LONDON SCHOOL OF BUSINESS & FINANCE (MALTA)
Student Privacy Notice

This Privacy Notice is dated 3^rd April 2024

INTORDUCTION

London School of Business & Finance (Malta) (“LSBF”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Notice (the “Notice”) is a statement of the practices adopted by LSBF in connection with its processing of student personal data and the steps taken to protect it.

This Notice applies to all students enrolled with LSBF, whether full-time or part-time and including alumni. It explains what personal data we collect and process about our students, how and why we collect and process that data and the ways in which we may disclose it and our reasons for doing so. It also provides information on how to exercise your rights as a data subject over your personal data.

We may revise this Notice from time to time, but we will never do so in a manner that undermines your rights.

Please also use the Glossary to understand the meaning of some of the terms used in this Notice.

INFORMATION ABOUT LSBF

This Privacy Notice is a statement of the practices of LSBF in connection with the processing of personal data and the steps taken by LSBF to protect personal data and safeguard students’ right to privacy. LSBF is part of The Global University Systems B.V. group of companies which is made up of different legal entities, details of which can be found at: www.globaluniversitysystems.com.

It is important that you read this Notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your personal data.

This Notice supplements the other notices and is not intended to override them.

Controller

London School of Business & Finance (Malta) is the controller and responsible for your personal data as a student. We have appointed a data protection officer (“DPO”) who is responsible for overseeing questions in relation to this Notice. If you have any questions about this Notice, including any requests to exercise your legal rights, please contact the data privacy officer using the details set out below.

Full name of legal entity: London School of Business & Finance (Malta)

Email address: dpo@lsbf.edu.mt

Postal address: Mediterranean Conference Centre, Triq-I Ipstar, II- Belt Valletta VLT 1645

Please use the words ‘Data Protection Matter’ in the subject line.

GLOSSARY

Below are definitions of certain key terms used in this Notice:

“data subjects” means living, natural persons about whom we process personal data;
“data controller” or “controller” means any entity or individual who determines the purposes for which, and the manner in which, any personal data is processed;
“data processor” or “processor” means any entity or individual that processes data on our behalf and on our instructions (we, being the data controller);
“legitimate interest” means our interest to conduct and manage our business appropriately and responsibly, to protect the reputation of our business, and to provide the best possible services. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests;
“personal data” means data relating to a living individual (i.e., natural person) who can be identified from the data we possess about him or her. This includes your name and surname, address, date of birth, contact details. It does not include information relating to a legal person (such as a company);
“processing” means any activity or set of operations that involves use of personal data. It includes obtaining, recording or holding the data, or carrying out any operation or set of operations on the data including, organising, amending, retrieving, using, consulting, disclosing, erasing or destroying it. Processing also includes transferring personal data to third parties; and
“sensitive personal data” includes information about a person's racial or ethnic origin, political opinions, religious, philosophical, or similar beliefs, trade union membership, physical or mental health or condition or sexual life or his or her biometric data.

PERSONAL DATA WE MAY COLLECT (OR RECEIVE) ABOUT YOU

Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, store and use the following categories of personal data about you:

Category of Personal Data:Identity Data

Examples: Your first name, last name, preferred name, title, date of birth, gender, photocopy of national identity document number and/or passport, languages spoken (and level of proficiency), photographic image

Category of Personal Data:Contact Data

Examples: Permanent home address, current address (if dissimilar), email address, telephone number, mobile number, place of work.

Category of Personal Data:Education Data

Examples: Details of the secondary school and undergraduate school you attended (including the location, start & end date), your average grade, transcript of results and degree certificate.

Category of Personal Data:Course Data

Examples: Details of your student record, including your courses, assessments, work produced, examinations taken, exam scripts, results and grades, repeated units, and other information that may be included in your record as well as your attendance

Category of Personal Data:Employment Data

Examples: Details of current and previous employment, including your position, start & end date and description of employment

Category of Personal Data:Financial Data

Examples: Bank account details, payment details, details about payments to and from you and other details of products/services you have purchased from us.

Category of Personal Data:Video Data

Examples: Video and audio recordings of you at our online lectures (including your online username and any questions raised by you during the online session) will be shared . As a student, participation in our online sessions by video is entirely at your choice. A notice will appear before the start of the online session informing you that it is being recorded.

Category of Personal Data:Marketing Data

Examples: Your marketing preferences.

The data we collect from you will be used by LSBF in accordance with the purposes outlined in this Notice. We collect personal data via website forms, written application forms and documents, email and phone enquiries, research studies and surveys. We also collect via third parties such as: the Authority responsible for regulating further and higher educational institutions and education providers; Jobsplus; the National Research Statistics Office; Identity Malta; the Ministry responsible for Education; the Ministry responsible for Justice; research partners and international affiliates.

We will also collect additional personal data throughout the period of your student enrolment with us.

Students

LSBF process data relating to students as detailed below. Personal data and sensitive personal data may be collected directly from students who avail of specific services offered by LSBF, for example access disability support or counselling services. If you provide LSBF with your data for these purposes, then specific information on data protection will be provided at the point of collection.

LSBF will ensure that student personal data is processed fairly and lawfully in keeping with the principles of data protection and will process personal data under various legal bases depending on the purpose for which the data is collected. These may include:

Where the processing of personal data is a statutory function of LSBF under the Maltese Education Act, Chapter 327 of the Laws of Malta.
Where LSBF is required to process personal data by law including the sharing of data with governmental authorities such as the Ministry responsible for Education; the Ministry responsible for Justice; the Authority responsible for regulating further and higher educational institutions and education providers; the National Research Statistics Office; the National Audit Office; Banks.
Where the processing of personal data is necessary for the formation of a contract with you.
Where the processing of personal data is not related to the official functions of LSBF we may sometimes process personal data based on legitimate interests e.g., for the administration of events, purchasing of tickets, gift shop purchases and the use of our services.

Generally, when processing sensitive personal data, LSBF will seek explicit consent for the processing of data except where another condition applies e.g. disability legislation, legal claims or vital interests.

List of purposes for processing personal data:

Category: Identity Data, Contact Data, Education Data, Employment Data, Financial Data