The Privacy Policy Form is an essential legal document required under both Maltese and EU law for any organization collecting or processing personal data. This document must comply with Malta's Data Protection Act (Chapter 586) and the EU General Data Protection Regulation (GDPR), making it mandatory for businesses operating in or serving customers in Malta. The policy must transparently communicate how personal data is collected, processed, stored, and protected, while also informing individuals of their rights regarding their personal data. Organizations must ensure their Privacy Policy Form is easily accessible, written in clear language, and regularly updated to reflect any changes in data processing activities or regulatory requirements. This document is particularly crucial following the implementation of GDPR and Malta's corresponding local regulations, which impose significant penalties for non-compliance.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Your data doesn't train Genie's AI
You keep IP ownership of your docs
1. Introduction: Overview of the policy scope and importance of privacy protection
2. Definitions: Key terms used throughout the policy, including 'personal data', 'processing', 'controller', 'processor', etc.
3. Information We Collect: Detailed categories of personal data collected and the legal basis for collection
4. How We Use Your Information: Purposes of data processing and legal bases for each purpose
5. Data Sharing and Disclosure: Information about third parties with whom data is shared and circumstances of sharing
6. Data Storage and Security: Information about data retention periods and security measures
7. Your Rights: Explanation of data subject rights under GDPR and how to exercise them
8. International Data Transfers: Information about any data transfers outside the EU/EEA and safeguards in place
9. Changes to This Policy: Process for updating the privacy policy and notifying users of changes
10. Contact Information: Details of the data controller and DPO (if applicable) and how to contact them
1. Cookie Policy: Detailed information about website cookies and tracking technologies - required if the organization uses cookies
2. Children's Privacy: Special provisions for processing children's data - required if services are offered to children
3. Direct Marketing: Specific section on marketing communications and opt-out rights - needed if engaging in direct marketing
4. Automated Decision Making: Information about automated processing and profiling - required if such processing occurs
5. Special Categories of Data: Specific provisions for sensitive data processing - required if processing special categories of personal data
6. Employee Data Processing: Specific provisions for employee data - required for policies covering employee data
7. CCTV and Surveillance: Information about surveillance systems - required if such systems are in use
1. Schedule 1: Data Retention Periods: Detailed table of retention periods for different categories of personal data
2. Schedule 2: Technical and Organizational Measures: Detailed description of security measures implemented to protect personal data
3. Schedule 3: Sub-processors List: List of approved third-party data processors and their roles
4. Appendix A: Cookie List: Detailed list of cookies used, their purposes, and duration
5. Appendix B: Data Processing Activities: Detailed record of processing activities for different data categories
Find the exact document you need
No items found.
Genie’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; Genie’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it
.png)
.png)