INFORMATION ON THE PROCESSING OF PERSONAL DATA
The basis for the protection of personal data is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”) and Act No. 110/2019 Coll., on the processing of personal data.
Who is the controller of your personal data?
The English College in Prague – Anglické gymnázium, o.p.s.
Identification number: 25719815
with its registered office at Sokolovská 320, 190 00 Prague 9
registered in the Register of Public Benefit Companies maintained by the Municipal Court in Prague, Section O, File 69
(hereinafter referred to as the “Controller”)
Contact details of the Data Protection Officer
The function of the Data Protection Officer within the meaning of the GDPR is performed by:
GDPR Solutions a.s., ID No. 06100091, with its registered office at Opletalova 921/6, 110 00 Prague 1
E-mail contact: bina@gdprsolutions.cz
What is your relationship with English College?
Pupil
The legal basis for the processing of your data is the performance of the contract – the application for study. Furthermore, the legal basis for processing is also the obligation of the Controller given by law (e.g. the obligation to receive and register applications for education, the obligation to establish and maintain a school register, accident records, class registers and other documentation within the meaning of Section 28 of the Education Act, the obligation to ensure safety and health protection, etc.).
As part of our activities, photographs, video recordings and expressions of a personal nature may be published on our website and social networks, the legal basis for processing these personal data is your consent or in selected situations, our legitimate interest.
Even if consent is not granted for marketing purposes, the Controller is entitled, in accordance with Section 7 of Act No. 480/2004 Coll., on Certain Information Society Services, as amended, to send commercial communications relating to similar services of the Controller, which are similar to those provided to you by the Controller or has provided you in the past (so-called direct marketing) to the address, e-mail address, via SMS, to the addressee’s telephone number or in another way using the addressee’s electronic contact. The Controller may do so on the basis of its legitimate interest within the meaning of Article 6 (1) (f) of the GDPR, unless the addressee refuses such marketing sending.
Purposes for which we process your personal data:
- performance of the contract – provision of education within the scope of the Controller’s activities
- fulfilment of the Controller’s obligations arising from legal regulations, in particular from the Education Act
- presentation of photographs and video recordings of school events, as well as expressions of a personal nature created by pupils on the Administrator’s website, social networks or exhibitions
- participation in competitions
Education applicant
The legal basis for the processing of your data is, in particular, the Controller’s obligation under the law (e.g. the obligation to accept and record applications for education stipulated by the Education Act) and the performance of a contract in the form of pre-contractual negotiations.
Purposes for which we process your personal data:
- accepting, recording and evaluating applications and entrance examinations for study at the Administrator, including their further processing and archiving in accordance with legal regulations.
Parent or guardian of the pupil or applicant
The legal basis for the processing of your data is the fulfilment of a statutory obligation (e.g. in connection with the submission of applications for study – see above) and the performance of a concluded contract or the consent of the data subject (e.g. in the case of registration of contact in case of emergency).
Even if consent is not granted for marketing purposes, the Controller is entitled, in accordance with Section 7 of Act No. 480/2004 Coll., on Certain Information Society Services, as amended, to send commercial communications relating to similar services of the Controller, which are similar to those provided to you by the Controller or has provided you in the past (so-called direct marketing) to the address, e-mail address, via SMS, to the addressee’s telephone number or in another way using the addressee’s electronic contact. The Controller may do so on the basis of its legitimate interest within the meaning of Article 6 (1) (f) of the GDPR, unless the addressee refuses such marketing sending.
Purposes for which we process your personal data:
- fulfilment of the obligations of the Administrator (school) arising from legal regulations (especially the Education Act)
- performance of the concluded contract (in particular provision of education to a minor in your care)
- records of donations
- participation in the Controller’s bodies
Cookies
A cookie is a small piece of data that a server sends to a browser and stores on the user’s device. On each subsequent visit to the same server, the browser sends this data back to the server. Cookies are commonly used to distinguish individual users, record preferences, simplify the use of websites, allow us to obtain statistics on the use of websites and help to personalize content and relevant advertising.
When visiting our website, you can consent to the processing of your personal data through cookies via the so-called cookies bar. You should see this bar when you visit our website for the first time. You can change the cookie bar settings and thus (not) granting consent at any time. Use of cookies that are absolutely necessary for the functionality of the website are used even without your consent.
Most browsers automatically accept cookies, unless the browser is set otherwise. You can restrict or block the use of cookies in your web browser settings. Please note that blocking cookies may significantly impair the functionality of the website.
Purposes for which we process your personal data
- basic functionality of the website (essential cookies)
- ensuring functionality, optimization, statistics and analysis of website traffic (functional cookies)
- marketing purposes (e.g. displaying relevant advertising – marketing cookies)
To whom do we share your personal data when using cookies
We share information about how you use our website with our social media, advertising, and analytics partners. Partners may combine this information with other information that you have provided to them or that they have obtained as a result of your use of their services.
We primarily process your personal data in the European Union. However, our website uses Google Analytics and other cookies that may transfer your personal data outside the European Union, specifically to the USA. However, this transfer of personal data is in accordance with the Data Privacy Framework.
If you do not want your personal data transferred to the USA, please do not give us your consent to the use of cookies.
We also inform you that if you are located outside the EU and decide to visit our website, your personal data may be processed in the territory of that third country in order to be able to display our website to you correctly.
If you do not want your personal data to be processed in a so-called third country, please do not visit our website from outside the EU.
For a list of ECP’s sub-processors of data please click here