Download Privacy Policy

College Of Remote and Offshore Medicine Foundation (CoROM)

Privacy Policy

College of Remote and Offshore Medicine Foundation (CoROM)
Version: 2.0
Approved by: Board of Administrators
Executive Sponsor: Executive Dean
Last Reviewed: 15 February, 2026
Effective Date: 15 February, 2026

Purpose of this Policy

This Privacy Policy explains how the College of Remote and Offshore Medicine Foundation (CoROM) collects, uses, processes, and protects personal data when you use the website: https://corom.edu.mt

This Policy is issued in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Maltese data protection laws.

This Privacy Policy applies to the website: https://corom.edu.mt

This Policy does not apply to classroom.corom.edu.mt or other separate digital learning platforms operated by the Foundation.

Data Controller

The Data Controller responsible for your personal data is:
College of Remote and Offshore Medicine Foundation (CoROM)

Address:
Soteria Buildings
Dawret Hal Ghaxaq,
Ghaxaq, Malta GXQ 9011

What Data We Collect

When you use this website, we may collect:

Personal Data

    • First and last name
    • Email address
    • Account login details (if applicable)
    • Information submitted through contact forms
    • Information provided when purchasing services or applications

Technical / Usage Data

    • IP address
    • Browser type and version
    • Pages visited
    • Time and date of visit
    • Device identifiers
    • Referral URLs

Legal Basis for Processing (GDPR Article 6)

We process your data under the following lawful bases:

Performance of a Contract

    • When you register for an account
    • When you purchase services or submit applications

Legal Obligation

    • Where financial or administrative records must be retained

Legitimate Interest

    • Website analytics
    • Website security
    • Fraud prevention

Consent

Where required for cookies or future marketing communications

How We Use Your Data

We use your data to:

    • Provide and maintain website functionality
    • Process purchases and applications
    • Respond to inquiries
    • Manage user accounts
    • Monitor website performance
    • Ensure website security
      Comply with legal obligations
    • We do not sell your personal data.

Payment Processing

    • Payments made via the website are processed securely through Stripe. Stripe acts as an independent data controller for payment transactions.
    • We do not store full credit card information on our servers.

Analytics & Tracking

We use Google Analytics to understand website usage and improve user experience.

Google may process data outside the European Union. Transfers are safeguarded through Standard Contractual Clauses and other approved mechanisms in accordance with GDPR.

Users may manage cookie preferences through our cookie consent mechanism.

International Data Transfers

Because our hosting and certain service providers operate outside the European Union (including the United States), your personal data may be transferred to countries outside the EU.

Where such transfers occur, appropriate safeguards are implemented, including:

    • Standard Contractual Clauses
    • Secure hosting environments
    • Contractual data protection agreements

Data Retention

We retain personal data only as long as necessary:

    • Account data: Until account deletion or inactivity review
    • Transaction records: As required by Maltese financial and tax laws
      Contact form inquiries: Up to 24 months
    • Analytics data: As configured within Google
    • Analytics settings

Where retention is no longer required, data is securely deleted.

Your GDPR Rights

Under the General Data Protection Regulation, you have the right to:

    • Access your personal data
    • Rectify inaccurate data
    • Request erasure (“right to be forgotten”)
    • Restrict processing
    • Object to processing
    • Data portability
    • Withdraw consent (where processing is based on consent)

Requests may be submitted to: info@corom.edu.mt

We will respond within one month.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:
Office of the Information and Data Protection Commissioner (Malta) https://idpc.org.mt

Cookies

We use cookies to:

    • Enable essential website functionality
    • Maintain session authentication
    • Analyse website performance
    • Improve user experience

You may manage cookie preferences via your browser settings or through our cookie consent banner.

Security

We implement appropriate technical and organisational measures to protect personal data.

However, no method of internet transmission is completely secure.

Children’s Privacy

This website is not directed at children under 13. We do not knowingly collect personal data from minors via this website.

Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised date.

Contact us

If you have any questions about this Privacy Policy, you can contact us:
By email: info@corom.edu.mt