Tauranga Privacy Notice

PRIVACY NOTICE SCHOOL’S INFORMATION ACG TAURANGA 6 Keenan Road (off Pyes Pa Road) Tauranga 3173, New Zealand Tel: Tel: +64 7 213 0100 Email: emarketing@acgedu.com ACG Tauranga is part of Inspired Education Holdings Limited, which is a company registered in the United Kingdom, company number 09268120, with registered address as Sixth Floor, 3 Burlington Gardens, London, W1S 3EP, United Kingdom..

Inspired operate numerous affiliated schools globally via its regional offices in Europe, Africa, Middle East, Asia-Pacific and Latin America.

1.

INTRODUCTION

This policy is created according to the Privacy Act 1993 and it aims to give you information on how we, ACG Tauranga, collect and process your personal data.

Our Privacy Officer can be contacted by email at the address privacy@acgedu.com if you have any queries regarding the processing of your personal data.

2.

TYPES OF PERSONAL DATA WE PROCESS

We process personal information from our students and their families and / or competent persons and also from our employees, candidates, suppliers, contractors, prospective customers and third parties interested in finding out more about ACG Tauranga within the systems controlled by the school.

The personal information processed is mainly the following: • • • • • • •

Names, addresses, telephone numbers, e-mail addresses and other contact details; Family details; Safeguarding information (such as court orders and professional involvement) Education and employment data; Images, audio and video recordings, including CCTV footage (video images); Financial information and; Educational centres previously attended.

Other types of data we may collect and process, according to the school purposes, are related to health condition, criminal records and other sensitive information related to an individual, such as:

• • • • • • • •

3.

Information about health status or provision of health care linked to a specific individual; Behavioural information; Special educational needs Criminal records linked to a specific individual; Biometric information; Ethnicity; Religion and; Nationality and location.

HOW WE COLLECT AND PROCESS PERSONAL DATA

ACG Tauranga collects information in several ways, including: • •

• • • •

4.

Personally and over the phone; Through our webpage, including information received through the following sections: Enrolment (apply online), contact form, Query form (send a message), Book a Tour, Career Opportunities (recruitment), ACG's Web portal and subscription to our newsletters or communications; From email and hand delivery paper documentation: including job applications, emails, invoices, letters, consent forms; Through online tools: such as apps, educational platforms and other software used by our staff; Through any CCTV cameras located at our premises or sites and; Through third parties, such as referees, professionals or authorities working with the individual.

PURPOSES FOR WHICH WE PROCESS PERSONAL DATA

We have set out below, in tabular form, the ways in which we may use your personal data, and which of the legal bases we rely on to do so. Where appropriate, we have also identified our legitimate interests. Please note that we may process your data for more than one lawful purpose depending on the circumstances and the specific purpose. Please contact us if you would like more detail about the specific legal ground which we are relying on to process your personal data, where more than one ground has been identified below.

Purpose/Activity

Type of data

To register you as a new customer (a) Identity (b) Contact (c) Profile (d) Financial information To provide educational services (a) Identity (b) Contact (c) Profile (d) Educational records (e) Health records

Lawful basis for processing including basis of legitimate interest Performance of a contract with you.

To ensure that the student meets the school’s admission criteria; To provide educational services including the support of pupil learning, monitor and report on pupil progress; To provide to the students welfare and pastoral care services; To provide to the students

(f) Safeguarding medical and nurse attention, catering information service and school transportation, (g) Family details among other necessary services; To (h) Images, audio meet the educational, social, physical and video and emotional requirements of the recordings, including student; To comply with the law CCTV footage (video regarding data sharing; To comply with images); legislative or administrative requirements; To administer the school’s governing body; To enable parents/guardians to be contacted in the case of emergency or in the case of school closure, or to inform parents of their child’s educational progress or about school events, etc.; To celebrate school’s achievements and to keep a record of the history of the school, the School may take photographs and recorded images of students to be shared in, e.g. yearbooks, school website, etc, always based on informed consent from parents or students of legal age.

To process and fulfil your contract, (a) Identity Performance of a contract with you. including: (b) Contact (c) Financial • managing payments, fees (d) Transaction and charges; and (e) Marketing and • managing your queries – this Communications may include recording calls or communications with our teams.

To collect and recover money owed (a) Identity Performance of a contract with you. to us in respect of your contract. (b) Contact (c) Financial (d) Transaction To carry out fraud assessments (a) Identity Performance of a contract with you. (b) Contact (c) Financial (d) Transaction (e) Technical To notify you in relation to our legal (a) Identity Performance of a contract with you. obligations and documents, (b) Contact including changes to our terms or (c) Profile Privacy Policy To help us improve our offering to (a) Identity Necessary for our legitimate interests our customers, including asking you (b) Contact (to study how customers use our to leave a review or take a survey, (c) Profile products/services, to improve our or provide customer insights (d) Marketing and offering to our customers, to develop Communications them and grow our business).

