GENERAL DATA PRIVACY POLICY
FOR STUDENTS, PROSPECTIVE STUDENTS AND REPRESENTATIVES
SABIS® INTERNATIONAL SCHOOL - CAMPINAS
Last Modified: January 19, 2021
Effective since: January 2021
GENERAL INFORMATION
This General Privacy Notice provides detailed information on how SABIS® International School – Campinas ("we", "us", "our", "School”) handles the personal data of its Students, Prospective Students, Parents and/or Legal Guardians within the scope of its activities.
The detailed provisions throughout this Privacy Notice will apply to courses and/or to any educational services offered by the School in the Brazilian territory.
1. DEFINITIONS
In this General Privacy Notice, the following terms are used with their respective meaning:
"Personal Data"
|
means any and all information relating to an identified or identifiable person, such as a Student, a Prospective Student, or a Parent and/or Legal Guardian;
|
|
|
"Special Category of Data"
|
means any and all information relating to the special categories of data set out in Article 5, II, of LGPD. Within the scope of the activities performed by the School, this category of data is related to health or medical care data of Students, as well as racial, ethnic, or sex life origin;
|
|
|
"Data Subject"
|
refers to the individual whose data is the subject of data processing i.e. Students, Prospective Students, and Students’ Representatives;
|
|
|
"Data Processing"
|
refers to any operation carried out with personal data, under the terms and limits determined by LGPD;
|
|
|
“The Brazilian General Data
Protection Regulation –
(“LGPD”)"
|
refers to Law No. 13.708/18 – The Brazilian General Data Protection Regulation – responsible for the regulation of data processing within the Brazilian territory;
|
|
|
"Students"
|
refers to children and adolescents enrolled in courses (including but not limited to regular courses and prep courses) or educational services rendered by the School;
|
|
|
"Prospective Students"
|
refers to Students or Prospective Students up to 12 (twelve) years of age;
|
|
|
"Children"
|
refers to Students or Prospective Students up to 12 (twelve) years of age;
|
|
|
"Adolescents"
|
refers to Students or Prospective Students between 12 (twelve) and 18 (eighteen) years of age;
|
|
|
"Representative"
|
refers to the individual legally responsible for the Student(s) or Prospective Student(s);
|
|
|
"Financial Supporter"
|
refers to the individual financially responsible for the Student(s) or Prospective Student(s);
|
|
|
"Data Protection Officer"
|
refers to the individual appointed by the School to interact with Data Subjects and the Brazilian National Data Protection Authority (ANPD);
|
|
|
"Online Platform"
|
means any website and/or online platform operated by SABIS® or by companies’ member of the SABIS® Group of companies;
|
|
|
"the School"
|
a company incorporated under the Brazilian law to provide educational services to individuals located in the Brazilian territory;
|
"Personal Data Breach"
|
a breach of security leading to the accidental, or unlawful, destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed. The School will report personal data breaches to the Brazilian supervisory authority and where the breach is likely to adversely affect the personal data or privacy of the data subject.
|
2. INFORMATION ABOUT US
For the purposes described in this General Privacy Notice, the School shall be taken as the legal person responsible for determining the purposes and means of the Personal Data that had been submitted by Students, Prospective Students, and Representative, and may be identified and contacted through the channels below:
- School’s address: Av. Giuseppina Vianelli di Napoli, nº 555 Bairro Jardim Bosque das Palmeiras Campinas – São Paulo, Brazil
- Data Protection Officer E-mail: (dados@rfaa.com.br)
- Telephone Number: (+55 11 3050-2150)
3. PROCESSING PERSONAL DATA
As part of its educational activities, the School will collect and process the personal data identified below, with the following purpose and legal basis:
Identification Data: Types of data that enable the identification of the Data Subject who has any legal bond with the School – Students, Prospective Students, Representatives, and Financial Supporters – consisting, for example, of: full name, date of birth, nationality, place of birth, profession, home address, E-mail address, postal code, and telephone and/or cell phone number(s).
