Privacy Policy

Chiswick House School and St Martin’s College (CHSMC), as Data Controllers are committed to protecting your privacy. CHSMC will not collect any personal information about you unless you provide it voluntarily. Any personal data will only be processed insofar as is necessary to provide one or more services you have requested or otherwise with your consent.  Any personal information communicated to CHSMC is kept within its own records in accordance with the Data Protection Act (Chap. 586 of the Laws of Malta) as currently in force as well as General Data Protection Regulation (Regulation (EU) 2016/679).

The Controller in respect of personal data of Website Visitors is and the latter can be contacted at the above- specified email address or telephone number.

(a) All Website Visitors
What Personal Data do we collect?
In accordance with general practice, certain information will be automatically logged in respect of every request made, which information comprises (a) name or network address of the computer making the request (b) the date and time of connection (c) the http request containing identification of the documentation collected and (d) the status code of the request. This information may be utilised for system administration, bug tracking and producing usage statistics. For website security purposes and to ensure that this service remains available to all users, we monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage.

We use cookies to help identify your computer so we can optimise your browsing experience (cookies are very small text files that are stored on your computer when you visit some websites). When visiting our Website for you will be notified of
our use of cookies and your confirmation will be requested. You can still disable any cookies already stored on your computer at any time. You may also change your browser settings so as to allow/disallow cookies. Note that, if you disable the cookies we may not be able to provide you with a tailored user experience. For further information please consult our Cookies Policy.

If you read or download information from our site, we automatically collect and store the requested web page or download, whether the request was successful or not, the date and time when you accessed the site, the Internet address of the web site or the IP Address of the computer from which you accessed the site, the operating system of the machine running your web browser and the type and version of your web browser.

We collect and process personal data relating to Website usage for the purposes above described being in our legitimate interest to do so as to provide an optimal browsing experience.

(b) Contact Services: Information Requests
What personal data do we collect?
When using the Contact Services, we ask you to provide your name and email address (collectively, “Contact Data”). This information will be provided by you by filling the online form on our Website. The information will be used so that our representatives can contact you with further details and will be processed by us on the basis of your request prior to providing any Services.

(c) Contact Services: Subscribing to our Mailing List
What personal data do we collect?
When subscribing to our mailing list, we will collect your Contact Data and store it in our mailing list. We will use your Contact Data to send you updates regarding CHSMC. We will process your data based on consent. You may withdraw your consent at any time by sending an email to [email protected]

(d) Enrolment
What Personal Data does CHSMC collect?
When enrolling with CHSMC as a minimum we will collect your name, surname, contact details (email and phone) and address and the details of the person who will be receiving the education services (if not the same). Said details will be included in the enrolment form and will be subject to the privacy policy attaching to the enrolment form and said personal data will be processed in order to perform the Services and otherwise to comply with our legal and regulatory requirements.

Information we collect regarding Your Website usage is routinely deleted/ rendered anonymous. When submitting an Information Request, your Contact Data will be retained until you are contacted by our representatives with further information regarding our Services, your information will be retained throughout our correspondence and will be deleted if we do not hear back within six (6) months from the last communication. If you subscribe to our mailing list Your Contact Data will be retained until you unsubscribe.

1. We will share the data with other entities forming part of the CHSMC Group as well as any other persons appointed by CHSMC to provide any of the Services.
2. We may also share your data with the competent authorities, including the Ministry of Education, if we are required to do so in order to comply with any applicable law, regulation or court order.
3. From time to time CHSMC, may need to disclose personal, commercial or other data pertaining to third parties engaged to perform services on behalf of CHSMC (for example consultants, banks, legal advisors, lawyers, accountants and IT specialists).

