Privacy Policy
RESPONSIBILITY FOR PROCESSING THE PERSONAL DATA (DATA CONTROLLER):
LEIRIA INTERNATIONAL SCHOOL (LIS)
Address: Rua Dom João Pereira Venâncio, 2430–290 Marinha Grande, Leiria, Portugal
Email: dpo@leiriainternationalschool.com
INTRODUCTION
This policy is drafted in accordance with the Portuguese Data Protection Law no. 58/2019 from the 8th of August and the General Data Protection Regulation (EU) 2016/679 of April 27, 2016 regarding the individual protection on the processing of personal data and on the free movement of such data (GDPR).
Our Data Protection Officer can be contacted by email at the address dpo@leiriainternationalschool.com if you have any queries regarding the processing of your personal data.
2. TYPES OF PERSONAL DATA WE PROCESS
We process personal data from our students and their families and / or legal representative and also from our employees, candidates, suppliers, contractors, prospective customers and third parties interested in finding out more about Leiria International School within the systems controlled by the school as Data Controller.
The personal data processed is mainly the following:
Names, addresses, telephone numbers, e-mail addresses and other contact details;
Family details;
Safeguarding information (such as court orders and professional involvement)
Education and employment data;
Images, audio and video recordings, including CCTV footage (video images);
Financial information;
Educational centres previously attended.
Other types of data we may collect and process, according to the school purposes, are related to health condition, criminal records and other sensitive information related to an individual, such as:
Information about health status or provision of health care linked to a specific individual;
Behavioural information;
Special educational needs
Criminal records linked to a specific individual;
Biometric information;
Ethnicity;
Religion;
Nationality and location.
3. HOW WE COLLECT AND PROCESS PERSONAL DATA
Leiria International School collects information in several ways, including:
In person and by phone contact.
Through our webpage, including information received through the following sections: contact us, information request, meeting form, event form, enrolment form, parent’s association, Careers (recruitment) and subscription to our newsletters or communications.
From email and hand delivery paper documentation: including job applications, emails, invoices, letters, consent forms;
Through online tools: such as apps, educational platforms and other software used by our staff;
Through any CCTV cameras located at our facilities.
Through third parties, such as referees, professionals or authorities working with the individual;
PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
Leiria International School processes personal data to legally carry out the school’s educational activity. The school collects and keeps students and parents’ information when necessary:
To ensure that the student meets the school’s admission criteria;
To provide educational services including the support of pupil learning, monitor and report on pupil progress;
To provide to the students welfare services;
To provide to the students medical and nurse attention, catering service and school transportation, among other necessary services;
To meet the educational, social, physical and emotional requirements of the student;
To comply with the law regarding sharing and disclosure of personal data;
To comply with legislative or administrative requirements;
For the management of the school Administration.
To enable parents/guardians to be contacted in the case of emergency or in the case of school closure, or to inform parents of their child’s educational progress or about school events, etc.
With the aim to celebrate school’s achievements and to keep a record of the history of the school, Leiria International School may take photographs and recorded images of students to be shared in, e.g. yearbooks, school website, etc, always based on informed consent from parents, legal representative or students of legal age;
To send commercial communications if previously requested and authorised by the data subject. Commercial communications will include: newsletters and notices from the webpage, referral of commercial advertisements through e-mail, SMS, MMS, social networks or any other electronic or physical means, present or future, which enables such commercial communication. You will be able to unsubscribe from the receipt of commercial communications by clicking in the “unsubscribe” section found in all these kind of e-mails sent by Leiria International School.
In the case of a CV received through our webpage, in the section “Careers”, with the purpose to include the candidate in the selection process or to consider their application for future positions; In this regarding, the school also collects information about staff and prospective staff when necessary for:
– Conducting the selection process;
– Assessing the suitability of the candidate for the position;
– Administration of staff records;
– Recruitment of staff;
– Administration of payroll, pensions and sick leave;
– Staff appraisal;
– Disciplinary procedures;
– Administration of human resources records;
WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
As a school, we may be lawfully required to share personal information with relevant authorities or third parties as permitted on bylaws grounds, to comply with legal obligations or based on a specific consent given by the individual to whom is concerned.
