This privacy policy is applicable to any personal information (as defined by the applicable Data Protection Laws) which is given by the user to KSU via this website KSU process personal data only in compliance with the applicable Data Protection laws


Data Collection

When using this website and its related services through the myKSU platform, users are asked to enter their respective user information. Such user information will be used in accordance with this privacy policy and for the purposes for which it was collected as specified in the respective form.


How We May Use Your Data

KSU shall be entitled to use the user information for the following purposes:

  • to manage effectively services that KSU offers such as the student’s parking permit system and any other services which may be subscibed to through forms accessible through the website;
  • in order to enable KSU to comply with any requirements imposed on us by law;
  • to conduct surveys for reasearch purposes. In such cases, data will not be disclosed to third parties;
  • in order to send you periodic updates and information related to KSU’s events and initiatives (including but not limited to SMS or e-mail). For your convenience you may withdraw consent to receive such material through myKSU platform;
  • to answer your queries and solicit your feedback;
  • to send important notices, such as changes to our terms, conditions and policies;
  • to send you technical notices, updates, security alters and support and administrative messages.
  • for internal purposes such as auditing, risk assessment purposes, internal management, research and statistics, systems administration and the development and improvement of our services.
  • to monitor and analyse trends, usage and activities in connection with our services to understand which parts of our services are of the most interest and to improve the design and content of our platform.
  • to ensure we have up-to-date contact information for you
  • to prevent, detect and/or prosecute any illegal and/or criminal activity which we are bound to report and to meet any other specific legal or contractual obligations.
  • to establish, exercise or defend any legal action;
  • to protect and promote our legitimate interests and the proper conduct of our business.

On What Basis Do We Use Your Personal Information:

  • For the performance of a contract: We process your personal data as necessary in order to provide you with our services when you access the myKSU platform.
  • With your consent: We will process your personal information when you have given your consent to the processing of your personal data for one or more specific purposes set out above.  You have various rights where we are processing your information on the basis of your consent.  For example, if you no longer wish to be on one of our mailing lists for direct marketing purposes, you can choose to opt out at any time by following the “unsubscribe” instructions at the bottom of our promotional emails.  If you have an online account with us, you can also opt out by updating your preferences.
  • For legitimate business purposes: There may be instances where we are compelled to process your personal information in order to safeguard our professional interests and reputation.  Where we use your personal information for this purpose, rest assured that we will take measures to protect your personal information
  • To comply with a legal obligation: There may be instances where we are legally obliged to process your personal information.



You should be aware that by using data may be automatically collected through the use of cookies. Cookies are small text files that store basic information that a website can use to recognise repeat site visits. KSU may use this information to observe your internet use and to compile data in order to improve the website, target the advertising and assess general effectiveness of such advertising, as provided in further detail hereunder.  We shall only process this information for targeting or advertising purpose with your explicit consent, which consent may be withdrawn at any time.

Cookies do not attach to your system or damage the user’s files. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to deny or accept the cookies feature. Note, however, that personalised services may be affected if the cookies option is disabled.

The data generated through cookies on our website can be used for various purposes including the following:


Strictly necessary

These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website.





These cookies collect information about how visitors use a website, for instance which pages visitors go to most often and if they receive error messages. They are used to improve how a website works in future versions.  These cookies are processed only to produce anonymized statistics. 



These cookies allow the website to remember choices you make such as user name, language or region you are in and provide a more enhanced personal experience.   


Targeting or advertising

These cookies are used to deliver content more relevant to you and your interests.  Through such cookies we can track user behavior on other websites and find them again on other websites. 


Google Analytics

Upon visiting our website your browser automatically sends certain data, such as the web address of the page you are visiting and your IP address to Google. Google Analytics is a product which helps website owners to have a better understanding on how visitors engage in their sites. More information on how Google Analytics collects and processes such data can be found at


Our website uses the following different types of cookies:


Session Cookies

A cookie that is erased when you close your web browser. The session cookie is stored in temporary memory and is not retained after the browser is closed. Session cookies do not collect information from your computer. They typically will store information in the form of a session identification that does not personally identify the you.


Persistent Cookies

 A cookie that is stored on your hard drive until it expires or until you delete the cookie. Persistent cookies are used to collect identifying information about the you, such as web surfing behavior or your user preferences for our website.


First Party Cookies

 First party cookies are those cookies that originate from (or are sent to) our website. These types of cookies contain information about your preferences for our website.


Third Party Cookies

Third-party cookies originate from (or will be sent to) another website For example, when our website uses third-party advertising those third-party advertising web sites may use a cookie to track your web habits for marketing purposes


Google Analytics

Upon visiting our website your browser automatically sends certain data, such as the web address of the page you are visiting and your IP address to Google. Google Analytics is a product which helps website owners to have a better understanding on how visitors engage in their sites. More information on how Google Analytics collects and processes such data can be found at


If you are browsing via Google, upon visiting our website your browser automatically sends certain data, such as the web address of the page you are visiting and your IP address to Google. Google will then allow adverts related to the web page you visited to pop up on your Google or browsing session.  Therefore Customers who visit . For Google to be able to process this information it makes use of cookies. Cookies are a small file saved on Customer’s computers to help store preferences and other information that is used on webpages that you visit. Customers can can opt out of Google’s use of cookies by visiting Google’s Ads Settings –


Do Not Track

The “Do Not Track” function is a browser setting that allows visitors not to be tracked by websites.  It sends a message to websites and advertising networks requesting that they do not track the user. “Do Not Track” options are available in a number of browsers including Firefox, Internet Explorer, Chrome, Safari and Opera.  



