1. Introduction
1.1. Welcome to the MaltMUN Society website’s Privacy Notice. We are fully committed to respecting and protecting your personal data. This notice provides you with the necessary information on how we collect, store and process any data which you input through the website. It also provides you with information on your rights.
1.2 This Privacy Policy is for this Website https://maltmun.org.mt which is owned by the Malta Model United Nations Society. This Policy governs the privacy of data subjects who choose to make use of it. If You are a MaltMUN or a foreign Model UN conference registrant, delegate or subscribed to receive emails from Us or a visitor of Our website, You are a recipient of a Service offered by Us and therefore this Policy applies to You.
1.3. This Policy provides You with information in terms of the Data Protection Act – Chapter 586 of the Laws of Malta and any of its subsidiary legislation which is relevant, and the EU General Data Protection Regulation (GDPR). For more information on data protection principles please refer to article 5 of the GDPR here.
1.4. The Policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the Website and Website Owners. Furthermore, the way this Website processes, stores and protects user data and information will also be detailed in this policy.
1.5. Our Privacy Policy informs You about the personal information We collect from You, how We use it, and what Your rights are.
1.6. This is a live Notice and may be subject to change at any time to adapt to the exigencies of the website and to any legislative amendments, updates or clarifications. This Notice was last updated on 25th June 2020.
1.7. The Policy can be easily accessible via a link on each web page.
1.8. If you have any queries as to the content of this Notice, including any requests to exercise your legal rights under data privacy legislation, please contact us on:
2. Definitions
| Cookies | Cookies are small pieces of data stored on your device (such as a computer, mobile or a tablet device) that the Website transfers to the User’s device when the User visits the Website. |
| Data Controller | Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of Your Personal Data. |
| Delegate | A delegate is someone who has successfully applied to attend a MaltMUN Conference. |
| Malta Model United Nations Society | A Maltese registered voluntary organisation (VO/0800). This Privacy Policy may refer to Our organisation as ‘MaltMUN’, ‘Society’, ‘Model UN’, ‘Conferences’, ‘Our’, ‘Us’, or ‘We’. |
| Partners | Partners include, but are not limited to, venue vendors, charitable donors and liaisons. |
| Register of Systems | A register of all systems or contexts in which personal data is processed by MaltMUN. |
| Registrant | A registrant is someone who has registered to attend Our annual conference. People can register online solely through the MaltMUN Website. Registration is considered successful once all fields are filled in and after payment of the delegate fee is effected. |
| Responsible Person | A responsible person is the person who will take responsibility for the Society’s ongoing compliance to this policy. |
| Service | Service refers to the MaltMUN Website (https://maltmun.org.mt) and other content operated by MaltMUN. |
| Service Provider | Service Provider means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively. |
| Subscriber | A Subscriber is someone who has registered to receive MaltMUN email updates. |
| Usage Data | Usage Data is data collected automatically, either generated by the use of the Service or from the Service infrastructure itself. |
| User | A User is any living individual who is using Our Service and is the subject of Personal Data. This term may also be used interchangeably collectively to refer to a visitor, newsletter subscriber, registrant, applicant or business partner. This Privacy Policy will refer to a User as ‘You’ or ‘Your’. |
| Visitor | A Visitor is someone who browses Our Website. |
3. Data Controller
3.1. The Data Controller of this Website is the Malta Model United Nations Society Association which is a Maltese voluntary organisation with registration number VO/0800 whose office is situated in Malta.
3.2. MaltMUN uses Model UN as a tool in teaching young participants about international cooperation. The Society is committed in investing in personal development and nurturing leadership skills, whilst embracing the spirit of the United Nations throughout. We are committed to providing an easy environment within which members may share their ideas whilst refining a range of valuable professional skills. Furthermore, We are intent on participating in editions of Model United Nations (MUNs) all over the world.
