The Older Persons Standards Authority (OPSA) is committed to protecting the privacy of visitors and service users and to complying with applicable data protection legislation.
1. Scope and legal framework
The General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act (Cap. 586) regulate the processing of personal data held electronically or in manual form. OPSA is committed to complying fully with the data protection principles set out in this legislation.
OPSA collects and processes information to carry out its obligations in accordance with present legislation. Data is collected and processed in accordance with data protection legislation and the Electronic Communications Networks and Services (General) Regulations, S.L. 399.28.
OPSA will not collect personal information about you as a website visitor unless you provide it voluntarily. The Privacy Policy is accessible through a link at the bottom of each webpage.
2. Information we process and why
Website forms and enquiries
When you use online facilities, including the Contact Us or Feedback form, you may provide personal information such as your name, address, email address and other contact details. This information is processed only for the strict purpose of responding to your enquiry and providing the service you requested.
IP address and location
The web server keeps limited logs about IP addresses or the location of your computer on the Internet for systems administration and troubleshooting. OPSA does not use IP address logs to track your session or behaviour on the site. An IP address may also provide information about your browser and operating system.
Job applications and CVs
To carry out a selection process, OPSA needs to share an applicant’s personal data, including the application and CV,
with members of the selection panel. OPSA will share only the information provided to it. The application and CV will be stored and processed accordingly. Applying for a vacancy at OPSA means that you agree to this disclosure.
3. Consent
How consent is obtained
When you provide personal information, for example by completing a contact form, this is taken as consent to collect the information and use it for that specific reason only. If OPSA asks for personal information for a secondary reason, such as marketing, it will ask directly for expressed consent or provide an opportunity to say no.
How consent may be withdrawn
After opting in, you may withdraw consent for OPSA to contact you or to continue collecting, using or disclosing your information at any time by contacting OPSA using the contact details in this policy.
4. Access to and disclosure of personal data
Personal information is accessed only by OPSA employees assigned to carry out the Authority’s functions in line with its duties prescribed by law. Personal data may be disclosed to third parties when necessary, but only with your consent or as authorised or required by law.
Third-party providers used by OPSA may collect, use and disclose information only to the extent necessary to perform the services they provide to OPSA.
5. Your rights
You may exercise your right to access personal information held about you by OPSA, whether on a computer or in manual files. Requests must be made in writing and sent to the Data Controller using the contact details below. The request must include identification details such as your ID number, name and surname. If OPSA encounters identification difficulties, you may be required to present an identification document.
OPSA aims to respond as quickly as possible and, in any case, not later than one month after receiving the request, unless there is a good reason for delay. If a request cannot be met within a reasonable time, the reason will be explained in writing.
You may request that personal information be corrected, amended, blocked, erased or not used where it is inaccurate. Although OPSA will make reasonable efforts to keep information updated, you are requested to inform OPSA of changes to personal data held about you.
If you are not satisfied with the outcome of an access request, you may refer a complaint to the Information and Data Protection Commissioner. If there is a data breach, the data subject will be informed accordingly.
6. Security
OPSA takes reasonable precautions, follows industry best practices and applies safeguards to protect personal information from unauthorised access and from being inappropriately lost, misused, accessed, disclosed, altered or destroyed.
The website uses Secure Sockets Layer (SSL) to support secure transmission of personal data. A padlock symbol should appear in the browser address field and the address should start with “https://”. SSL encrypts data transmitted between your computer and the connecting server so it cannot be read during transmission.
7. Cookies
Cookies are small pieces of data transferred by a website to a user’s computer hard drive when the user visits the site. The OPSA website makes limited use of cookies. These may include site analytics cookies, which help OPSA measure and analyse how the site is used and improve its functionality. Further information is available in the Cookies Policy.
You may choose to opt out of cookies. Your browser’s help section should explain how to locate and delete stored cookies. Deleting or disabling cookies may affect your experience and may prevent you from using certain site functions.
8. Links to other websites
The OPSA website may contain links to local or international organisations, agencies and other third-party websites or applications. When you leave the OPSA website or are redirected elsewhere, this Privacy Policy no longer applies. OPSA is not responsible for the privacy practices of other sites, and you are encouraged to read their privacy statements.
9. Changes to this Privacy Policy
OPSA may modify this Privacy Policy at any time. Changes and clarifications take effect when posted on the website. If material changes are made, the page will state that the policy has been updated so that users are aware of the information collected, how it is used and the circumstances in which it may be disclosed. Users are encouraged to check the Privacy Policy page whenever they access the website.
10. Contact details
Data Controller
The Chief Executive Officer of the Older Persons Standards Authority is the Data Controller of the Authority and may be contacted at:
Older Persons Standards Authority
The Exchange, it-Telgha ta’ Spencer
Il-Marsa, MRS 1982, Malta
Telephone: (+356) 2348 0031
Email: [email protected]
Data Protection Officer
For requests to access, correct, amend or delete personal information, to register a complaint, or to request more information, contact the Data Protection Officer at [email protected].
Information and Data Protection Commissioner
Level 2, Airways House
High Street, Sliema SLM 1549
Telephone: 2328 7100
Email: [email protected]
Website: www.idpc.gov.mt
Date: 17 September 2026
