ACG Jakarta Privacy Notice

PRIVACY NOTICE SCHOOL’S INFORMATION ACG JAKARTA JI. Warung Jati Barat No. 19 RT.1/RW.11, Ps. Minggu Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12510 Indonesia Tel: +62-21-2978 0200 Email: privacy@acgedu.com ACG Jakarta is part of Inspired Education Holdings Limited, which is a company registered in the United Kingdom, company number 09268120, with registered address as Sixth Floor, 3 Burlington Gardens, London, W1S 3EP, United Kingdom.

Inspired operate numerous affiliated schools globally via its regional offices in Europe, Africa, Middle East, Asia-Pacific and Latin America.

1.

INTRODUCTION

This policy is created according to the Privacy Act 1993 and it aims to give you information on how we, ACG Jakarta, collect and process your personal data.

Our Privacy Officer can be contacted by email at the address privacy@acgedu.com if you have any queries regarding the processing of your personal data.

2.

TYPES OF PERSONAL DATA WE PROCESS

We process personal information from our students and their families and / or competent persons and also from our employees, candidates, suppliers, contractors, prospective customers and third parties interested in finding out more about ACG Jakarta within the systems controlled by the school.

The personal information processed is mainly the following: 

Names, addresses, telephone numbers, e-mail addresses and other contact details;



Family details;



Safeguarding information (such as court orders and professional involvement)



Education and employment data;



Images, audio and video recordings, including CCTV footage (video images);



Financial information and educational centres previously attended.

Other types of data we may collect and process, according to the school purposes, are related to health condition, criminal records and other sensitive information related to an individual, such as: 

Information about health status or provision of health care linked to a specific individual;



Behavioural information;



Special educational needs



Criminal records linked to a specific individual;



Biometric information;



Ethnicity; and



Religion, nationality and location.

3.

HOW WE COLLECT AND PROCESS PERSONAL DATA

ACG Jakarta collects information in several ways, including:

4.



Personally and over the phone;



Through our webpage, including information received through the following sections: Enrolment (apply online), contact form, Query form (send a message), Book a Tour, Career Opportunities (recruitment), ACG's Web portal and subscription to our newsletters or communications;



From email and hand delivery paper documentation: including job applications, emails, invoices, letters, consent forms;



Through online tools: such as apps, educational platforms and other software used by our staff;



Through any CCTV cameras located at our premises or sites; and through third parties, such as referees, professionals or authorities working with the individual.

PURPOSES FOR WHICH WE PROCESS PERSONAL DATA

We have set out below, in tabular form, the ways in which we may use your personal data, and which of the legal bases we rely on to do so. Where appropriate, we have also identified our legitimate interests. Please note that we may process your data for more than one lawful purpose, depending on the circumstances and the specific purpose. Please contact us if you would like more detail about the specific legal ground which we are relying on to process your personal data, where more than one ground has been identified below.

Purpose/Activity

Type of data

Lawful basis for processing including basis of legitimate

To register you as a new customer

To provide educational services

interest Performance of a contract with you.

(a) Identity (b) Contact (c) Profile (d) Financial information (a) Identity To ensure that the student meets the (b) Contact school’s admission criteria; To provide (c) Profile educational services including the (d) Educational support of pupil learning, monitor and records report on pupil progress; To provide to (e) Health records the students welfare and pastoral care (f) Safeguarding services; To provide to the students information medical and nurse attention, catering (g) Family details service and school transportation, (h) Images, audio among other necessary services; To and video meet the educational, social, physical recordings, including and emotional requirements of the CCTV footage student; To comply with the law (video images); regarding data sharing; To comply with legislative or administrative requirements; To administer the school’s governing body; To enable parents/guardians to be contacted in the case of emergency or in the case of school closure, or to inform parents of their child’s educational progress or about school events, etc.; To celebrate school’s achievements and to keep a record of the history of the school, the School may take photographs and recorded images of students to be shared in, e.g. yearbooks, school website, etc, always based on informed consent from parents or students of legal age. (a) Identity Performance of a contract with you. (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications

To process and fulfil your contract, including:  managing payments, fees and charges; and  managing your queries – this may include recording calls or communications with our teams.

To collect and recover money owed (a) Identity to us in respect of your contract. (b) Contact (c) Financial (d) Transaction To carry out fraud assessments (a) Identity (b) Contact (c) Financial (d) Transaction (e) Technical To notify you in relation to our legal (a) Identity obligations and documents, (b) Contact including changes to our terms or (c) Profile

Performance of a contract with you.

Performance of a contract with you.

Performance of a contract with you.

