Skip to main content

Fair processing notice of personal data

Page 1


THE CRAWFORD HOUSE FOUNDATION, located in Zagazului Street no. 4E, sc. B, ground floor, ap. B4, cam. 3, sector 1, Bucharest, with the correspondence address in Erou Iancu Nicolae Street no. 42, Voluntari 077190, Ilfov County, processes the following personal data belonging to pupils, parents / guardians, attendants, visitors: FUNDATIA CRAWFORD HOUSE, cu sediul in str. Zagazului nr. 4E, sc. B, parter, ap. B4, cam. 3, sector 1, Bucuresti, cu adresa de corespondenta in str. Erou Iancu Nicolae nr. 42, Voluntari 077190, jud. Ilfov, prelucreaza urmatoarele date cu caracter personal apartinand elevilor, parintilor/ tutorilor, insotitorilor, vizitatorilor:

Pupils / Elevi

Personal data category

Categorie de date personale

Personal details (name, address, height)

Detalii personale (nume, adresa, inaltime)

Personal details (name, car model and registration number)

Detalii personale (nume, modelul masinii nr auto)

The purpose of processing

Scopul prelucrarii

Providing transportation services

Asigurarea serviciilor de transport

The legal basis of the processing

Temeiul legal al prelucrarii

Performance of the contract Derularea contractului

Maximum storage period

Perioada maxima de pastrare

1 school year

To whom data is or may be transmitted

Cui sunt sau pot fi transmise datele

1 an scolar transport companies firme de transport

Access control Control acces

Video images

Imagini video

Location and Movement (GPS) data

Date privind locatia si miscarile (GPS)

Monitoring (CCTV)

Monitorizare (CCTV)

The fulfillment of legal obligations (L333/2003), legitimate interest of the data subject (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

Legitimate interest of the controller (efficiency of the pupil transport services)

Monitoring (GPS) Monitorizare (GPS)

Interesul legitim al operatorului (eficientizarea serviciilor de transport elevi)

For the duration of the contract perioada contractului

security company, the company that maintains the system maintenance firma de paza, firma care asigura mentenanta sistemului

30 days

30 zile

security company, the company that maintains the system, police firma de paza, firma care asigura mentenanta sistemului, Politia

30 days

30 zile

the beneficiary of the transport, parents beneficiarul transportului, parinti

Personal details (name, date of birth, sex, hobbies, information about parents), Identity card details (birth certificate, passport), Study and training data

Detalii personale (nume, data nasterii, sex, hobby-uri), Detalii acte de identitate (certificat de nastere, pasaport), Date privind studiile si pregatirea

Details of health status (afflictions, special needs or psychological support, learning related issues, allergies)

Detalii privind starea de sanatate (afectiuni, nevoi speciale sau suport psihologic, probleme legate de capacitatea de invatare, alergii)

Personal details (surname), Images/ Photographs, Video recordings, Study and training data (academic, sports, cultural), hobby

Detalii personale (prenume), Imagini, Inregistrari video, Date privind studiile si pregatirea (clasa din care face parte, rezultate academice, sportive, culturale), hobby

Photographs, Video recordings Imagini, Inregistrari video

Personal Details (Name, Address, Personal Email, Phone, Birth Date)

Detalii personale (nume, adresa, email personal, telefon, data nasterii)

Providing educational services

Asigurarea serviciilor educationale

Photos Fotografii

Providing educational services

Asigurarea serviciilor educationale

Contract performance and the fulfillment of legal obligation (L272/2004)

Executarea contractului si indeplinirea obligatiilor legale (L272/2004)

Parent/guardian’s consent, The fulfillment of legal obligations (Health Ministerial Order No. 1002/2015)

Consimtamantul parintilor/ tutorelui, Indeplinirea obligatiilor legale (Ordinul Min. Sanatatii nr. 1002/2015)