We will ensure that, when relevant, contractual safeguards will be implemented to ensure the protection of your personal data when disclosing your personal data to third parties. For example, we will enter into data processing agreements with relevant parties (providing for restrictions on the use of your personal data and obligations regarding the protection and security of your personal data).
In such cases, we will implement appropriate measures to ensure adequate protection of your personal data in accordance with applicable data protection legislation.
Your personal data shall be neither rented nor sold to third parties.
CONSERVATION OF DATA
Personal information will only be retained for the period of time required to fulfil the purpose for which it was collected. It may be kept for a longer time for public interest archiving, scientific or historical research, or statistical purposes. Once the personal information is no longer required or permitted to be retained for legal or business purposes, it will be destroyed or made anonymous.
YOUR RIGHTS
Under the Portuguese Law no. 58/2019 and the EU GDPR, you have rights regarding the processing of your personal data. These rights are, however, subject to certain exemptions and limitations.
You have the right to:
Be informed, at the time when personal data is collected, about the data processing.
Access the information we process and how we process it as well as to obtain a copy of the personal data considering the legal limitations and exceptions;
Ask for the erasing of the personal data we hold about you without undue delay considering the legal limitations and exceptions;
Obtain the rectification of your personal data providing a supplementary statement;
Obtain restriction of processing of your personal data when it is inaccurate, illegal, unnecessary or not verified, considering the legal limitations and exceptions;
Obtain data portability of your personal information in a structured, commonly used and machine-readable format. This allows the right to transmit that data to another controller without hindrance from the controller to which the personal data has been provided;
Oppose to processing for direct marketing purposes.
Withdraw consent at any time and freely to the processing of your personal data. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Therefore, individuals will be able to exercise their rights by sending a specific written request, along with a copy of their ID card, to the Data Protection Officer’s email address dpo@leiriainternationalschool.com
Data subjects have the right to be notified of the information that is being processed about them, as well as the access to their personal data verbally or in writing and at no charge.
The data subjects have also the right to request, when necessary, the correction, destruction or deletion of their personal information and to object, on reasonable grounds relating to their particular situation to the processing of their personal information. The data subjects have also the right of not to have their personal information processed for purposes of direct marketing by means of unsolicited electronic communications, not to be subject, under certain circumstances, to a decision which is based solely on the basis of the automated processing of their personal information and to submit a complaint to the Regulator regarding the alleged interference with the protection of the personal information of any data subject or to submit a complaint to the Information Regulator in respect of a determination of an adjudicator as well as to institute civil proceedings regarding the alleged interference with the protection of his, her or its personal information.
According to this, we have processes in place to ensure that we respond to a request without undue delay from the date of the request although we can extend the time limit to respond if necessary. We are aware of the information we must provide in response to a request and the need to provide it in clear and plain language.
Any request is subject to certain exemptions, limitations or contractual obligations. Data belonging to or identifying other individuals is exempt from right of access and will be subject to legal privilege. We cannot disclose any confidential information related to the purpose of providing education within our group of schools, examinations or supplying examination scripts to external bodies. We cannot disclose confidential information on any of our staff.
CONSENT
You have the right and possibility to withdraw your consent for any specific purpose granted at any given time without prejudice of the legality of processing according to the consent given before withdrawal.
STORING AND SECURING INFORMATION
The school shall use the appropriate technical and organisational measures to ensure the security, confidentiality, integrity and privacy of the personal data, preventing from unauthorised access or unlawful processing as well as accidental loss, destruction or damage of the files.
COMPLAINTS
If you are not satisfied with our response, or you would like to discuss anything regarding this privacy notice, or you believe we are processing your personal data disregarding the data protection regulations in force, please contact our Data Protection Officer at: dpo@leiriainternationalschool.com or you can address your complaint to the Comissão Nacional de Proteção de Dados (‘National Commission for the Protection of Data’, (also known as ‘CNPD’) based at Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, phone number +351 21 392 84 00, website https://www.cnpd.pt/home/direitos/direitos.htm#exercer_direitos with the email address geral@cnpd.pt although the Authority recommends that steps are taken to resolve the matter with the school before involving the CNPD.
PRIVACY NOTICE UPDATES
Leiria International School may need to update this privacy notice periodically so we recommend that you review this information from time to time.