Version 2.  Last updated: 9 November 2022

This Privacy Notice (“Notice”) applies where Junior Achievement (Young Enterprise) Malta Foundation (hereinafter referred to as “JA” “We”, “Us” or “Our”) are acting as a Controller with respect to Our Processing of Your Personal Data.

By accessing this Privacy Notice, you acknowledge and confirm that you have been provided with and understood this Privacy Notice and, where applicable, explained this privacy notice to the minor or minors under your care.

Any Personal Data We Process is kept within Our own records in accordance with the relevant data protection and privacy laws to which We are subject including but not limited to the Data Protection Regulation (EU) 2016/679 (the “GDPR”) and the Data Protection Act (Chapter 586 of the Laws of Malta) and the subsidiary legislation issued thereto, as may be amended from time to time (hereinafter collectively referred to as the “Applicable Laws”).

References to “Controller”, “Data Subject”, “Personal Data”, and “Process”, “Processed”, “Processing” in this Privacy Notice have the meanings set out in, and will be interpreted in accordance with the Applicable Laws. “You” and “Your” refers to the Data Subject.

Data Controller Details

The Controller of your Personal Data is Junior Achievement (Young Enterprise) Malta Foundation (VO//0705).  We are committed to respecting your privacy.  If you wish to contact Us about Our privacy practices please feel free to do so by contacting Our Data Protection Officer, Matthew Caruana, by post at 1 Clock Tower Building, Tigne Point, Sliema, TP01, Malta or by email at You may also wish to contact Us by telephone on +356 21245054 between 09:00 and 17:00 on weekdays.

Categories of Personal Data

The term “Personal Data” refers to all personally identifiable information about you and includes all the information you provide to Us or information that is provided to Us by third parties, which can be identified with you personally.

The following are the categories of Personal Data that We Process:

  1. Name;
  2. Surname;
  3. Job title;
  4. Telephone and mobile numbers;
  5. Email addresses;
  6. IP address;
  7. Social media handles;
  8. ID Card numbers;
  9. Medical history;
  10. Education history;
  11. Photos and videos;
  12. Cookies;

We may collect information relating to your medical history so that We are aware of any immediate action which may need to be undertaken should you fall ill.  We do not collect and/or otherwise Process any other special categories of Personal Data. 

We may also be required to collect other categories of Personal Data in order to satisfy Our legal obligations, including those obligations imposed on Us under the Protection of Minors (Registration) Act (Chapter 518 of the Laws of Malta).

Categories of Data Subjects

We typically Process Personal Data pertaining to the following categories of persons:

  1. Students;
  2. Board members;
  3. Staff;
  4. Mentors and advisors;
  5. Link teachers;
  6. Alumni;
  7. Volunteers;
  8. Sponsors and their representatives;
  9. Emergency contacts; and
  10. Parents and guardians.

Purposes of Processing

The purposes of processing for which your Personal Data are intended include:

  1. Entering into agreements with Us, including program enrolments and sponsorship agreements;
  2. Handling any query submitted to Us via the ‘Contact Us’ page found on Our website or any other medium through which query may be sent to Us;
  3. Maintaining an account with Us for the duration of your enrolment;
  4. Running Our ‘Alumni Outreach Program’; and
  5. Employment contracts or other legal and administrative documents as required by MBR and CVO.

From time to time, We would also like to contact you about Our products and services, promotional offers, information relating to Our operations as well as information in relation to products and services provided by third parties and their offers and promotions (“Marketing”).