Marketing Marketing

Parent/guardian’s consent

Consimtamantul parintilor/ tutorelui

Educational purposes Scop educational

Users management in the computer system

Administrare utilizatori sistem informatic

Users management in the computer system

Administrare utilizatori sistem informatic

Performance of the contract

Derularea contractului

Child protection services

Directia Generala de Asistenta Sociala si Protectia Copilului

10 years 10 ani n/a n/a

Performance of the contract

Derularea contractului

3 years 3 ani

Facebook, Twitter, Instagram, LinkedIn, YouTube, TikTok, BSB website

3 years 3 ani

Class Dojo (https:// www.classdojo.com)

during schooling pe durata scolarizarii n/a n/a

Parent/guardian’s consent

Consimtamantul parintilor/ tutorelui during schooling pe durata scolarizarii n/a n/a

Location and Movement (GPS) data

Date privind locatia si miscarile (GPS)

Monitoring (GPS)

Monitorizare (GPS)

Personal Details (Name), Details of Behavioural Issues (Psychologist Opinion), Details of Particular Problem, Accident Report, photos Detalii personale (nume), Detalii privind probleme de comportament (opinie psiholog), Detalii privind probleme de participare, Rapoarte privind accident, fotografiie

Providing educational services

Asigurarea serviciilor educationale

Legitimate interest of the controller (management of the company’s equipment when it is in the possession of third parties)

Interesul legitim al operatorului (administrarea echipamentelor companiei atunci cand ele sunt in posesia tertilor)

Class Dojo (https:// www.classdojo.com)

No more marking (https://www. nomoremarking.com

Please refer to the Parent’s Portal for the full list of applications that the students have access to during their studies

Class Dojo (https:// www.classdojo.com)

No more marking (https://www. nomoremarking.com)

Va rugam sa consultati Portalul Parintilor pentru o lista completa a aplicatiilor la care elevii au acces in timpul studiilor.

Personal details (name, surname, date of birth, gender, school email, year group, special considerations and access arrangements – if required), materials related to studying (messages, videos, sent files or any other materials containing data processed by using the computer educational application / platform), photo / video / voice, the results of the evaluation

Detalii personale (nume, prenume, data de nastere, gen, e-mail scolar, grup de ani, consideratii speciale si arangamente de acces – daca este necesar), materiale legate de studiu (mesaje, videoclipuri, fisiere trimise sau orice alte materiale care contin date prelucrate utilizand aplicatia / platforma educationala), foto / video / voce, rezultatele evaluarii

Email address, attendance, name, last name, form, reasons for absence (nondetailed)

Adresa de e-mail, prezenta, prenume, nume, clasa, motivele absentei (nespecificate in detaliu

Providing educational services

Asigurarea serviciilor educationale

The fulfillment of legal obligations

Indeplinirea obligatiilor legale

During schooling and 4 years in the event of departure

Pe durata scolarizarii si timp de 4 ani in cazul plecarii

Pearson (https:// qualifications. pearson. com/en/ home.html)

CAIE (https://www. cambridgeinternational. org/)

LAMDA

(https://www.lamda. ac.uk/lamda-privacypolicy)

ABRSM (https://www.abrsm.org/ engb/ moreinformation/ policies/privacypolicy)

Google classroom

Please refer to the Parent’s Portal for the full list of applications that the students have access to during their studies)

Pearson (https:// calificari. pearson. com/ en/ home. html)

CAIE (https://www. cambridgeinterna- tional. org/)

LAMDA (https://www. lamda.ac.uk/lam daprivacy-policy)

ABRSM (https://www. abrsm.org/engb/ moreinformation/ policies/privacypolicy)

Google classroom

Va rugam sa consultati Portalul Parintilor pentru lista completa a aplicatiilor la care elevii au acces in timpul studiilor

Users management in the computer system

Administrare utilizatori sistem informatic

Monitoring attendance

Monitorizarea prezentei

The fulfillment of legal obligations

Indeplinirea obligatiilor legale

During schooling pe durata scolarizarii

Signinapp (https://signinapp.com)

Class DOJO (https:// www. classdojo.com)

Doordeck (https:// sentryinteractive.com/ privacy-policy/

Parents / legal guardians

Parinti / tutori

Personal data category

Categorie de date personale

Personal details (name, phone number)

Detalii personale (nume, telefon)

The purpose of processing Scopul prelucrarii

Delivery of transport services

Livrarea serviciilor de transport

Personal details (name, car model and registration number)

