Last updated: June 2025
You can download any of the legal documents in PDF format, using the link below:
Introduction
Property Malta Foundation and its affiliates (“Property Malta” or “we” or “us”) care about your privacy and are committed to protecting the data pertaining to its clients that it holds as data controller. For such reason, in exercise of our transparency and in compliance with our obligations under the General Data Protection Regulation (the “GDPR”) and the Data Protection Act (Chapter 586 of the Laws of Malta) (the “Act”), this Privacy Statement has been compiled.
For the purposes of this Privacy Statement, the data controller shall be the Property Malta Foundation, a public private foundation established under the laws of Malta, bearing registration number LPF249 and having its registered office in MDA, Triq l-Ursolini, Gwardamangia, Pieta’, Malta.
This notice applies to the Malta Property Price Registry (the “Registry”). There may be instances where the content of this Privacy Statement conflicts or is inconsistent with the terms of any other service or agreement between you and us. In such an instance, for the purposes of the Registry the content of this Privacy Statement shall prevail. Notwithstanding anything herein mentioned, any consents, authorisations, waivers and permissions that were already provided by yourself to us, shall continue to apply in full force and effect, to the extent permissible by applicable law.
This Privacy Statement details all the information that we collect and hold about you, the purposes for such collection, how that information is being used, with whom and in which special circumstances it is shared, for how long it is retained and what processes are undertaken to ensure that your information remains confidential and secure. For the purposes of this Privacy Statement “personal data” shall mean any information relating to an identified or identifiable natural person, and is intended to include all data defined as “personal data” under the GDPR.
Scope of this Privacy Statement
This Privacy Statement applies to personal data we collect about you when you subscribe for access to and use of the Registry that we operate and maintain. We may also collect information from you in other ways, including information collected during technical support contacts, on registration forms, and/or from third parties.
The Personal Data We Collect
The personal data that Property Malta may collect about you includes:
- Identity and Contact Information
Including your full name and surname; date of birth; nationality; home address; online user identities and subscriptions; email address; landline and mobile numbers; work, and personal phone numbers. Your personal data may also be collected from anti-money laundering checks, sanctions, due diligence checks, external intelligence reports and other sources for compliance purposes. - Transaction Information
Including bank account details, credit and debit details; payment details and history, and contract information, and billing information. - Correspondence
Includes all information that you provide us with face-to-face, telephonically, by post, email, online or otherwise for purposes related to the Registry and any technical support that might be required. - Technical Information
Includes details about your device, your browser, how and when you use the Registry, and IP addresses. Such details include cookies and similar technologies that may be used to, or are capable of recognising you, remember your preferences and select the content we provide you with.
When and How your Data is Collected
The personal data that we collect pertaining to you shall be strictly necessary in terms of the relevant laws and regulations and what is required for the proper functioning of the Registry including our legitimate interests. Should any of this information not be made available for us to process, we may not be able to address a request or provide you with access and use of the Registry. Your personal data is gathered from a number of sources including through your subscription to the Registry; the information that you provide in your profile hosted by the Registry; the provision of technical support, consultation, or Registry information; any publicly available sources of information; information from third party providers (eg. information that helps the combat against fraud); and the process of maintaining and upgrading the Registry.
How We Use Your Personal Data
Property Malta shall not use your personal data without your express consent or without having a lawful reason to use it. The legal basis for which Property Malta will be processing your personal data shall be in terms of Clause 6(1)(b), 6(1)(c) and 6(1)(f) of the GDPR for the use of your personal data for the purposes of performance of the contract we are entering into with you, and complying with a legal obligation.
Property Malta shall further use your personal data in the following ways:
- To fulfill your subscription requests to the Registry and make use of the Registry easier for you to use, such as by identifying you across platforms or devices for a consistent user experience.
- To provide customer support, and communicate with you about your subscriptions, or accounts held with us, requests, questions and comments.
- To manage and administer your subscription account to the Registry and process payments made by yourself.
- To manage our relationship with our vendors, suppliers and other business partners, and communicate with them.
- To inform you about important news about Property Malta, our new products and services, product updates, technical support issues, relevant market updates, events and special offers we think you may be interested in.
- To protect the security and integrity of the Registry, website, systems, servers and other technical assets.
- To respond to and manage complaints or proposals.
- To compile a data profile to understand your choices and preferences in order to provide you with a better service and guide you accordingly.
- To manage risk and prevent and detect fraud or other prohibited or illicit activity.
- To provide other companies with statistical information about our users, without the ability to identify any individual user.
- To meet legal requirements, or as required by a judicial process, or a government request.
- To comply with industry standards and our policies.
- To establish, exercise or defend a legal claim.
- To ensure business continuity and security.
There are instances in the above purposes where we process your personal data in our legitimate interest including the ability to contact you should your consent be required for the processing of personal data for other purposes; updating you with the products and services offered by us provided you opted-in to marketing communications; and complying with our legal obligations and duties arising both from law and contract as follows:
- to detect and prevent illicit activity. We are not only bound to comply with our legal and regulatory obligations, but also perform such detection and prevention exercises in our legitimate interests with or without your prior consent. We may perform customer due diligence, sanction list screening, and government database checks as may be necessary.
- to preserve our rights. The use of your personal data may be used by us in our exercise of protecting the rights permitted to us at law. These include but are not limited to the filing of actions before judicial fora and obtaining advice from legal and other professional counsel.
- to perform marketing. Unless otherwise instructed we may use your personal data to provide you with updates to our offered products and services which might interest you.
- to improve our products and services. Your information may be used to analyse, assess and improve our products and services being used by or made available to you.
