This Privacy Notice explains how MDA Academy Malta collects, uses, stores, shares and protects personal data relating to website users, prospective learners, enrolled learners and other persons who contact or interact with the Academy.
The specific categories of personal data collected depend on the nature of your interaction with MDA Academy Malta. We adhere strictly to data minimisation principles, collecting only information necessary for educational delivery, statutory compliance, and learner administration.
| Data Category | Specific Data Elements & Operational Context |
|---|---|
| Identification Data | Full legal name, date of birth, nationality, and government-issued identification details (copy of valid Maltese Identity Card or international passport) collected during admission to verify learner identity and issue accredited award certificates by MDA Academy Malta. |
| Contact Data | Personal email address, mobile telephone number, postal/residential address, and emergency contact details provided during enquiry or registration. |
| Enquiry & Application Data | Programme of interest, enquiry correspondence history, formal application form data, and evidence verifying entry requirement compliance (e.g. proof of age 16+, English language competence confirmation). |
| Learner Administration Data | Enrolment records, intake identifiers, signature-verified classroom and practical attendance registers, tutor observations, and participation records. |
| Assessment & Certification Data | Marked Multiple-Choice Question (MCQ) assessment answer sheets, assessment scores, pass/fail results, Internal Verification (IV) sampling records, reassessment logs (up to 3 attempts), certificate serial numbers, and transcript archives. |
| Complaints & Appeals Data | Information submitted in connection with academic appeals, procedural complaints, investigation notes, Committee minutes, and formal outcome communications. |
| Support & Accessibility Data | Voluntarily disclosed information regarding physical mobility or reasonable accommodation requirements necessary to ensure safe participation during the 4 hours of supervised practical learning (manikin CPR/AED). |
| Website & Communication Data | Name, email address, optional telephone, and enquiry topic submitted through the website contact form, along with timestamp and correspondence history. |
Personal data is processed strictly where an established lawful basis exists under Article 6 of the General Data Protection Regulation (GDPR) and applicable Maltese legislation.
To respond to enquiries, provide programme information, manage applications, verify identity and check programme entry requirements.
To manage attendance, participation, learner support, programme communications and learner administration.
To administer assessment, reassessment, internal verification, progression and certification.
To maintain quality records, monitor programme delivery, respond to complaints and support internal review.
To meet applicable MFHEA licensing, accreditation, audit, reporting and evidence requirements.
To protect the integrity, security and lawful operation of the Academy and its learner records.
Personal data may be processed where necessary to take steps before enrolment, provide educational and administrative services, comply with legal or regulatory obligations, or pursue legitimate institutional interests that do not override the rights and freedoms of the individual. Consent is used only where appropriate. Where special categories of personal data are processed, such as health or disability-related information, the Academy will do so only where there is an appropriate lawful basis and a clear educational, accessibility, safety or legal need.
Personal data is never sold, leased, or disclosed for commercial marketing. It is shared strictly on a confidential need-to-know basis with authorised recipients:
| Authorised Recipient | Legitimate Educational / Regulatory Purpose |
|---|---|
| Authorised Academy Personnel | Head of Institution, designated academic lecturers, practical instructors, assessment invigilators, and quality assurance personnel for delivery, marking, verification, and learner support. |
| Malta Further & Higher Education Authority (MFHEA) | Official educational regulator for licensing inspections, cyclical external quality assurance (EQA) audits, qualification monitoring, and verification of institutional compliance. |
| Professional Advisers & External Quality Auditors | Independent external verifiers, legal counsel, and educational auditors engaged under formal, binding confidentiality and data protection agreements. |
| Contracted IT & Secure Cloud Storage Providers | Secure enterprise document management and communication systems operating under GDPR Article 28 data processor agreements with strict European data residency safeguards. |
| Competent Public Authorities & Law Enforcement | Statutory bodies in Malta where disclosure is mandated by an enforceable court order, health and safety regulation, or statutory obligation. |
Subject to statutory exceptions and legal retention mandates, you have the following rights concerning your personal data:
You may request confirmation as to whether your personal data is being processed, and obtain a free copy of the information held about you.
You may request prompt correction of any inaccurate or incomplete personal data held in our student or inquiry records.
You may request deletion of your data where no longer required, subject to mandatory certification and regulatory record retention obligations.
You may request restriction of processing while the accuracy of your personal data is contested or during formal grievance investigations.
You have the right to receive personal data provided to the Academy in a structured, commonly used, machine-readable format.
You may object at any time to processing based on legitimate institutional interests on grounds relating to your particular situation.
To exercise any data protection right, please submit a written request to hoi@mda.com.mt. We will respond within one calendar month. Identification verification may be required to protect learner confidentiality.
Submitting an enquiry via the website contact form does not in itself constitute a formal application, admission decision, or confirmed reservation of a seat on any accredited programme. Prospective learners will receive current intake dates, course fees, application documentation, and identity verification instructions via email. Information provided via website forms is used strictly to answer your request and is never repurposed for marketing without explicit consent.