Detalii personale (nume, modelul masinii si nr auto)

Access control Control acces

Video images Imagini video

Monitoring (CCTV) Monitorizare (CCTV)

The legal basis of the processing Temeiul legal al prelucrarii

Performance of the contract

Derularea contractului

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

The fulfillment of legal obligations (L333/2003), Legitimate interest of the persons concerned (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

Maximum storage period

Perioada maxima de pastrare

To whom data is or may be transmitted

Cui sunt sau pot fi transmise datele

1 school year 1 an scolar transport companies firme de transport

Personal details (name, nationality, address, telephone number, email, language, family status, occupation data), ID (passport), financial details (bank account)

Detalii personale (nume, nationalitate, adresa, telefon, e-mail, limba, status familial, date despre locul de munca), Detalii acte de identitate (nr. CI/pasaport), Detalii financiare (cont bancar)

Personal details (place of work, position, address of the place of work, telephone number of the workplace)

Detalii personale (loc de munca, functie, adresa loc de munca, telefon loc de munca)

Providing educational services

Asigurarea serviciilor educationale

Direct marketing

Direct marketing

Contract performance or initiating the contract at the request of the data subject

Derularea contractului sau contractarea la cererea persoanei vizate

For the duration of the contract perioada contractului

security company firma de paza

30 days 30 zile

Security company, the company that maintains the system, Police

Firma de paza, firma care asigura mentenanta sistemului, Politia

The contract period. If the contract is terminated, the data is stored for 3 extra years

Durata contractului. In cazul rezilierii contractului, datele sunt stocate timp de inca 3 ani.

Exact list of the apps we share the data with can be viewed on the Parent´s Portal

Lista exacta a aplicatiilor cu care impartasim datele poate fi consultata pe Portalul Parintilor

Consent of the data subject Consimtamantul persoanei vizate 3 years 3 ani n/a

Personal details (name, email)

Detalii personale (nume, e-mail)

Personal details (name, car model and registration number)

Detalii personale (nume, modelul masinii si nr auto)

Direct marketing Direct marketing

Consent of the data subject Consimtamantul persoanei vizate

Email address

Adresa de email

Access control Control acces

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

Providing access to the applications used by BSB for tracking performance and attendance of the students

Furnizarea accesului la aplicatiile utilizate de BSB pentru monitorizarea performantei si prezentei elevilor

Performance of the contract Derularea contractului

For the period of schooling pentru perioada de scolarizare

Exact list of the apps the School shares the data with can be viewed on the Parent´s Portal

Lista exact a aplicatiilor cu care Scoala partajeaza datele poate fi consultata pe portalul Parintilor

For the duration of the contract perioada contractului security company firma de paza

For the duration of the contract perioada contractului

Class DOJO (https:// www. classdojo.com) Doordeck (https:// sentryinteractive.com/ privacy-policy/)

Companions

Insotitori

Personal data category

Categorie de date personale

Personal details (name, phone)

Detalii personale (nume, telefon)

Personal details (name, car make and registration number)

Detalii personale (nume, marca masinii si nr auto)

Video images

Imagini video

Personal details (name, nationality, address, telephone, email, language, family status, job data), Identity ID (passport)

Detalii personale (nume, nationalitate, adresa, telefon, e-mail, limba, date despre locul de munca), Detalii acte de identitate (nr. pasaport)

Details of offenses and convictions (criminal record)

Detalii privind infractiuni si condamnari (cazier)

The purpose of processing Scopul prelucrarii

Delivery of transport services

Livrarea serviciilor de transport

Access control Control acces

The legal basis of the processing Temeiul legal al prelucrarii

Performance of the contract

Derularea contractului

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Maximum storage period

Perioada maxima de pastrare

1 school year

1 an scolar

Monitoring (CCTV)

Monitorizare (CCTV)

To whom data is or may be transmitted

Cui sunt sau pot fi transmise datele

transport companies firme de transport

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) the contract period of the main applicant perioada de contract a solicitantului principal security company firma de paza

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

Legitimate interest (safeguarding)

Interes legitim (privind siguranta)

