The
General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection
Act (Cap 586) regulate
the processing of personal data whether held electronically or in manual form. The
National School Support Services (NSSS) is set to fully comply with the Data
Protection Principles as set out in such
data protection legislation.
Purposes
for collecting data
The NSSS strives to enhance the holistic
development of ALL children. NSSS provides equitable and high-quality services
focusing on the physical, social, emotional, psychological, cultural, and
behavioural development of children within an inclusive-oriented culture, aimed
at eliminating challenges and barriers, to help children reach their full
potential.
The NSSS collects and processes information to
carry out its obligations in accordance with present legislation. All data is collected and processed in
accordance with Data Protection Legislation,
the
Education Act (Cap. 605) and the Processing of Personal Data (Education Sector)
Regulations (S.L. 586.07).
Recipients
of data
Personal Information is accessed by the employees
who are assigned to carry out the functions of the NSSS. Personal Data will be disclosed to
a number of data processors who provide the various services on behalf of the
NSSS and
any
relevant Health Authorities if and as necessary. Disclosure can also be made to third parties
but only
as authorized by law.
Your
rights
You are entitled to know, free of charge,
what type of information the NSSS holds and processes
about you and why, who has access to it, how it is held and kept up to date, for
how long it is kept, and what the Unit is doing to comply
with data protection legislation.
The GDPR establishes a formal procedure
for dealing with data subject access requests.
All data subjects have the right to access any personal information kept
about them by the NSSS, either on computer
or in manual files. Requests for access to personal information by data
subjects are to be made in writing and sent to the Director of the NSSS. Your identification details such as ID
number, name and surname have to be submitted with the request for access. In case we encounter identification
difficulties, you may be required to present an identification document.
The NSSS aims to comply as
quickly as possible with requests for access to personal information and will
ensure that it is provided within a reasonable
timeframe and in any case not later than one month from receipt of
request, unless there is good reason for delay. When a request for access
cannot be met within a reasonable time, the reason will be explained in writing
to the data subject making the request. Should
there be any data breaches, the data subject will be informed accordingly.
All data subjects have the right
to request that their information is not used or is amended if it results to be
incorrect. Data subjects may also request that their data is
erased.
These rights may be restricted, if applicable, as per
Data Protection Legislation.
In
case you are not satisfied with the outcome of your access request,
you may refer a complaint to the Information and Data Protection Commissioner,
whose contact details are provided below.
Retention Policy
Your
personal data is collected under one of the legal grounds outlined in Article 6
of the GDPR, depending on the service being provided.
The retention requirements for the data
processed within the NSSS are outlined in the
specific retention policies.
Data
that needs to be destroyed after the noted timeframes will be disposed of in an
efficient manner ensuring that such information is no longer available within
the NSSS.
The Data Protection Officer may
be contacted as follows:
Email:
Telephone:
2598 1305
Postal Address:
Data
Protection Officer
Ministry
for Education, Sport, Youth, Research and Innovation
Office
of the Permanent Secretary
Great
Siege Road
Floriana
VLT 2000
Data Controller
The Director National School Support
Services may be contacted as follows:
Email:
Telephone:
2598 3497
Postal Address:
National School Support
Services,
Fra Gaetano Pace Forno Street,
Hamrun.
The
Information and Data Protection Commissioner
The
Information and Data Protection Commissioner may be contacted at:
Email:
idpc.info@idpc.org.mt
Telephone:
2328 7100
Postal Address:
Level 2, Airways
House,
High Street,
Sliema SLM 1549