The Personal Data is collected in order to enable the proper identification of Students, Prospective Students, Representatives, and Financial Supporters that either have established or will establish a contractual relationship with the School.
Legal Basis: The processing of Identification Data by the School will be carried out in order to allow the controller to perform the tasks and services described in the contract to which the Data Subject is party, pursuant to Article 7, V, of LGPD.
Attention: The absence of consent for the processing of Personal Data of Students and/or Prospective Students registered with the School, particularly regarding authorization for the processing of "Identification Data", would impede the rendering of educational services by the School as these pieces of information are essential for the performance of the contract.
Financial Data: Personal Data that allows the School to perform bank collection or compensation for the educational services provided or for the registration of Students or Prospective Students, consisting, for example, of: CPF number, bank details, payment information and credit card details of the Financial Supporter.
Financial data is collected to enable the School to properly and securely charge for its services.
Legal Basis: Financial data will be processed due to the need for the School to execute, or be allowed to execute, the contract in which the Data Subject takes part, according to Article 7, V, of LGPD.
Data Concerning Health: Personal Data relating to certain health conditions of Students and Prospective Students.
Data concerning the health of Students and Prospective Students is collected to enable the School to render appropriate medical treatment when and if necessary, either during or before the execution of the educational services contract, as a preparatory measure by the School for the timely provision of services.
Legal Basis: This type of data will always be processed in the best interest of Students and Prospective Students, with the specific consent of at least one of their Parents and/or Legal Guardians, pursuant to the purposes listed above.
Student’s Performance Data: Data related to the Student's pedagogical performance, consisting, for example, of: disciplinary and educational observations, evaluations, tests, reports of grades and absences.
Performance Data is collected to allow Students, their Representatives, and the School to be aware of the Student's pedagogical performance. Amongst the intended purposes are (i) supporting Student learning; (ii) monitoring Student learning performance; (iii) verifying the quality of educational services provided by the School to Students; and (iv) compliance with legal and regulatory obligations, which determine, for example, the measurement of Student grade averages and attendance.
Legal Basis: Performance Data will be handled with the consent of at least one of the Student's parents and/or legal guardians ("Representatives"), always in their best interest, and within the parameters informed above.
Attention: The absence of consent for the processing of Personal Data of Students and/or Prospective Students registered with the School, particularly regarding authorization for the processing of "Student’s Performance Data", would impede the rendering of educational services by the School as these pieces of information are essential for the performance of the contract.
Photography and Filming: Students and Prospective Students’ images that are used for cadastral or security matters.
The images are collected in order to allow the School to properly identify its Students and Prospective Students during or prior to the provision of educational services, as well as to implement appropriate security measures in the school premises, via the CCTV system and others.
Legal Basis: Images of Students and Prospective Students will be treated by the School when at least one of their Parents and/or Legal Guardians ("Representatives") grants specific consent to do so.
Direct Marketing: Students, Prospective Students, and their Representatives may be asked to provide Personal Data, such as their name and E-mail address, for the purpose of receiving marketing communications by E-mail.
The processing will only be carried out after the Data Subject’s voluntary disclosure, who will be asked to affirmatively opt in to E-mail marketing communications.
Legal Basis: Specific consent to do so.
4. COLLECTING PERSONAL DATA
The School shall only collect data for specific purposes and with a proper legal basis for processing. Data obtained for specific purposes will not be processed for purposes different from the ones specified in this policy, unless the School properly notifies Data Subjects regarding it.
The collection of Personal Data occurs in the following cases:
Data Provided by the Data Subject or their Representative:
- Voluntary completion of registration forms, applications, or vacancy forms per Student’s Representative and/or Financial Supporter;
- Direct contact by E-mail, telephone, or any other form of electronic correspondence and/or letters;
- The Student or his/her Holder of Responsibility voluntarily creates a profile on any of the Online Platforms provided by SABIS®;
- Through filling out electronic or paper forms, evaluations, reports, tests, simulations, notes, attendance lists, as well as taking part in interviews and meetings, all of which are deemed necessary for the achievement of the educational services contracted and are submitted by the Student to one of the School’s agents.
