GDPR
Dear
On 25 May 2018, the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (often referred to as the "GDPR") came into force.
The GDPR is applicable in all European Union countries and introduces a number of changes in the management of personal data in organizational units.
Szczecin International School ("School"), out of concern for the security of your personal data, has also introduced certain regulations and restrictions, described in the information clause below.
What is personal data?
Personal data, according to the GDPR, is any information that allows you to identify a natural person. In the case of your data processed by the School, these are, for example, name and surname, address of residence, telephone number, e-mail address.
Personal Data Controller and Data Protection Officer
The administrator of your personal data and that of your children – students of our SIS Sp. z o.o., 27/28 Bl. Królowej Jadwigi Street, 70-262 Szczecin, phone no. 91 4240300, e-mail address info@sis.info.pl.
If you have any questions or doubts as to whether your data is being processed correctly at the School, you can contact the Data Protection Coordinator at iod@sis.info.pl email address.
Purpose and legal basis of processing
The purpose of processing your personal data and the data of your children is to perform statutory teaching, care and educational tasks at the School. On the other hand, the legal regulations on the basis of which we process your and your children's personal data are: Article 6(1)(c) of the GDPR (compliance with a legal obligation to which the Controller is subject), the Law on School Education and the Act on the Education System.
In some situations, we also process personal data on the basis of your consent (Article 6(1)(a) of the GDPR). This is the case, for example, when we plan to place your child's image (photo) on the School's website, provide you with information about the current activities of the School by phone or e-mail, or for the purpose of concluding a group insurance agreement for children – students of our School.
Categories of your data that we process
In compliance with the legal obligation to which the Administrator is subject, we process the following categories of personal data of you and your children:
- Basic identification data (names of you and your children)
- Personal details (parents' names, date of birth)
- Electronic identification data (phone number, email address)
- Child's biometric identification data (photo)
- Residence data
- Psychological data of the child (in the case of using the opinion of the Psychological and Pedagogical Counselling Centre)
- Data about the child's physical health (in case of exemption from PE lessons)
Data recipients
Your children's personal data are transferred only to entities authorized to obtain personal data on the basis of legal provisions, including, among others:
- Ministry of National Education – School Education Information System
- Board of Education
- Regional Examination Board
- Managing body – SIS sp. z o.o.
Data transfers to third countries or international organizations
We do not transfer your and your children's personal data outside of Polish.
Data retention period
Your and your children's personal data will be stored in various periods of time on the basis of the Act of 14 July 1983 on the national archival resources and archives and the Regulation of the Minister of Culture of 16 September 2002 on the handling of documentation, the rules for its classification and qualification, and the rules and procedure for transferring archival materials to state archives.
Permissions
In the case of personal data of you and your children, you are entitled to:
- the right to access data and receive a copy of it
- the right to rectify (correct) data
- the right to delete data (to "be forgotten")
- the right to restriction of data processing
- the right to object to the processing of your data
- the right to withdraw consent to the processing of data – whereby the withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of your consent before its withdrawal
- the right to lodge a complaint with the supervisory authority (the President of the Office for Personal Data Protection) – if you believe that we process your data unlawfully.
Information on the requirement/voluntariness of providing data
Providing your personal data is:
- a statutory requirement in cases resulting from the Law on School Education and the School Education Act. You are obliged to provide them, and the consequence of failure to provide personal data will be the failure to enter the student into the Register of Students of the school (not admission to the School).
- voluntary – in cases where you have consented to the processing of data. Lack of consent or failure to give it results in the lack of publication of the student's achievements, a ban on participation in competitions and competitions, failure to register the student for insurance, and the inability to contact you.