4. Lawful Purposes
4.1. Unless otherwise specified in this Notice or anywhere on our website, the Data collected through this website is done on one of the following:
– consent,
– contract,
– legal obligation,
– vital interests,
– public task or
– legitimate interests
4.2. MaltMUN notes the appropriate lawful basis in the Register of Systems.
4.3. Where consent is relied upon as a lawful basis for processing data, We will keep evidence of opt-in consent with the personal data.
4.4. Where communications are sent to users based on their consent, the option for the individual to revoke their consent shall be clearly available and systems shall be in place to ensure such revocation is reflected accurately in the Society’s systems.
5. How we Collect & Use your Data
5.1. We collect your data via different methods, as follows:
- Application Forms (event registration)
- Contact Forms
- Sending emails
- Automated technological interactions
5.2. We may use Your Personal Data to contact You with newsletters, marketing or promotional materials and other information that may be of interest to You. You may opt out of receiving any, or all, of these communications from Us by following the unsubscribe link at the bottom of any email We send or by contacting Us.
5.3. The Personal Data which you provide us may be disclosed to third parties where this is necessary. In such a case, you will be informed that such data will be so disclosed. This is regularly done for the purposes of security clearances for events held at high-security locations. Prior to transferring your data, we ascertain ourselves that such third parties are equipped to treat your Personal Data in accordance with the law and are disallowed from using such Data for their own purposes. The purposes permitted for processing are specified and strictly in accordance with our instructions, or with their own requirements, which We would be made aware of prior to the transfer of Data.
5.4 We do not generally transfer your personal data outside the European Union (EU).
5.5. We will never sell or transfer, without your consent, your personal information to others. However, We may share your information with selected third party partners if you have asked us to do so. Our partners are usually similar organisations with shared social objectives and We will never share Your details without Your explicit consent.
6. Cookies
6.1. Our Website uses only session cookies which are erased when the user closes the Web browser. The session cookie is stored in temporary memory and is not retained after the browser is closed. Session cookies do not collect information from the user’s device. They will typically store information in the form of a session identification that does not personally identify the user.
7. Our Responsibilities
7.1. MaltMUN is committed to processing data in accordance with its responsibilities under the Data Protection Act and the GDPR.
7.2. If You are a MaltMUN registrant, delegate, subscribed to receive emails from Us or a visitor to Our Website We act as the ‘data controller’ of personal data. This means We determine how and why Your data are processed.
7.3. The Responsible Person shall take responsibility for the Society’s ongoing compliance with this policy.
7.4. To ensure its processing of data is lawful, fair and transparent, the Society shall maintain a Register of Systems.
7.5. The Register of Systems shall be reviewed at least annually.
7.6. Individuals have the right to access their personal data and any such requests made to the Society shall be dealt with in a timely manner.
8. Your Responsibilities
8.1. Read this Privacy Policy.
8.2. If You are a MaltMUN or foreign UN Model conference registrant or delegate, please also check the terms and conditions between Us: they may contain further details on how We collect and process Your data.
8.3. If You provide Us with personal information about other people, or if others give Us Your information, We will only use that information for the specific reason for which it was provided to Us. By submitting the information, You confirm that You have the right to authorise Us to process it on Your behalf in accordance with this Privacy Policy.
9. When, how and on whom is data collected?
From the moment you first start interacting with MaltMUN, We are collecting data. There are two ways in which data about You is collected, either by You providing the data Yourself, or the data is collected automatically.
9.1. Types of data We collect
9.1.1. Contact details: Your name, email address and other information required in any form on this website.
9.1.2. Data from Your application: name, date of birth, nationality, personal identification documents and/or passport number, email address, mobile number, current or most recent educational institution, other personal details disclosed in application form in required and/or free text boxes (questions about past conference attendance, delegation achievement, main areas of studies/expertise, place of work (if applicable), experience as a delegate, experience as a chair, chairing style, preferred committee, visa acknowledgment). These requests vary on delegate or chair application forms.