Internet Trackers:
The Data Subject’s personal information is electronically collected for statistical purposes and for the improvement of SABIS®’ website, using cookies (files stored in the Data Subject’s browser), web beacons, pixel tags, and transparent GIFs. The School and its service providers may also use other tracking technologies for website management and user tracking.
Online Platforms:
The School uses Online Platforms during the rendering of its educational services and, therefore, provides its students access to software that is not operated by the School. Please note that this Privacy Policy does not apply to third-party software. This Privacy Policy does not govern the practices of third parties, including the School’s partners, third-party service providers, and/or advertisers, even when those services are branded as or provided on behalf of the school.
Third Parties:
This consists of the collection of Personal Data that is provided and/or shared by authorized third parties or government agencies, including:
- Doctors, therapists, speech therapists, and other health professionals, always with specific consent of the Student’s Holder of Responsibility and in his/her best interest;
- Other educational establishments;
- Government bodies and regulatory authorities.
In case of medical emergencies, the Personal Data of Students may be collected without specific consent and its processing will be carried out exclusively for the protection of the Children or Adolescents, according to Article 14 of LGPD.
Personal Data from third parties will be properly analyzed by the School in order to ensure that the information has been collected and is being shared on a legal and/or regulatory basis and is accurate and up to date.
5. PHOTOGRAPHY AND FILMING FOR PERSONAL USE
The School is not responsible for, nor does it hold any interference with, any filming or photographs made by Students, Prospective Students, and their Representatives during the regular School day activities or social events organized by the School.
However, in order to provide a healthy environment for its Students, the School will publicize guidelines among its members, students, and representatives on sharing images and footage of minors, reminding all those participating in the School environment of the provisions in this General Privacy Notice, including:
- Reminding students’ Parents or Legal Guardians about their option of updating their consent preferences for any data processing operation involving their Children.
- Requesting that photographs and footage of Students that are taken during the School’s social events must not be shared on social media without prior authorization from Parents and/or Legal Guardians of the Child and/or Adolescent subject of that Personal Data.
- Reminding Students and their Representatives about the terms of this General Privacy Notice.
6. PHOTOGRAPHY AND FILMING FOR SCHOOL USE
The School recognizes the need to safeguard the Personal Data and the privacy of its Students, both at school and on social media.
Under the terms of the EDUCATIONAL SERVICES CONTRACT signed between the School and the Student(s)’ Representative(s), the School is authorized to use the Student's image, by means of photographs, videos, and/or recordings, for the purpose of publicizing the educational services provided on Online Platforms and general media, always in the best interest of the Student and the legitimate interest of the School.
The School recognizes the need to protect the Personal Data and privacy of its Students, both at school and on social media, and, therefore, will only use the image of Children with the specific consent of their Representative(s), which will be collected from at least one of the Representatives through a specific form.
7. CONSENT – CHILDREN
The processing of Personal Data of Children will be restricted to the purposes outlined above in Clause 3 and will depend on the specific and detached consent of at least one (1) Student Representative or Prospective Student, as per the TERMS OF CONSENT attached to this Privacy Statement.
8. ACCESS TO PERSONAL DATA
Access to the Personal Data of Students, Prospective Students, and their Representatives will be restricted to professionals and agents assigned to the specific function of developing the process of enrollment, selection, and rendering of educational services proposed by the School.
9. STORING AND PROTECTING PERSONAL DATA
The School takes advanced administrative, technical, organizational, and physical measures to protect the Personal Data under its control. These measures include computer protection mechanisms and secure files and facilities. In turn, once the purpose of the data processing is fulfilled, the School adopts appropriate measures to securely delete or permanently dissociate the Personal Data, depending on the applicable legislation and the compliance with the minimum data retention principle.