Privacy Policy To help us improve our offering to our customers, including asking you to leave a review or take a survey, or provide customer insights To enable you to partake in one of our awards or a competition

To administer and protect our business and websites (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identity (b) Contact (c) Profile (d) Marketing and Communications (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (a) Identity (b) Contact (c) Profile (d) Technical

To deliver relevant website content, advertisements and other marketing material to you and measure or understand the effectiveness of the advertising we serve to you

(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical To use data analytics to improve our (a) Technical website, products/services, (b) Usage marketing, customer relationships and experiences To make suggestions and recommendations to you about products or services that may be of interest to you

(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile CV received through our website, in (a) Identity the section “Career Opportunities� (b) Contact or by other means. It is also referred (c) Professional to employees backgrounds (d) References

Necessary for our legitimate interests (to study how customers use our products/services, to improve our offering to our customers, to develop them and grow our business).

Performance of a contract with you to fulfil the promotion and run the awards/competition. We may also subsequently use your entries for the legitimate interests of understanding our customer base more effectively.

Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business to inform our marketing strategy and to improve our offering to you).

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).

Necessary for our legitimate interests (to develop our products/services and grow our business, and to improve our offering to you).

Conducting the selection process, recruitment of staff, position assessment, management of human resources records, administration of payroll, pensions and sick leave, disciplinary actions, staff appraisals.

5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA? The personal information may only be shared with other companies in the group, parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal information in the same way and with the same purposes as set out in this Privacy Policy.

As a school, we may be lawfully required to share personal information with relevant authorities or third parties as permitted on statutory grounds, to comply with legal obligations or on the basis of a specific consent given by the individual concerned.

The parties to whom we may disclose your personal data as above referred may be located in countries outside the school’s location, including countries which may offer a lower level of data protection.

In such cases, we will implement appropriate measures to ensure adequate protection of your personal data in accordance with applicable data protection legislation.

Your personal data shall be neither rented nor sold to third parties.

6.

CONSERVATION OF DATA

Personal information will only be retained for the period of time required to fulfil the purpose for which it was collected unless for a longer time for public interest archiving, scientific or historical research, or statistical purposes. Once the personal information is no longer required or permitted to be retained for legal or business purposes, it will be destroyed or made anonymous.

7. YOUR RIGHTS Under the Privacy Act 2013, you have the following rights. These rights are, however, subject to certain exemptions and limitations set out in Part 4.

You have the right to: 

Be informed, at the time when personal information is collected, about the data processing;



Access the information we hold as well as to obtain a copy of the personal information considering the legal limitations and exceptions;



Ask for the erasing of the personal data we hold about you without undue delay considering the legal limitations and exceptions;



Obtain the rectification of your personal information providing a supplementary statement;



Obtain restriction of processing of your personal information when it is inaccurate, illegal, unnecessary or not verified, considering the legal limitations and exceptions;



Obtain data portability of your personal information in a structured, commonly used and machine-readable format. This allows the right to transmit that data to another school without hindrance from the school to which the personal data has been provided;



Object to processing for direct marketing purposes; and



Withdraw consent at any time and freely to the processing of your personal information.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Therefore, individuals will be able to exercise their rights by sending a written specific request, along with a copy of their ID card or equivalent, to the Privacy Officer’s email address

privacy@acgedu.com or send their request directly to the Privacy Commissioner by using the online form provided at https://www.privacy.org.nz/further-resources/aboutme-request-my-infotool/, to the email address: enquiries@privacy.org.nz.

8.

CONSENT

You will have the right to withdraw your consent for any specific purpose granted at any given time without prejudice to the legality of processing according to the consent given before withdrawal.

9. MARKETING We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

Promotional Offers From Us We may use your identity, contact, technical, usage and profile data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this “Marketing�).

You will receive marketing communications from us if you have requested information from us or purchased products (including publications) or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing.

Opting Out You can ask us to stop sending you marketing messages at any time by following the optout/unsubscribe links on any marketing message sent to you or by contacting us at any time at emarketing@acgedu.com.

Where you opt out of receiving these marketing messages, we will stop sending you marketing messages but we will continue to process your personal data if there are legitimate grounds for further processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

10. STORING AND SECURING INFORMATION The school shall use the appropriate technical and organisational measures to ensure the security, confidentiality, integrity and privacy of the personal data; preventing unauthorised access or unlawful processing, as well as accidental loss, destruction or damage of the files.

11.

COMPLAINTS

If you are not satisfied with our response, you would like to discuss anything regarding this privacy notice, or you believe we are processing your personal data disregarding the data protection regulations in force, please contact our Privacy Officer at: privacy@acgedu.com or you can address your complaint to the Privacy Commissioner at enquiries@privacy.org.nz as indicated above.

12.

PRIVACY NOTICE UPDATES

ACG Jakarta may update this privacy notice periodically so we recommend that you review this information from time to time.

This version was last updated on December 2020