Privacy Policy
DEFINITIONS AND ACRONYMS.
“Policy” – This privacy and personal data protection policy.
“Website” – Our web page X https://
“GDPR” – The General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
“IES” – BOCA RATON PREPARATORY SCHOOL, INC. 1333 Diego Drive South, Boca Ratón, Florida 33428
“DPO” – IESGS Data Protection Officer.
IESGS respects your right to privacy when using this Website. This Policy provides information about the collection, use, processing and sharing of data about individuals located in the European Union, Iceland, Liechtenstein or Norway (the “European Economic Area” or “EEA”).
This Policy also provides information about the collection, use, processing and sharing of data about individuals located in the United Kingdom, which has left the European Union but has adopted legislation substantially similar to the GDPR. With respect to individuals in the UK, references to the GDPR in these Disclosures are to be read as referring to the UK’s similar legislation, the Data Protection Act 2018.
Once you contract IESGS services, the processing of your data will be carried out by the provisions of the GDPR.
In this Policy, we inform you about how the information that IESGS obtains through its Website, but does not apply to that obtained by any third parties on other websites, even if they are linked through the IESGS Website.
We remind you of the importance of reading through this Policy on every occasion in which you use the Website, as it may be modified to accommodate any regulatory change.
What is GDPR?
GDPR is a new set of rules designed to give citizens of the EEA more control over their personal information.
What does GDPR mean for consumers/citizens?
Consumers are guaranteed easier access to their own personal data in terms of how it is processed, with organisations required to detail how they use customer information clearly and understandably. You will also be given the right to opt-out if you wish to withdraw your consent
GDPR also brings a clarified “right to be forgotten” process, which provides additional rights and freedoms to people who no longer want their personal data processed to have it deleted, providing there are no grounds for retaining it.
What is personal data? What personal data does IESGS retain from its webpage and how is this data obtained?
Personal data are any information that is related to an identified or identifiable natural person. The data subjects are identifiable if they can be directly or indirectly identified.
IESGS only collects personal data that you provide to us or information that you have consented to give us through access, use and browsing the Website, such as (i) data provided during the use of the service; (ii) data arising from your communications with IES; (iii) data derived from your browsing, such as cookies; (iv) data you provide by submitting forms; and (v) any other data that you authorize or have authorized to process.
IESGS may obtain certain personal data about you from third-party sources and service providers. We use partners and service providers, such as platform providers (for example, Google Workspace for Education Plus), payment processors (for example, xxxx), remote proctoring third-party service software (for example, Proctor Track) to provide services for us. Some of these partners have access to personal data about you that we may not otherwise have and may share some or all these data with us. When you login to our services through a third-party platform, you allow us to access and collect any personal data from your third-party platform account permitted under the settings and privacy statement of that platform:
- https://www.proctortrack.com/general-data-protection-regulation-gdpr/
- https://workspace.google.com/terms/education_privacy.html
We and our third-party vendors may collect:
- Contact Information: for example, your name, home address, email address and phone number;
- Demographic Information: for example, gender, age and date of birth;
- Education Information: for example, previous schools;
- Learner Interaction and Participation Data: for example, exchanges with other students and your participation in class sessions or other online events that are transmitted or recorded in audio and/or visual form;
- Course Engagement and Assessment Data: for example, test scores and class interactions;
- Your Image: for example, when you provide a photograph or other image for your identification or when using a remote proctoring third-party service software (such as Proctor Track).
Parents or legal guardians:
- Contact Information: for example, your name, home address, email address and phone number;
- Payment Information: depending on your means of payment, your payment card number or your bank and bank account number, and government identification number where legally required;
- Employment Information: for example, your title and employer, history and work experience;
Do you have to give your consent?
Giving your consent allows IESGS to offer a better service adapted to your needs. However, it is not compulsory. If you choose not to give consent, be aware that IESGS must process your data for the maintenance of its customer service and/or to comply with certain laws. IESGS can also process your data when processing is necessary for the purposes of the legitimate interests of IESGS; when processing is necessary in order to protect your vital interests or of another natural person; when processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in IESGS; or for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.
Is it the same not to grant consent as not to answer the form?
In practice, it is. If you choose not to complete the form, it will be understood that you have rejected giving consent. Therefore, you will not be the recipient of any communications that can only be customized by consent.
What is the processing of personal data?
Data processing is considered any use of personal data, from the collection, recording, storage, processing, modification, consultation, use, blocking, modification or cancellation. Transfer of data that results in communications, consultations, interconnections and transfers is also considered processing.
What do we use your data for?
Data requested in the forms that you will find on the Website are generally mandatory (unless otherwise specified in the required field) to fulfil the referred purposes. Therefore, if you choose not to provide them or do not provide them correctly, they will not be able to be attended to, without prejudice to the free view of the content of the Website.
We use your data:
Consent of the data subject (article 6.1.a) RGPD)
(i) To send commercial information related to other educational services offered by third-party entities belonging to IES International Educational Systems Global SCHOOL/ Institución Internacional SEK.