Any personal data processed by CHSMC is stored on servers within the EU. However, CHSMC may, as part of the Services, need to share your data with third parties established or operating in other countries which may not have equivalent data protection or confidentiality/secrecy laws in place. While all efforts are made to minimise the risk to your personal data, the processing in countries which do not afford equivalent protection exposes the personal data to additional risk of disclosure and breach. The sharing of such data shall be carried out subject to appropriate safeguard being in place including the use of transfer model clauses. Furthermore, any such disclosure shall not concern any special category of data except with the specific consent of the data subject and shall only be done if necessary for the provision of the Service(s).

You have certain rights in relation to your personal information. If you would like further information in relation to these or would like to exercise any of them, please contact us via email at [email protected] at any time. You have the following rights:

1. Access to your information: You may, at any time submit a request to know what information is held in your regard, if any. You can ask us for a copy of your personal information; confirmation as to whether your personal information is being used by us; details about how and why it is being used; and details of the safeguards which are in place if we transfer your information outside of the European Economic Area (“EEA”).
2. Rectification: We will use our best endeavours to update and maintain the data as accurate as possible within a reasonable time. You may, at any time, submit a request to have any inaccuracies corrected. We assume no responsibility or liability for the accuracy or correctness of any data provided if changes are not communicated to us.
3. Right to be forgotten: where processing is based on consent and in other specific circumstances You may request to have any or all of your details erased. You can ask us for further information on these specific circumstances by contacting us using the details above. We will pass your request onto other recipients of your personal information unless that is impossible or involves disproportionate effort. You can ask us who the recipients are using the contact details above.
4. Restriction of processing: You may, at any time, submit a request to restrict the processing of your data. You have a right to ask us to restrict the way that we process your personal information in certain specific circumstances. You can ask us for further information on these specific circumstances by contacting us using the details below. We will pass your request onto other recipients of your personal information unless that is impossible or involves disproportionate effort.  You can ask us who the recipients are using the contact details below.
5. Right to data portability – You may request to receive your personal information in a structure commonly used and machine readable format and have it transferred to another controller. This right only applies where we use your personal information on the basis of your consent or performance of a contract and where our use of your information is carried out by automated means.
6. Right to object and automated individual decision-making – where processing is based on the performance of a task in the public interest or based on our legitimate interests, You may object to the processing, however, this is subject to any of our overriding interests including in particular compliance with legal requirement on our part. In such case we will aim for a result that is mutually satisfactory such as taking your personal information off the live environment and archiving it for the necessary period to enable us to comply with our legal requirements.
7. Right to object to direct marketing: You may object to the processing of your personal data for the purpose of direct marketing. In the event of such an objection, We will no longer be able to provide you with updates regarding our products and services.

We will consider all such requests and provide our response within a reasonable period (and in any event within one month of your request unless we tell you we are entitled to a longer period under applicable law). Please note, however, that certain personal information may be exempt from such requests in certain circumstances, for example if we need to keep using the information to comply with our own legal obligations or to establish, exercise or defend legal claims.  If an exception applies, we will tell you this when responding to your request.  We may request you provide us with information necessary to confirm your identity before responding to any request you make.

Any questions or requests for further information should be addressed to [email protected] You are advised that should you feel that we have breached our commitments in terms of this Privacy Policy you may file a complaint with the Information and Data Protection Commissioner in Malta.

The Website may have a number of links to websites of other Maltese and international organisations and agencies. In some cases, for the benefit of the Website Visitor. It is important for you to note that upon linking to another site, you are no longer on our website and you become subject to the privacy policy of the new site.

CHSMC is continually improving and adding features to its Website and improving and adding to our existing products, services, and programmes. Because of these ongoing changes, changes in the law, and the changing nature of technology, CHSMC’s data practices will be adapted accordingly. If there are any changes to this privacy policy, we will post a notice to this effect on our website. It is therefore in your own interest to check the “Privacy Policy” and “Cookies” pages any time you access our website so as to be aware of any changes which may occur from time to time.

CHSMC will use its best endeavours to ensure that adequate and reliable security measures are in place to protect personal data from being lost, misused or illegally accessed.