We primarily process your personal data for the performance of our contract with the Entity, including any steps which may be necessary to enter into such contract (such as tenders).

We may also process personal data on the following legal basis:

• Compliance with legal obligations imposed on Us – in particular obligations imposed on Us as a result of financial or environmental legislation and health and safety;
• To protect Our or a third party’s legitimate interests – in particular interests which may arise directly or indirectly in relation to the execution of the contract with Enemalta. This can also include any claims for damages to/from third parties for damages to/by Our infrastructure/services/operations. When We process your personal data on the basis of Our legitimate interests, We ensure that the legitimate interests pursued are not overridden by your interests, rights and freedoms;
• For the purposes of establishing, exercising or defending legal proceedings; and
• For the purposes of public interests in providing Our electricity services which is a critical universal service.

Note that special categories of personal data include data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic, biometric or health data, sexual orientation and data related to your conviction and offences. Processing special categories of your personal data is not envisaged unless We have reason to institute proceedings or investigations with respect to theft of Our services. Should the processing of special categories of personal data become envisaged, We will ensure that We have additional grounds for such processing.