The School will only keep Personal Data for as long as necessary to process students and prospective students’ applications or to inform about future opportunities, unless it is necessary to retain it for an underlying period, which will be done on the basis of the provisions of Law No. 13.708/2018 – General Data Protection Law.
The School reserves the right to contract third parties – Processors – to carry out the storage of Personal Data under its custody, in which case these agents will have to process the Personal Data of prior written instructions determined by the School and to ensure the confidentiality and security of Personal Data.
10. SHARING PERSONAL DATA WITH THIRD PARTIES
The school does not share Personal Data with any third parties, unless in the following situations:
- With regulatory authorities, courts, and government agencies to comply with legal orders, legal or regulatory requirements, and government requests;With Service Providers ("Processors"), regulatory authorities, and government agencies to detect and prevent fraud or other criminal activity and to protect the rights of the School or others;
- Globally, with companies’ member of the SABIS® group of companies, in accordance with the applicable law;
- For credit protection, when related to the Personal Data of Students' Financial Supporters;
- With Service Providers ("Processors") for the execution of contracts and business development at the request of the School.
When Personal Data of Students, Prospective Students, Representatives, and Financial Supporters has to be shared with third parties other than as described above, the School will notify the Data Subject to obtain specific consent for that purpose, subject to exceptions provided in applicable law.
Accordingly, the School reserves the right to store Personal Data under its custody with Processors who may or may not be located in the Brazilian territory. When Personal Data is transferred to other jurisdictions, the recipient of such information will always be countries or international organizations capable of providing an adequate degree of protection compatible with Law No. 13.708/2018 – The Brazilian General Data Protection Regulation.
11. CROSS-BORDER TRANSFER OF PERSONAL DATA
As the School is a member of the SABIS® School Network, the Personal Data may be transferred outside the territory of Brazil and securely replicated to the databases located in Microsoft Cloud Services in Ireland in order to provide the Parents/Students with access to SABIS® Applications hosted in the cloud. SABIS® Applications support students’ learning by monitoring and following up on their academic and non-academic performance, including but not limited to, exam results, attendance and discipline records, school calendar, study material, and Student Life Organization (SLO) participation.
The replicated Personal Data will also be used to run analytics/statistics on Students, sections, classes, and overall School’s academic performance.
SABIS Educational Services s.a.l., Adma, Lebanon authorized personnel has access to the replicated data in order to operate, develop, improve, deliver, or support the applications and services.
12. DATA SUBJECT RIGHTS – COMPLIANCE WITH ART. 14 OF LGPD
According to LGPD, Data Subjects have rights in relation to the processing of their Personal Data, among them:
- The right not to provide the School with their Personal Data, unless this piece of information is essential for the purposes highlighted in this General Privacy Notice;
- The right to be informed about the existence of processing of their Personal Data;
- The right of access, rectification, and update of their Personal Data;
- The right to request the erasure of their Personal Data, except in those cases where the Personal Data is essential to the activity provided by the School or when its storage results from a legal, regulatory, contractual obligation or for the legitimate exercise of rights;
- The right to have their Personal Data transferred to another controller; consisting, for example, in sending Personal Data of Students to other educational institutes; and
- The right to withdraw their consent to the processing of their Personal data, when applicable.
13. DATA SUBJECT DUTIES
The Student or Prospective Student’s Representative(s) is (are) responsible for the accuracy of the information they provide during the registration process with the School.
14. CHANGES TO THIS PRIVACY NOTICE
The School reserves the right to amend or modify this General Privacy Notice at any time, considering, but not limited to, legislative, regulatory, and case law updates.
In the event of a change to the terms set forth herein, the School will notify the Student Representatives, detailing the changes and, if applicable, requesting an update of consent for processing of Children's data.
If you have any questions, please contact us through the channels provided in Item 2 of this Privacy Notice.