Data Protection Notice
We at the BUILDING AND CONSTRUCTION AUTHORITY (BCA) of The Exchange, It-Telgha ta' Spencer,
Marsa, MRS 1982 are committed to protecting your personal data. Before submitting this application, please take
the time to read the below, which is applicable to you insofar as you are a data subject as understood by the EU
General Data Protection Regulation (2016/679) - 'GDPR', briefly explaining how we, as a data controller, process
your personal data in accordance with the GDPR and other applicable privacy laws including, in particular, the
Data Protection Act (Chapter 586 of the Laws of Malta).
WHY WE NEED YOUR PERSONAL DATA - We need your personal data (the information you have provided to
us in the application above that identifies you as an individual) to evaluate your request for a licence as required
by the Construction Industry Licensing Regulations, 2023 (S.L. 623.09) – the ‘Regulations’ and, if successful, to
grant you the said licence. In this case, since this data collection (and retention) is mandated by the Regulations,
our legal basis for processing the personal data provided to us above is necessity for compliance with a legal
obligation to which we are subject (Article 6(1)(c) of the GDPR). At times, we may also be compelled by law to
share your personal data with third parties, for example, other public authorities and/or Government departments
and/or the Courts of Malta or when we are compelled by law (including the Regulations) to publish certain details
about (for example should your licence be revoked or suspended). In such cases, we also rely on the same
Article 6(1)(c) of the GDPR to process your personal data in this way.
When obtaining personal data relating to you from other sources (for example, for data verification and/or
background checks), when sharing your personal data with other entities/the general public as may be necessary
and/or otherwise processing your personal data as necessary for the execution of our functions, unless we are
compelled by law to do so, the legal basis we rely on is necessity for the performance of a task carried out in the
public interest or in the exercise of official authority vested in us as a public authority (and data controller) –
Article 6(1)(e), GDPR. With respect to this ground (unlike the ‘legal obligations’ ground above), you, as a data
subject, have the right to object to such processing but we may have compelling legitimate grounds to overcome
any such objection.
WHAT ARE YOUR DATA PROTECTION RIGHTS? - You, as a ‘data subject’ as understood under the GDPR,
have a number of rights that are applicable under certain conditions and in certain circumstances, including your:
- Right of access to your personal data processed by us;
- Right to ask us to rectify inaccurate personal data concerning you;
- Right to have us erase your personal data (‘right to be forgotten’);
- Right to ask us to restrict (that is, store but not further process) Your personal data;
- Right to ask us to provide Your personal data to You in a structured, commonly used, machine-readable format, or
(where technically feasible) to have it 'ported' directly to another data controller (‘right to data portability’)
- Right to object to our processing your personal data (only where we rely on the public interest/official authority legal
basis as explained above);
- Right to lodge a complaint with the relevant supervisory authority (in Malta, the Information and Data Protection
Commissioner – IDPC).
By completing and submitting this application, you hereby acknowledge that you have read and accepted all the
terms and conditions above.
YOU UNDERSTAND THAT BY PROVIDING US WITH INCOMPLETE AND/OR INACCURATE INFORMATION,
YOUR APPLICATION MAY BE COMPROMISED AND THAT THIS MAY IMPACT THE SERVICES YOU
PROVIDE AS WELL AS ANY LICENCE YOU MAY LEGALLY REQUIRE FROM US.
Should you have any queries please email us on firstname.lastname@example.org