9.1.3. Data that identifies You: Your IP address, URL accessed, time zone setting, method, protocol, referring URL, user agent.
9.1.4. Data on how You use the Website: Your URL clickstreams (the path You take through our site), products/services viewed, page response times, download errors, how long You stay on Our pages, what You do on those pages, how often, and other actions.
9.2.6. Does MaltMUN collect sensitive data?
We do not collect any “sensitive data” about You (such as racial or ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data, health data, data about Your sexual life or orientation, and offences or alleged offences) except when We have Your specific consent, or when We have to comply with the law.
9.2.7. Is data on children collected?
MaltMUN is intended to be used by those who are 16 years of age or over. We do not target the MaltMUN conference or foreign UN Model conferences at individuals below 16 years of age, and we do not knowingly collect any personal data from any person under 16 years of age.
10. Consent
10.1. You have given clear consent for Us to process Your personal data for the specific purpose of participating in the MaltMUN Society’s events.
10.2. If you have previously given consent to Our processing Your data, You can freely withdraw such consent at any time. You can do this by emailing us at info@maltmun.org.mt.
10.3. If you do withdraw Your consent, and if We do not have another legal basis for processing Your information, then We will stop processing Your personal data. If We do have another legal basis for processing Your information, then We may continue to do so subject to Your legal rights.
11. Your Privacy Choices and Rights
11.1. Your Choices
11.1.1. You can choose not to provide Us with personal data: If You choose to do this, You can continue to use the Website and browse Its pages, but We will not be able to process transactions without personal data.
11.1.2. You can turn off cookies in Your browser by changing its settings: You can block cookies by activating a setting on Your browser allowing You to refuse cookies. You can also delete cookies through Your browser settings. If You turn off cookies, You can continue to use the Website and browse Its pages, but the Website and certain services may not work properly.
11.1.3 You can ask us not to use your data for marketing: We do not use Your data for marketing but if in the future this will be done, We will inform You (before collecting Your data) if We intend to use Your data for marketing and if third parties are involved. You can opt out from marketing by emailing Us at info@maltmun.org.mt
11.2. Your Rights
11.2.1. You can exercise Your rights by sending Us an email at info@maltmun.org.mt.
11.2.2. You have the right to Your data: We will give You a copy of your data in CSV form. We will not do so to the extent that this involves disclosing data about any other individual.
11.2.3. You have the right to access information We hold about You: This includes the right to ask Us supplementary information about:
- the categories of data We are processing
- the purposes of data processing
- the categories of third parties to whom the data may be disclosed
- how long the data will be stored (or the criteria used to determine that period)
- Your other rights regarding Our use of Your data
We will provide You with the information within one month of Your request, unless doing so would adversely affect the rights and freedoms of other persons. We will inform You if We cannot meet Your request for that reason.
11.2.4. You have the right to make Us correct any inaccurate personal data about You.
11.2.5. You can object to Us using Your data for profiling You or making automated decisions about You: We may use Your data to determine whether We should let you know information that might be relevant to You. Otherwise, the only circumstances in which We will do this is to provide the Model UN experience to You.
11.2.6. You have the right to be ‘forgotten’ by Us: You can do this by asking Us to erase any personal data We hold about You, if it is no longer necessary for Us to hold the data for purposes of Your use of the Website.
11.2.7. You have the right to lodge a complaint regarding Our use of Your data: Please contact Us first, so We have a chance to address Your concerns. If We fail in this, You can address any complaint to the Office of the Information and Data Protection Commissioner by accessing their contact information at https://idpc.org.mt/.
12. Data Minimisation and Security
12.1. We have physical, electronic, and managerial procedures to safeguard and secure the information We collect.
12.2. MaltMUN shall ensure that personal data is stored securely using modern software that is kept-up-to-date.
12.3. Access to personal data shall be limited to personnel who need access and appropriate security should be in place to avoid unauthorised sharing of information.