Legal Basis

Our legal bases for Processing your Personal Data are:

  1. Contract: The Processing is necessary for performance of a contract to which you (in your personal capacity or in your capacity as a legal representative) are a party or in order to take steps prior to entering into a contract.  Such lawful basis applies where We Process your Personal Data in order to enrol you into one of Our programs or to execute sponsorship (or similar) agreements;
  2. Vital Interests: In certain situations, We may be required to Process your Personal Data in order to protect your vital interests (namely in life or death situations);
  3. Legal Obligation: We may be required to Process your Personal Data in order to comply with laws and regulations that are imposed upon Us, including those obligations imposed on Us under the Protection of Minors (Registration) Act (Chapter 518 of the Laws of Malta);
  4. Legitimate Interest:  We may be required to Process your Personal Data in order to pursue Our (or a third party’s) legitimate interests.  Such legitimate interests may arise where We wish to initiate, or have to defend, legal claims.  We also have a legitimate interest to process your Personal Data for safety and security. When We process your Personal Data on the basis of Our (or a third party’s) legitimate interests, We ensure that the legitimate interests pursued by Us (or the third party) are not overridden by your interests, rights and freedoms; and
  5. Consent: This lawful basis of Processing mainly applies to the Marketing activities that WE carry out.  In particular, We require your consent in order for you to receive Our newsletter and to become part of Our Alumni Outreach Program.


The recipients of your Personal Data are:

  1. selected individuals within JA;
  2. Our intra-group companies, members and affiliates;
  3. Our agents and third parties that provide services to Us; and
  4. Third parties to whom disclosure may be required.

Individuals with access to your Personal Data shall be subject to the same limitations under this Privacy Notice and are located within the EU.

Processing Requirement

The Processing of your Personal Data by JA may be required for statutory purposes as well as contractual requirements.  Where the lawful basis of Processing your Personal Data is either statutory or a contractual requirement, failure to provide your Personal Data to JA in either scenario would result in JA being unable to enter into a relationship and this may result in you being unable to enrol in Our programs. 

Automated Decision-Making and Profiling

Your Personal Data will not be used for any automated decision-making or profiling.

Data Retention Period

Your Personal Data shall be held for definitive periods of time in accordance with Our internal retention policy. The retention period depends on the purposes of Processing.  Once the retention period expires, the Personal Data shall be immediately and irrevocably erased unless We need to keep your Personal Data to comply with a legal obligation, or to exercise or defend any legal claim.

Your Rights

For as long as We retain your Personal Data, you have certain rights in relation to your Personal Data including:

Please note that your rights in relation to your Personal Data are not absolute and We may not be able to entertain such a request if We are prevented from doing so in term of an applicable law.

You may exercise the rights indicated in this section by contacting Us at the details indicated above.


If you have any complaints regarding Our processing of your Personal Data, We kindly ask that you please attempt to resolve any issues you may have with Us first by contacting Us at the contact details included above. However, please note that you always have a right to lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta (


We will ask for your consent to Our use of cookies in accordance with the terms of this Privacy Notice when you first visit Our website.

Strictly necessary cookies: These cookies enable the user to have the best possible service when browsing the website.

Performance and tracking cookies: Performance and tracking cookies are used to further improve the website. These cookies collect information about how the website is being used. All information gathered is anonymous and no personal data is obtained which might identify you as an individual.

Functionality cookies: These cookies are used to memorize the options that you choose. The information these cookies collect is anonymous and they cannot track your browsing activity on other websites.

Session cookies: These expire when you close the browser.

Why We use cookies:

Below is a list of why we use cookies:

We do not use cookies that:

Cookies used by Our service providers:

Where You Provide Us with Personal Data Related to Third-Party Data Subjects

If you are a non-natural person and you supply Us with Personal Data of third-party Data Subjects such as your employees, children, affiliates, service providers, underlying clients/customers, directors or any other individuals connected to your business, you shall be solely responsible to ensure that:

Processing of Personal Data relating to Minors

We may Process Personal Data relating to minors.  In certain situations, this Personal Data may not be provided to Us by the minors themselves but by a third party individual, such as a parent or guardian.  Where this type of Processing takes place, We require that such third party individual provides and explains this privacy notice to the minor and ensures that the minor understands the activities that are being undertaken by Us with respect to the minor’s Personal Data.