To enable you to partake in one of (a) Identity Performance of a contract with you to our awards or a competition (b) Contact fulfil the promotion and run the (c) Profile awards/competition. We may also (d) Usage subsequently use your entries for the (e) Marketing and legitimate interests of understanding Communications our customer base more effectively.

To administer and protect our (a) Identity Necessary for our legitimate interests business and websites (including (b) Contact (for running our business, provision of

troubleshooting, data analysis, (c) Profile testing, system maintenance, (d) Technical support, reporting and hosting of data) To deliver relevant website content, (a) Identity advertisements and other marketing (b) Contact material to you and measure or (c) Profile understand the effectiveness of the (d) Usage advertising we serve to you (e) Marketing and Communications (f) Technical To use data analytics to improve our (a) Technical website, products/services, (b) Usage marketing, customer relationships and experiences To make suggestions and recommendations to you about products or services that may be of interest to you

(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile CV received through our website, in (a) Identity the section “Career Opportunities� (b) Contact or by other means. It is also referred (c) Professional to employees backgrounds (d) References

administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business to inform our marketing strategy and to improve our offering to you).

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).

Necessary for our legitimate interests (to develop our products/services and grow our business, and to improve our offering to you).

Conducting the selection process, recruitment of staff, position assessment, management of human resources records, administration of payroll, pensions and sick leave, disciplinary actions, staff appraisals.

5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA? The personal information may only be shared with other companies in the group, parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal information in the same way and with the same purposes as set out in this Privacy Policy.

As a school, we may be lawfully required to share personal information with relevant authorities or third parties as permitted on statutory grounds, to comply with legal obligations or on the basis of a specific consent given by the individual concerned.

The parties to whom we may disclose your personal data as above referred may be located in countries outside the school’s location, including countries which may offer a lower level of data protection.

In such cases, we will implement appropriate measures to ensure adequate protection of your personal data in accordance with applicable data protection legislation.

Your personal data shall be neither rented nor sold to third parties.

6.

CONSERVATION OF DATA

Personal information will only be retained for the period of time required to fulfil the purpose for which it was collected unless for a longer time for public interest archiving, scientific or historical research, or statistical purposes. Once the personal information is no longer required or permitted to be retained for legal or business purposes, it will be destroyed or made anonymous.

7. YOUR RIGHTS Under the Privacy Act 2013, you have the following rights. These rights are, however, subject to certain exemptions and limitations set out in Part 4.

You have the right to: • • • • • • • •

Be informed, at the time when personal information is collected, about the data processing; Access the information we hold as well as to obtain a copy of the personal information considering the legal limitations and exceptions; Ask for the erasing of the personal data we hold about you without undue delay considering the legal limitations and exceptions; Obtain the rectification of your personal information providing a supplementary statement; Obtain restriction of processing of your personal information when it is inaccurate, illegal, unnecessary or not verified, considering the legal limitations and exceptions; Obtain data portability of your personal information in a structured, commonly used and machine-readable format. This allows the right to transmit that data to another school without hindrance from the school to which the personal data has been provided; Object to processing for direct marketing purposes and; Withdraw consent at any time and freely to the processing of your personal information.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Therefore, individuals will be able to exercise their rights by sending a written specific request, along with a copy of their ID card or equivalent, to the Privacy Officer’s email address privacy@acgedu.com or send their request directly to the Privacy Commissioner by using the online form provided at https://www.privacy.org.nz/further-resources/aboutme-request-my-infotool/, to the email address: enquiries@privacy.org.nz.

8.

CONSENT

You will have the right to withdraw your consent for any specific purpose granted at any given time without prejudice to the legality of processing according to the consent given before withdrawal.

9. MARKETING We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

Promotional Offers From Us We may use your identity, contact, technical, usage and profile data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this “Marketing”).

You will receive marketing communications from us if you have requested information from us or purchased products (including publications) or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing.

Opting Out You can ask us to stop sending you marketing messages at any time by following the optout/unsubscribe links on any marketing message sent to you or by contacting us at any time at emarketing@acgedu.com.

Where you opt out of receiving these marketing messages, we will stop sending you marketing messages but we will continue to process your personal data if there are legitimate grounds for further processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

10. STORING AND SECURING INFORMATION The school shall use the appropriate technical and organisational measures to ensure the security, confidentiality, integrity and privacy of the personal data; preventing unauthorised access or unlawful processing, as well as accidental loss, destruction or damage of the files.

11.

COMPLAINTS

If you are not satisfied with our response, you would like to discuss anything regarding this privacy notice, or you believe we are processing your personal data disregarding the data protection regulations in force, please contact our Privacy Officer at: privacy@acgedu.com or you can address your complaint to the Privacy Commissioner at enquiries@privacy.org.nz as indicated above.

12.

PRIVACY NOTICE UPDATES

ACG Tauranga may update this privacy notice periodically so we recommend that you review this information from time to time.

This version was last updated on December 2020