GDPR rights

Your GDPR rights

Under the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the Malta Data Protection Act (Cap. 586 of the Laws of Malta - 2018), you have the right to request, in relation to your personal data:

  1. Access to all the information we hold about you, including details as to why we’re keeping it and what we’re using it for;
  2. That any errors be corrected (rectification of inaccuracies); 
  3. That your data be deleted (erasure);
  4. Restriction of processing; 
  5. A copy of your personal data (data portability).

At any time you may also object, on grounds relating to your particular situation, to processing of personal data concerning you. In other words, this means that if there’s something you don’t like about the way your personal information is being utilised by the University, you have the right to ask us to stop using it in that manner. 

Such requests should be made to UMRI in the first instance provided they concern the data stored in the University’s repository. Requests may be made by pressing the button below to fill the GDPR form.

Please note that according to the Malta Data Protection Act and the GDPR, we do not need to satisfy the above-mentioned requests in circumstances where this would seriously hinder research objectives (for instance, if your data has already been processed for a specific study and you ask for it to be deleted, we are still allowed to use it for that study).

UMRI will do its utmost to comply with your wishes. In situations where we are unable to do so, we will always explain the reason for this to you. 

 
Pursuant to art. 13 of the General Data Protection Regulation (GDPR - EU Regulation 2016/679), we inform you that the particulars collected here will be used by the data controller, UMRI, to address the request you have submitted. The data is processed on the basis of UMRI's legitimate interest to make the exercise of your GDPR rights simple for you and thus ensure GDPR compliance on its part. Your personal details will be deleted once your case has been closed and will not be disclosed to any third parties unless this is strictly required by law. You may exercise the rights provided for in art. 15/16/17/18 GDPR (access, rectification, erasure, restriction of/objection to processing, etc.) by contacting UMRI at umri.platform@um.edu.mt. Complaints may be lodged with the University's Data Protection Office by sending an email at dpo@um.edu.mt, or with the Information and Data Protection Commissioner (IDPC) by filling out the form available here.

https://www.um.edu.mt/platforms/umri/gdprrights/