12.4. When personal data is deleted this should be done safely such that the data is irrecoverable.
12.5. Appropriate back-up and disaster recovery solutions shall be in place.
12.6. IMPORTANT NOTE: You provide personal data at Your own risk: no data transmission is guaranteed to be 100% secure.
13. Where do We store the data?
13.1. The personal data We collect is processed at Our registered office in Malta and in any data processing facilities operated by the third parties identified below.
13.2. By submitting Your personal data, You agree to this transfer, storing or processing by Us. If We transfer or store Your information outside the EU in this way, We will take steps to ensure that Your privacy rights continue to be protected as outlined in this Privacy Policy.
14. How long do We store Your data?
14.1. The Personal Data collected through the Website shall be kept for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal or reporting requirements. Retention periods are calculated on the basis of the type, nature and sensitivity of the Data in question, for how long it is necessary to keep (on the basis of necessity of processing), the potential risk of any destruction or loss of the Data, and any other applicable legal requirements.
14.2. In some circumstances, instead of disposing of your Data, We may retain it in an irretrievable anonymous manner, in which case it cannot be associated with you, for research, statistical or marketing purposes. Such anonymised Data may therefore be kept indefinitely without further notice to you.
14.3. In some circumstances, you may ask Us to permanently delete any Personal Data about you held by Us.
15. Third parties who process Your data
15.1. MaltMUN uses third parties to facilitate its services.
15.2. When connecting to third party websites You will no longer be subject to this policy but to the Privacy Policy of the new site.
15.3. When We do this, sometimes it is necessary for Us to share Your data with them in order to get these services to work well. Your data is shared only when strictly necessary and according to the safeguards and good practices detailed in this Privacy Policy.
15.4. Here are the details of Our main third-party service providers, and what data they collect, or We share with them, where they store the data and why they need it:
| Service Provider | Data Collected or Shared | Purposes | Place of Processing |
| Paypal (Europe) S.a.r.l. et Cie, S.C.A. and subsidiaries or affiliates | Contact detailsFinancial informationCookies | This service processes payments for Us. | Refer to Paypal Privacy Policy. |
| Gmail by Google L.L.C | Contact detailsApplications to MaltMUN conference and/or to foreign Model UN conferences. | We use this service for sending, storing and tracking emails. | Refer to Gmail Privacy policy. |
| Drive by Google L.L.C | Contact detailsApplications to MaltMUN conference and/or to foreign Model UN conferences. | We use this service to store data generated through Your interaction with MaltMUN. | Refer to Drive Privacy Policy. |
| MailChimp for WordPress | Email address | We use this service to send You emails about MaltMUN. | Refer to MailChimp for WordPress Privacy Policy. |
16. Transaction Security Policy
16.1. This Website uses Secure Sockets Layer (SSL) to ensure secure transmission of Your personal data and to process your payment. You should be able to see the padlock symbol in the status bar of the browser window You are using. The URL address will also start with https:// depicting a secure webpage. SSL applies encryption between two points such as Your device and the connecting server. Any data transmitted during the session will be encrypted or scrambled and then decrypted or unscrambled at the receiving end. This will ascertain that data cannot be read during transmission.
17. Breach
17.1. In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, MaltMUN shall promptly assess the risk to people’s rights and freedoms and if appropriate report this breach to the Office of the Information and Data Protection Commissioner Malta.
17.2. If You believe Your privacy has been breached, please contact Us immediately on info@maltmun.org.mt
18. Changes to this Privacy Policy
18.1. If there are any changes to this Privacy Policy, We will replace this page with an updated version. It is therefore in Your own interest to check the “Privacy Policy And Use of Cookies” page any time You access Our Website so as to be aware of any changes which may occur from time to time.
19. Feedback
19.1. Any comments or suggestions that You may have, and which may contribute to a better quality of service will be welcome and greatly appreciated. Please email Us at info@maltmun.org.mt