Maltese Privacy & Data Protection policy

How we use your personal information

Your information will be held by International Passenger Protection (Malta) Limited (the "Company" or "us"/"our") which is a privately-owned insurance intermediary.

How we use your personal information

Our policies in EEA are underwritten by Liberty Mutual Insurance Europe SE. This privacy notice is to let you know how we promise to look after your personal information. This includes what you tell us about yourself, what we learn by having you as a customer and the choices you give us about what marketing you want us to send to you. This notice explains how we do this and tells you about your privacy rights and how the law protects you.

Our Privacy Promise

We promise:

  • To keep your data safe and private
  • Not to sell your data
  • Operate at all times within the provisions of the Data Protection Act (laws of Malta, Act XX 2018) (Chapter 586) ('the Act') implementing the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR')

How the law protects you

As well as our Privacy Promise, your privacy is protected by law. This section explains how that works.

Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. This includes sharing it outside the Company. The law says we must have one or more of these reasons:

  • To fulfil a contract we have with you, or
  • When it is our legal duty, or
  • When it is in our legitimate interest, or
  • Where there is a vital interest, or
  • When you consent to it

A legitimate interest is when we have a business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is.

Here is a list of all the ways we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are.

What we use your personal information for

Our reasons

Our legitimate interest

To manage our relationship with you

To develop new ways to meet our customers' needs

To provide guidance about our products and services

Your consent

Fulfilling contracts

Our legitimate interests

Our legal duty

Keeping our records up to date

Seeking your consent when we need it to contact you

Being efficient about how we fulfil our legal duties

To develop and manage our brands, products and services

Fulfilling contracts

Our legitimate interests

Our legal duty

Developing products and services

Being efficient about how we fulfil our legal and contractual duties

To deliver our products and services

To make and manage customer payments

Fulfilling contracts

Our legitimate interests

Our legal duty

Being efficient about how we fulfil our legal and contractual duties

Complying with regulations that apply to us

To detect, investigate, report and seek to prevent financial crime

To manage risk for us and our customers

To obey law and regulations that apply to us

To respond to complaints and seek to resolve them

Fulfilling contracts

Our legitimate interests

Our legal duty

Developing and improving how we deal with financial crime, as well as doing our legal duties in this respect.

Complying with regulations that apply to us

Being efficient about how we fulfil our legal and contractual duties

To run our business in an efficient and proper way.This includes managing our financial position, business capability, planning, communications, corporate governance and audit.

Our legitimate interests

Our legal duty

Complying with regulations that apply to us

Being efficient about how we fulfil our legal and contractual duties.

To exercise our rights set out in agreements or contracts

Fulfilling contracts

 

Where we collect personal information from

We may collect personal information about you from these sources:

Data you give to us:

  • When you apply for our products and services
  • When you talk to us on the phone
  • When you use our website
  • In e-mails and letters
  • In claims forms and other documents

Who we share your personal information with

How long we keep your personal information

The Company may keep your data for up to 10 years for one of these reasons:

  • To respond to any questions or complaints
  • To show that we treated you fairly
  • To maintain records according to rules that apply to us

We may keep your data for longer than 10 years if we cannot delete it for legal, regulatory or technical reasons.

How to get a copy of your personal information

You can access your personal information we hold by writing to us at this address:

Compliance Officer

International Passenger Protection (Malta) Limited

Vision Exchange Building

Triq It-Territorials

Zone 1

Central Business District

Birkirkara

CBD 1070

Or by e-mail at:

info@ippmalta.com

Letting us know if your personal information is incorrect

You have the right to question any information we have about you that you think is wrong or incomplete. Please contact us if you want to do this.

If you do, we will take reasonable steps to check its accuracy and correct it.

What if you want us to stop using your personal information?

You have the right to object to our use of your personal information, or to ask us to delete, remove or stop using your personal information if there is no need for us to keep it. This is known as the “right to object” and “right to erasure” or the “right to be forgotten”.

There may be legal or other official reasons why we need to keep or use your data. But please tell us if you think that we should not be using it.

We may sometimes be able to restrict the use of your data. This means that it can only be used for certain things, such as legal claims or to exercise legal rights. In this situation, we would not use or share your information in other ways while it is restricted.

You can ask us to restrict the use of your personal information if:

  • It is not accurate
  • It has been used unlawfully but you do not want us to delete it
  • It is not relevant anymore, but you want us to keep it for use in legal claims
  • You have already asked us to stop using your data, but you are waiting for us to tell you if we are allowed to keep on using it.

If you want to object to how we use your data or ask us to delete it or restrict how we use it, please contact us.

How to withdraw your consent

You can withdraw your consent at any time. Please contact us if you want to do so.

Where we process your personal data based on your consent, , you can withdraw your consent at any time. Please contact us if you want to do so.

How to access your data

You can ask us for a copy of any personal data that we may hold about you (subject to certain exemptions). If you would like access to your personal data, please contact us.   

How to transfer your data to another party

In certain circumstances, you have the right to request that your information be compiled into a common, machine-readable format and either provided directly to you or sent by us to a third-party you nominate. If you request this, we will either act upon your instruction and confirm to you that we have done so, or if there is a valid reason that this cannot be done, we will tell you why. Please contact us if you want to do so

Object to automated decision making

You have the right to request a review of any decisions made about you that involved fully automated processing. Please contact us if you want to do so..    

How to complain

Please let us know if you are unhappy with how we have used your personal information. You can contact us by writing to:

Compliance Officer

International Passenger Protection (Malta) Limited

Vision Exchange Building

Triq It-Territorials

Zone 1

Central Business District

Birkirkara

CBD 1070

Or via e-mail:

info@ippmalta.com

You also have the right to complain to the Office of the Arbiter for Financial Services, Notre Dame Ditch, Floriana or electronically via complaint.info@asf.mt (Tel: 80072366)