The General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act (Cap 440) regulate the processing of personal data whether held electronically or in manual form.

The Victim Support Malta is established to fully comply with the Data Protection Principles, Rules and Regulations as set out in the data protection legislation.


The Victim Support Malta collects and processes information that is essential to providing support and assistance to its clients. All data is collected and processed in accordance with Data Protection Legislation. Data for statistical purposes: VSM also uses non-identifiable and anonymized data to track statistical trends and produce research. This data is then shared and made public. This helps us to optimize our services.


When determining the purposes and means of the processing of such personal data, Victim Support Malta, is acting as the ‘Data Controller’ for the purposes of the General Data Protection Regulation (GDPR).


Personal Information is accessed by the employees and the core team who are assigned to carry out the functions of and engagements requested by the Victim Support Malta.

Personal Data will be disclosed to the employees and core team engaged by Victim Support Malta, the Courts of Justice upon the Courts request and to the Executive Police Force only as authorized by law.


You are entitled to know, free of charge, what type of information the Victim Support Malta holds and processes about you and why, who has access to it, how it is held and kept up to date, for how long it is kept, and what the Victim Support Malta is doing to comply with data protection legislation.

The GDPR establishes a formal procedure for dealing with data subject access requests. All data subjects have the right to access any personal information kept about them by the Victim Support Malta, either electronically or in manual files.

Requests for access to personal information by data subjects are to be made in writing and sent to the Director of the Victim Support Malta. Your identification details such as ID number, name and surname must be submitted with the request for access. In case we encounter identification difficulties, you may be required to present an identification document.

The Victim Support Malta aims to comply as quickly as possible with requests for access to personal information and will ensure that it is provided within a reasonable timeframe and in any case not later than one month from receipt of request, unless there is good reason for delay.

When a request for access cannot be met within a reasonable time, the reason will be explained in writing to the data subject making the request. Should there be any data breaches, the data subject will be informed accordingly. All data subjects have the right to request that their information is amended, erased, or not used in the event the data results to be incorrect. In case you are not satisfied with the outcome of your access request, you may refer a complaint to the Information and Data Protection Commissioner, whose contact details are provided below.


Your personal data is collected in accordance with the applicable Data Protection Legislation.

The following schedule outlines the retention requirements for the various categories of documentation within the Victim Support Malta.

Category of DocumentRetention PeriodJustification
Printed and digital/electronic forms concerning the service user receiving support.

Five (5) years after the client finishes receiving support in the eventuality there is an ongoing court case related to the client.

In the event that there are no pending court cases, two (2) years after the client concludes his support with Victim Support Malta.

Information must be kept until the client’s case is concluded before the Court.
In the event that there is no court case ongoing, the information must be kept for two (2) years following the date when the support with Victim Support Malta is concluded in case the client requires further support within that two (2) year.

Digital or Printed Victim Support Malta client’s information where the client is ineligible for support.Two (2) years after the engagement of Victim Support Malta.Most of the Victim Support Malta clients who are ineligible for the service could have a recurring matter within the retention period and therefore the same information will be needed.

Data that needs to be destroyed after the noted timeframes will be disposed of in an efficient manner
ensuring that such information is no longer available within the Victim Support Malta.


As indicated above, requests for access to personal information by clients (data subjects) are to be made in writing and sent to the Director of the Victim Support Malta and to the Executive Administrator responsible for handling such requests.

Victim Support Malta may be contacted at:

Karl Grech
Telephone: +356 2122 8333

Executive Administrator
Michaela Cassar
Telephone: +356 2122 8333

For General Enquiries Victim Support Malta may be contacted on
Email: | +356 21228333


The Information and Data Protection Commissioner may be contacted at:
Level 2, Airways House,
High Street,
Sliema SLM 1549
Telephone: 23287100

Speak to us