With Whom We Share Your Personal Data
We may also disclose your personal data to third parties, including:
- All our employees, affiliated companies, consultants, and associates (including their employees, officers, directors, service providers and sub-contractors);
- Our vendors, subcontractors, and processors; and/or business partners for purposes related to those described above;
- Law enforcement or other government agencies and officials;
- Our contracted service providers that process personal data on our behalf for the purposes of creating, administering and maintaining the Registry, payment processing, research and analytics, marketing, customer support and data enrichment;
- Professional advisers who provide consultancy, legal, insurance and accounting services;
- Our auditors, regulators and any other entity appointed by our regulator to carry out investigations or audits of our activities;
- Any other entity in connection with a potential or actual corporate restructuring, merger, acquisition or takeover, including any transfer or potential transfer of any of our rights and duties under any agreement held by us with you;
- Courts of law, tribunals and other dispute resolution bodies;
- The Data Protection Commissioner;
- Local and international Financial Intelligence Agencies and other fraud and financial crime prevention agencies;
- Tax authorities, trade associations, credit reference agencies;
- Market researchers;
- Insurers/re-insurers and insurance companies;
- IT and telecommunication service providers, data processors, and IT advisory companies.
Transfers Outside of the EU/EEA
Some of the entities listed in the preceding section to whom your personal data may be transferred may be in countries outside of the European Economic Area (EEA). Since the laws belonging to such countries may not provide the same level of protection of your personal data, we shall ensure that there exist Some of the entities listed in the preceding section to whom your personal data may be transferred may be in countries outside of the European Economic Area (EEA). Since the laws belonging to such countries may not provide the same level of protection of your personal data, we shall ensure that there exist appropriate safeguards in place between us and the relevant counterparty prior to sharing your personal data with these entities in such jurisdictions. One such effective measure is the entering into of standard contractual clauses approved by the European Commission for transfers of personal data to third countries.
Marketing
Property Malta may offer you the opportunity to subscribe to be in receipt of different types of communication and information related to our products and services. Whenever available, you may subscribe to e-newsletters or other publications and opt to receive marketing communications and other special offers from us via email. You may at any time choose to stop receiving any marketing material from us by contacting us. There may be the possibility of you continuing to receive marketing material for a brief period until your request is processed.
Your Rights
The GDPR and the Act provide you with certain rights regarding your personal data. The following is a brief description of some of those rights:
- Information, Access and Portability. You may request that we inform you what personal data pertaining to you is being collected, how it is being used, how long it will be kept by us and whether it will be shared with any third parties. You have the right to obtain confirmation as to whether your personal data is being processed, and, where that is the case, reasonable access to the said data. To the extent required by applicable law, you may request the transmission of the personal data you have provided to us to you or another entity in a structured, commonly used and machine-readable format.
- Objection. You may object to any use or disclosure of your personal data. This right applies in specific circumstances and where your personal data is processed (i) for a task in the public interest; (ii) for the exercise of official authority; (iii) for our legitimate interests; (iv) for scientific, historical or statistical purposes; or (v) direct marketing purposes. We may continue to process your information if we have another legitimate reason for doing so.
- Rectification and Deletion. You also have the right to request to correct incomplete, inaccurate or outdated personal data. Where available and necessary, you may be asked to provide evidence of the inaccuracies. You may also request the deletion of your personal data, as permitted under applicable law. This may apply, for instance and amongst others, where (i) your data is no longer needed for the original reason it was collected or used; (ii) you initially consented to the use of your data, but have now withdrawn your consent; (iii) you have objected to the use of your data; (iv) your interests outweigh ours for using it; and (v) you have objected to the use of your data for direct marketing purposes.
- Restriction. You may request that we restrict processing of your personal data. Again, there may be situations where we may be entitled to continue processing your information and / or to refuse that request.
- Withdrawal of Consent. You may withdraw any consent you previously gave us regarding the processing of your personal data at any time. Such withdrawal will not affect the lawfulness of the processing before your consent was withdrawn.
To exercise any of your abovementioned rights please use the contact details set out in the ‘Contact Us’ section below. You may also choose to file a complaint to the data protection regulator in your country of residence or work, or to the Malta Information and Data Protection Commissioner’s Office by visiting https://idpc.org.mt.
Your exercise of any of the above rights shall be without charge, provided that any such request is not unfounded or excessive. Before adhering to any request that may be made to Property Malta, we may ask you to verify your identity and/or provide other details to help us respond to your request.
Data Security
Property Malta takes care to protect the security of your personal data through the utilisation of various methods. We apply appropriate physical, technical and organisational measures that are reasonably designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and against all other unlawful forms of processing. These security measures also extend to third party service provider obligations to keep all personal information confidential and undertake the necessary and appropriate technological and organisational measures that meet the relevant requirements stipulated at law.
Data Retention
We keep your personal data for as long as is necessary to fulfill the purposes outlined in this Privacy Statement, to adhere to our policies and applicable laws. In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for records and other transactional and documentary evidence created in the provision of these services is of ten (10) years.
Changes to this Privacy Statement
This Privacy Statement may be updated from time to time, and any changes thereto will be applied on here and the revision date in this Privacy Statement shall be duly updated. Your continued use of the Registry following any relevant updates to this Privacy Statement shall be considered to be an acceptance of those changes.
Contact Us
If you have questions or complaints in relation with this Privacy Statement, or would otherwise like to exercise your rights described herein, please contact us via email at ppr-admin@propertymalta.org, by telephone on (+356 20334897), or by post at Property Malta, c/o MDA, Triq l-Orsolini, Gwardamangia, Pieta’ PTA1227, Malta.