|
We have developed this policy because we want you to feel confident about the privacy and security of your personal information. Please read it carefully: -
Purpose
This privacy policy describes CVA Technology Company Limited’s (“the Company”) current policies and practices with regard to personal data collected by it for the Controlled Vehicular Access (CVA) system in Valletta. This policy aims to ensure that in so doing the Company complies with the Data Protection Act ("the Act").
Responsibilities under the Act
Data Controller: Malta Transport Authority is the Data Controller.
Data Processor: The Company is the data processor. It processes data on behalf of the Data Controller.
Data Protection Principles
The Company, as a Data Processor, complies with the Act and, amongst other things, it ensures that
(a) personal data is processed fairly and lawfully;
(b) personal data is always processed in accordance with good practice;
(c) personal data is only collected for specific, explicitly stated and legitimate purposes;
(d) personal data is not processed for any purpose that is incompatible with that for which the information is collected;
(e) personal data that is processed is adequate and relevant in relation to the purposes of the processing;
(f) no more personal data is processed than is necessary having regard to the purposes of the processing;
(g) personal data that is processed is correct and, if necessary, up to date;
(h) all reasonable measures are taken to complete, correct, block or erase data to the extent that such data is incomplete or incorrect, having regard to the purposes for which they are processed;
(i) personal data is not kept for a period longer than is necessary, having regard to the purposes for which they are processed.
Furthermore, personal data may be processed only if:
(a) the data subject has unambiguously given his consent; or
(b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; or
(c) processing is necessary for compliance with a legal obligation to which the Company or the Controller is subject; or
(d) processing is necessary in order to protect the vital interests of the data subject; or
(e) processing is necessary for the performance of an activity that is carried out in the public interest or in the exercise of official authority vested in the Company or in a third party to whom the data is disclosed; or
(f) processing is necessary for a purpose that concerns a legitimate interest of the Company or of such a third party to whom personal data is provided, except where such interest is overridden by the interest to protect the fundamental rights and freedoms of the data subject and in particular the right to privacy.
Anonymous Data Collected Through www.cva.gov.mt
When you use the Company’s website, technology is used to collect anonymous information about the use of the website. For example, we use technology to track how many visitors access our website, the date and time of their visit, the length of their stay, and which pages they view. We also use technology to determine which web browsers our visitors use and the address from which they accessed our sites. This technology does not identify you personally.
Link to Other Sites
This privacy policy applies only to the Company. The website may contain hyperlinks to websites that are not operated by the Company. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of these third-party websites or any association with their operators. The Company does not control these websites and is not responsible for their data practices. We urge you to review the privacy policy posted on any site you visit before using the site or providing any personal data about yourself.
Governing Law
This privacy policy is governed by and construed in accordance with the laws of the Republic of Malta and relevant EU legislation.
|