If you are a Facebook user and are logged on your Facebook account or have consented that your Facebook account remains logged on, upon visiting our website your browser automatically sends certain data, such as the web address of the page you are visiting and your IP address to Facebook. Facebook will then allow adverts related to the web page you visited to pop up on your Facebook page. More information as to how this process works can be found at


Recipients and sharing of your personal information

Your personal information will be received by KSU’s representatives. 

We may also share your personal information with any of the following:

  • The University of Malta administration in order to verify your eligibility as a student.
  • our agents, suppliers and business partners strictly as required in order to carry out the purposes outlined in this privacy notice;
  • our professional advisors and auditors strictly as required for consultation purposes or for compliance with our legal obligations;
  • regulators, governments and law enforcement authorities as and when this is required under applicable laws and regulations;
  • courts, tribunals, arbitrators or other competent bodies who may have authority to request such personal information;


Transfers outside the European Union

We may transfer your personal information outside of Malta. The countries to which your personal information is transferred may not offer an equivalent level of protection for personal information to the laws of Malta. Where appropriate, we will take steps to ensure your information is transferred subject to appropriate safeguards, such as by entering into data transfer agreements. Where we have put data transfer agreements or similar safeguards in place, we may be able to make a copy of this available to you if you contact us via one of the methods set out under the header “Contact Us” below.


How long will we keep your personal information?

We have a data retention policy that sets out how long we keep your information. This policy is based on the type of information, the purpose of collection, and the system within our digital platforms in which the information is held. As a general rule, we keep your personal information for as long as we need to in order to carry out those purposes for which your data has been collected.  Personal data is usually destryed once a user is no longer a student at the University of Malta.  Funding application are kept for a minimum period of ten years in order to comply with our legal obligations.



We use reasonable efforts to safeguard the integrity, availability and confidentiality of all personal data that we process relating to you and regularly review and enhance our technical, physical and managerial procedures so as to ensure that your personal data is protected from:

  • unauthorised access;
  • improper use or disclosure;
  • unauthorised modification;
  • unlawful destruction or accidental loss.


To this end we have implemented security policies, rules and technical measures to protect the personal data that we have under our control. All our representatives and data processors, who have access to and are associated with the processing of personal data, are further obliged to respect the confidentiality of our users’ personal data.

By its very nature however the Internet is not a secure medium and data sent via this medium can potentially be subject to unauthorised acts by third parties. We cannot guarantee the privacy or confidentiality of any information passing over our website.

Moreover, data sent via the Internet may be transmitted across international borders even where sender and receiver of information are located in the same country. Consequently, data relating to you may be transmitted via a country having a lower level of data protection than that existing in your country of residence. We shall accept no responsibility or liability whatsoever for the security of your data while in transit through the Internet.


Third party links

Our website may contain links to third party local and international websites. Please note that such links are not an endorsement by us of any information, products or services in such websites and we shall not accept any responsibility whatsoever for the content, use, availability, privacy practices or the content of any such websites. Please note that upon linking to such other websites, you will no longer be on our website and you will become subject to the privacy policy, if any, of such other website. For this purpose, we urge you to read the terms & conditions and privacy notices of these third-party websites.

No third party is permitted to link any other website to our website without obtaining our prior written consent.


Your Rights

You have the right to:

  • Withdraw your consent when your personal data is processed on the basis of your consent.  The withdrawal of your consent shall not affect the lawfulness of processing before the withdrawal of your consent. 
  • Ask KSU about the processing of your personal information, including to be provided with a copy of your personal information held by KSU. 
  • to request the correction and/or deletion of your personal information, or restrict or object to the processing of your personal information;
  • to request to obtain and reuse your personal information for your own purposes across different services; and
  • to complain to a competent supervisory authority, or to a court of law, if your data protection rights are violated or you have suffered as a result of unlawful processing of your personal information.


If you would like access to the information that we hold about you, if any of the information that we hold about you is inaccurate or out of date, or if you wish to withdraw your consent to the processing of your data or to restrict or object to us processing it, please let us know by getting in touch via one of the methods set out under the header “Contact Us“ below. 

If you object to our processing of your personal information, we will respect such requests in accordance with our legal obligations.  Your objection may mean that we may not be able to perform the actions necessary to achieve the purposes set out above or to provide you with our services.

KSU may be required or entitled to retain your information to comply with legal and regulatory obligations and to protect and exercise our legal rights and legitimate interests.


In addition to those rights outlined above you also have an unconditional right to object at any time to the processing of your personal information for direct marketing purposes by contacting us via one of the methods set out under the header “Contact Usbelow.




We may change this Privacy Policy from time to time and you should check it regularly. Your use of the KSU website will be subject to the Privacy Policy on the Site at the time of each use.

Data Controller

Kunsill Studenti Universitarji (KSU) is the controller of your personal information.


Any queries or comments about this policy or the processing of your data should be forwarded to [email protected]