to disclose Your Personal Data to third parties without Your Consent, such as when abiding by a court order, and the Controller shall only do so in accordance with the law, including the Applicable Laws.Â
The Controller requires all third parties to respect the security of Your Personal Data and to treat it in accordance with the law, including the Applicable Laws. The Controller does not allow third-party service providers to use Your Personal Data for their own purposes and only permits them to Process Your Personal Data for specified purposes and in accordance with the Controller’s instructions.
Â
10. International Transfers Â
The Controller may transfer Your Personal Data to persons or entities outside the EU and the European Economic area (the “EEA”), primarily its website service provider.
In the event of any such transfer of Your Personal Data to countries which are outside the EU/EEA, the Controller shall ensure that a lawful basis for this exists and that appropriate safeguards are implemented for the protection of Your Personal Data, in accordance with the Applicable Laws.Â
Â
11. Data Retention Â
The Controller will only retain Your Personal Data for as long as there is a valid reason to do so. To determine the appropriate retention period for Personal Data, the Controller considers the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of Your Personal Data, the purposes for which the Controller processes Your Personal Data and whether the Controller can achieve those purposes through other means, and the applicable legal requirements.
The Controller’s standard practice is to determine whether there are any specific laws permitting or obliging the Controller to keep certain Personal Data for a certain period of time, in which case the Controller will typically keep the Personal Data for the maximum period indicated by any such law.
Without prejudice to the hereunder, the Controller would also determine whether there are any laws and/or contracts that may be invoked against the Controller by You and/or third parties and, if so, what the prescriptive periods for such actions are. These periods are usually of two or five years. In such cases, the Controller will keep any relevant Personal Data needed for the Controller to defend itself against any claims, challenges or other such actions by You and/or third parties for such time as is necessary.Â
If You contact the Controller by post, phone, email, or otherwise, the Controller will retain Your Personal Data for as long as necessary to respond to Your correspondence (such as handling Your query or complaint).Â
If You create an account on the Website, the Controller will retain Your Personal Data until Your account is terminated in accordance with the terms and conditions of the Website.Â
For information on the Controller’s retention of Your Cookie Data, kindly refer to the Cookie Notice.
Â
12. Your Legal Rights
In terms of the Applicable Laws, as a Data Subject and for as long as the Controller retains Your Personal Data, You have the following rights in relation to such Personal Data:
a. Access – You have the right to request access to Your Personal Data and information related to the Processing thereof, as well as obtain a copy thereof;
b. Rectification – You have the right to request the rectification of any inaccuracies or any missing Personal Data of Yours;
c. Erasure – You have the right to request the erasure of Your Personal Data;
d. Restriction – You have the right to request the restriction of the Processing of Your Personal Data in cases explicitly provided for by law, including if You believe that the Controller is unlawfully Processing Your Personal Data or that the Personal Data that the Controller holds about You is inaccurate;
e. Portability – You have the right to request that the Controller provide You with Personal Data which it holds about You in a structured, commonly used and machine-readable format (except where such Personal Data was provided to the Controller in handwritten format, in which case, upon Your request, such Personal Data will be provided to You in such handwritten format). Where technically feasible, You may also request that the Controller transmit such Personal Data to a third-party Controller indicated by You;
f. Objection – You have the right to object to the Processing of Your Personal Data where the Controller is relying on legitimate interests for such Processing;
g. Automated decision-making and profiling – You have the right to object to a decision taken solely on the basis of automated Processing, including profiling, which has an impact on You or significantly affects You;
h. Withdrawal of consent – if You have provided Consent for the Processing of Your Personal Data, You have the right to withdraw that Consent at any time, which will not affect the lawfulness of the Processing carried out such withdrawal; and
i. Information about the source – where the Personal Data the Controller holds about You was not provided to the Controller directly by You, You also have the right to receive any available information as to the source of such Personal Data.
If you wish to exercise any of the rights set out above, please contact the Controller.
You will not have to pay to exercise any of the above-listed rights. However, the Controller may charge a reasonable fee if Your request is clearly unfounded, repetitive or excessive.
Please note that none of above-listed rights are absolute and such rights must generally be weighed against the Controller’s own legal obligations and legitimate interests. If the Controller is permitted, and if a decision is taken to override Your Data Subject request, You shall be informed by the Controller accordingly.Â