(ii) To post to social networking sites photographs, videos and students information in order to promote recruitment, when using solely the image of the student.
(iii) To manage your browsing through the Website following the Cookie Policy, out of the necessary Cookies.
(iv) For the purposes indicated in each of the personal data forms of the Website.
Performance of a contract (Article 6.1.b) GDPR)
(i) To manage the admission procedure and the enrolment contract, if you start the application process in IESGS.
(ii) To provide pastoral care.
(iii) To process tutoring sessions.
(iv) To manage international mobility programs for students.
(v) To manage financial aid and grants.
(vi) To record classes in streaming.
(vii) To manage events through the recording of the event and its publication on the IES website and social networks.
(viii) To send academic documentation and the diploma to the student.
(ix) To process the registration and access of users to the private area on the website.
(x) To manage the payment of fees.
(xi) To post to social networking sites photographs, videos and students information.
(xii) To serve students in relation to their special academic needs, such as disabilities or accessibility problems.
Legitimate interest of IESGS (Article 6.1.f) GDPR):
(i) To send commercial information about educational services offered by IESGS by any means, including electronic.
(ii) To take all reasonable disciplinary or preventative action in the event of non-compliance by pupils.
(iii) To send communications to students, individually and in groups by email, Google Classroom and other means, in order to coordinate and carry out the activities in which the student is involved.
(iv) To record exams.
Compliance with a legal obligation (Article 6.1.c) GDPR)
(i) To serve students in relation to their special educational needs, such as disabilities or accessibility problems, in order to guarantee the correct access and development of students with accessibility problems or disabilities.
Your data will be kept by IESGS for the time necessary to comply with the above purposes or until you revoke your consent (opt-out), when the lawfulness of processing relies upon the given consent, by the displayed lower below in this Policy.
Who is responsible for the processing of your data?
BOCA RATON PREPARATORY SCHOOL, INC (“IESGS”).
Where and how does IESGS store your data?
At IESGS we treat your personal data with absolute confidentiality, committing to maintain the secret and guaranteeing they are kept compliant with the applicable regulations, adopting all technical and organizational security measures necessary to prevent its alteration, loss, unauthorized processing or access to your data.
Your data is stored in databases for which IESGS applies all the necessary measures to protect them privately and securely by the high-security standards established by the GDPR. These databases are only accessible to our employees and authorized third parties, which guarantees their confidentiality.
IESGS has set deadlines for the retention of your data to comply with the legal regulations.
Will IESGS send you commercial communications?
One of the purposes for which IESGS will process your data is to send you personalized electronic communications regarding products, services, events, courses, programs, promotions and news that you may consider relevant. Whenever this kind of communication takes place, it will be addressed exclusively to you, if you have not previously expressed your refusal to receive them.
If you do not wish to receive communications of this nature, you may revoke your consent by sending an email to the following address dpo@iesmail.com, providing a copy of your passport or ID.
What are your responsibilities?
You are responsible for the data you provide to IESGS; for the lack of veracity, inaccuracy, lack of validity and authenticity thereof, as well as the consent you provide for them to be used and/or processed. You are also responsible for the data you provide of any third party.
What rights do you have concerning the use of your data?
At any time, you may exercise some rights concerning the processing of your data (ARCO Rights).
If you wish to exercise any of the rights described below, (i) please send us an email to dpo@iesgsmail.com including in the subject line: “ARCO USERS ONLINE”, to help us identify and prioritize your request; (ii) accompany your application with a copy of your ID or equivalent document proving your identity; and (iii) fill out the form corresponding to the right you exercise:
- Right of access. You can obtain information about what personal data of yours are being processed, the purpose of the processing, the origin of the data and the communications/transfers made or provided through the form below.
- Right to rectification. You can correct or modify your data if they are inaccurate or incomplete through the form below.
- Right to erasure (right to be forgotten). You can ask IESGS to delete your data by contacting IESGS (when it is no longer necessary when you withdraw consent, have been unlawfully processed, etc.). IESGS will block the data and delete any copying, binding, or replicating. IESGS will delete the data as long as this is not prevented by a legal obligation, or the data is required in a legal procedure. Exercise your right through the form below.
- Right to object. You can require IESGS not to process your data or stop processing when your consent has not been required for this action. Please note that under European law you may only object to data processing carried out for legitimate interest. Therefore, you must inform IES about your legitimate interest. Exercise your right through the form below.
- Right to data portability. You may ask IESGS to provide your data to a third party, or to yourself in a structured, commonly used and mechanically readable format. Such request may only be made on data whose processing is based on consent or a contract and provided that the processing is carried out by automated means. Exercise your right through the form below.
Download form (Non-GDPR countries)
- Right to restriction of the processing. You may request that the processing operations in each case correspond to not apply to your data. This right may only be exercised in some restrictive cases. Exercise your right through the form below.
You can contact us at any time for any further clarification via the following email: dpo@iesmail.com
© International Education Systems, All Rights Reserved.
