GDPR
Data protection governance, employee information and controller to processor responsibilities.
The five pillars
Where the responsibility sits for each part of keeping your data safe.
Microsoft Azure
Cloud hosting, infrastructure protection and shared security responsibilities.
Access control
Communicator's Role-Privilege Module, authorised access and revocation.
Data security
Encryption, activity logging and protection of sensitive HR information.
Incident response
Communicator's existing published Data Breach Response Policy.
Published policies
Both documents are public and kept current. These summaries are here so you know what is in them before you open them.
Privacy Policy
Last updated 24 September 2023How personal information is collected, used and shared across the ICT Services and Communicator Cloud sites, written to the GDPR.
- What is collected, including the location and photograph used to verify a clock-in
- Why it is collected, and the consent that covers marketing
- Who it is shared with: service providers, legal authorities, a business transfer
- Your rights: access, rectification, erasure, portability and objection
Data Breach Response Policy
Last reviewed 11 November 2023What happens if something goes wrong: who to tell, how fast, and what the response looks like from containment through to notification.
- How to report a suspected breach, and what that report has to contain
- The plan: containment, assessment, notification, mitigation, documentation
- Notification of the Maltese authority and affected people without undue delay
- Who to contact, at ICT Services and at the IDPC
Who to contact
For a data question, a subject access request, or to report a breach.
Data Protection Officer
ICT Services Ltd.
228 Constitution Street
Mosta MST9053, Malta
Supervisory authority
IDPC, Malta
Floor 2, Airways House, Triq Il-Kbira
Tas-Sliema SLM 1549, Malta