Providing educational services

Asigurarea serviciilor educationale

Initiating the contract at the request of the data subject (of the parents), Legitimate interest of data subject (physical security)

Contractarea la cererea persoanei vizate (a parintilor), Interesul legitim al persoanelor vizate (securitate fizica)

Initiating the contract at the request of the data subject (of the parents), legitimate interest ofthe children (physical security)

Contractarea la cererea persoanei vizate (a parintilor),Interesul legitim al copiilor (securitate fizica)

30 days

30 zile security company, the company that maintains the system, Police firma de paza, firma care asigura mentenanta sistemului, Politia

Visitors

Vizitatori

Personal data category

Categorie de date personale

Personal Details (Name), ID Serial / No CI, No of Passport)

Detalii personale (nume), Detalii acte de identitate (serie/nr CI, nr pasaport)

Personal details (name, car model and registration number)

Detalii personale (nume, nr auto)

The purpose of processing

Scopul prelucrarii

Access control Control acces

The legal basis of the processing

Temeiul legal al prelucrarii

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

Maximum storage period

Perioada maxima de pastrare

6 months 6 luni

Access control Control acces

Video images

Imagini video

Monitoring (CCTV)

Monitorizare (CCTV)

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

To whom data is or may be transmitted

Cui sunt sau pot fi transmise datele

security company, Police firma de paza, Politia

the contract period of the main applicant, 30 days if not related to any applicant perioada de contract a solicitantului principal, 30 de zile daca nu este legata de niciun alt solicitant security company firma de paza

30 days

30 zile security company, the company that maintains the system, Police firma de paza, firma care asigura mentenanta sistemului, Politia

* In addition to the entities mentioned above, personal data may be transmitted under the law of the competent state authorities.

In afara entitatilor mentionate, datele personale pot fi transmise in conditiile legii autoritatilor abilitate ale statului.

** Any other processing of occasional data will be notified to the data subjects.

Orice alte prelucrari de date ocazionale vor fi notificate persoanelor vizate.

CRAWFORD HOUSE FOUNDATION values the obligation to respect the confidentiality of personal data.

FUNDATIA CRAWFORD HOUSE isi asuma obligatia respectarii confidentialitatii datelor cu caracter personal.

The processing of personal data is made in accordance with the provisions of REGULATION no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Directive) and you enjoy the rights set out in Chapter III: The rights of the data subject , namely: access

to personal data, rectification or deletion, restriction of processing or the right to oppose processing, and the right to portability of data, subject to compliance with the legal provisions for processing data.

For any additional information or other privacy issues, please contact the Data Protection Officer via email: dpo@britishschool.ro or tel. 0729 068 774.

In the situation where you consider that your rights provided in Regulation no. 679/2016 have been violated, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (www. dataprotection.ro).

Prelucrarea datelor cu caracter personal se face in conformitate cu prevederile REGULAMENTULUI nr. 679 din 27 aprilie 2016 privind protectia persoanelor fizice in ceea ce priveşte prelucrarea datelor cu caracter personal şi privind libera circulatie a acestor date şi de abrogare a Directivei 95/46/CE (Regulamentul general privind protectia datelor), iar dumneavoastra beneficiati de drepturile prevazute in Capitolul III: Drepturile persoanei vizate, respectiv: accesul la datele cu caracter personal proprii, rectificarea sau ştergerea acestora, restrictionarea prelucrarii sau a dreptul de a se opune prelucrarii, precum şi dreptul la portabilitatea datelor, in conditiile respectarii prevederilor ce constituie temei legal pentru prelucrarea datelor. Pentru informatii sau alte probleme legate de protectia datelor cu caracter personal va puteti adresa Responsabilului cu Protectia Datelor pe e-mail: dpo@britishschool.ro sau tel. 0729 068 774.

In situatia in care considerati ca drepturile dumneavoastra prevazute in Regulamentul nr. 679/ 2016 au fost incalcate, aveti dreptul de a depune plangere la Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (www.dataprotection.ro).

Turn static files into dynamic content formats.

Create a flipbook
Fair processing notice of personal data by Crawford House Foundation - British School of Bucharest - Issuu