Fair processing notice of personal data belonging to pupils, parents / legal guardians, attendants, visitors Notificare de procesare echitabila a datelor cu caracter personal apartinand elevilor, parintilor / tutorilor, insotitorilor, vizitatorilor
THE CRAWFORD HOUSE FOUNDATION, located in Zagazului Street no. 4E, sc. B, ground floor, ap. B4, cam. 3, sector 1, Bucharest, with the correspondence address in Erou Iancu Nicolae Street no. 42, Voluntari 077190, Ilfov County, processes the following personal data belonging to pupils, parents / guardians, attendants, visitors: FUNDATIA CRAWFORD HOUSE, cu sediul in str. Zagazului nr. 4E, sc. B, parter, ap. B4, cam. 3, sector 1, Bucuresti, cu adresa de corespondenta in str. Erou Iancu Nicolae nr. 42, Voluntari 077190, jud. Ilfov, prelucreaza urmatoarele date cu caracter personal apartinand elevilor, parintilor / tutorilor, insotitorilor, vizitatorilor:
Pupils / Elevi Personal data category Categorie de date personale
Personal details (name, address, height) Detalii personale (nume, adresa, inaltime)
Personal details (name, car model and registration number) Detalii personale (nume, nr auto)
Maximum storage of The legal basis of the period processing Perioada maxima Scopul prelucrarii Temeiul legal al prelucrarii de pastrare The purpose processing
Providing transportation services Asigurarea serviciilor de transport
Access control Control acces
Performance of the contract Derularea contractului The fulfillment of legal obligations (L333 / 2003), legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the data subject (physical security)
Video images
Monitoring (CCTV)
Imagini video
Monitorizare (CCTV) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)
Location and Movement (GPS) data
Monitoring (GPS)
Date privind locatia si miscarile (GPS)
Monitorizare (GPS)
Legitimate interest of the controller (efficiency of the pupil transport services) Interesul legitim al operatorului (eficientizarea serviciilor de transport elevi)
1 school year 1 an scolar
the contract period perioada contractului
30 days 30 zile
30 days 30 zile
To whom data is or may be transmitted Cui sunt sau pot fi transmise datele transport companies firme de transport
security company, the company that maintains the system maintenance firma de paza, firma care asigura mentenanta sistemului security company, the company that maintains the system, police firma de paza, firma care asigura mentenanta sistemului, Politia the beneficiary of the transport, parents beneficiarul transportului, parinti
Personal details (name, date of birth, sex, hobbies), Identity card details (birth certificate, passport), Study and training data Detalii personale (nume, data nasterii, sex, hobby-uri), Detalii acte de identitate (certificat de nastere, pasaport), Date privind studiile si pregatirea Details of health status (afflictions, special needs or psychological support, learning related issues, allergies) Detalii privind starea de sanatate (afectiuni, nevoi speciale sau suport psihologic, probleme legate de capacitatea de invatare, alergii) Personal details (surname), Images, Video recordings, Study and training data (academic, sports, cultural), hobby Detalii personale (prenume), Imagini, Inregistrari video, Date privind studiile si pregatirea (clasa din care face parte, rezultate academice, sportive, culturale), hobby Photographs, Video recordings Imagini, Inregistrari video Personal Details (Name, Address, Personal Email, Phone, Birth Date) Detalii personale (nume, adresa, email personal, telefon, data nasterii)
Photos Fotografii
Providing educational services
Contract performance and the fulfillment of legal obligation (L272/2004)
Asigurarea serviciilor educationale
Derularea contractului si indeplinirea obligatiilor legale (L272/2004)
Providing educational services
Parent / guardian’s consent, The fulfillment of legal obligations (Health Ministerial Order No. 1002/2015)
Asigurarea serviciilor educationale
Marketing Marketing
Educational purposes
Consimtamantul parintilor / tutorelui, Indeplinirea obligatiilor legale (Ordinul Min. Sanatatii nr. 1002/2015)
Parent / guardian’s consent Consimtamantul parintilor / tutorelui
Parent / guardian’s consent
Scop educational
Consimtamantul parintilor / tutorelui
Users management in the computer system
Performance of the contract
Administrare utilizatori sistem informatic Users management in the computer system Administrare utilizatori sistem informatic
10 years 10 ani
Child protection services Directia Generala de Asistenta Sociala si Protectia Copilului
10 years
n/a
10 ani
n/a
10 years
n/a
10 ani
n/a
10 years
n/a
10 ani
n/a
during schooling
Derularea contractului
pe durata scolarizarii
Parent / guardian’s consent
during schooling
Consimtamantul parintilor / tutorelui
pe durata scolarizarii
n/a n/a
n/a n/a
Location and Movement (GPS) data
Monitoring (GPS)
Date privind locatia si miscarile (GPS)
Monitorizare (GPS)
Personal Details (Name), Details of Behavioural Issues (Psychologist Opinion), Details of Particular Problem, Accident Reports
Providing educational services
Detalii personale (nume), Detalii privind probleme de comportament (opinie psiholog), Detalii privind probleme de participare, Rapoarte privind accidente Personal details (name, surname, school e-mail, year group), materials related to studying (messages, videos, sent files or any other materials containing data processed by using the computer educational application / platform), photo/video/voice, the results of the evaluation
Legitimate interest of the controller (management of the company’s equipment when it is in the possession of third parties) 30 days Interesul legitim al 30 zile operatorului (administrarea echipamentelor companiei atunci cand ele sunt in posesia tertilor)
Performance of the contract
Asigurarea serviciilor educationale
Derularea contractului
Providing educational services (Online learning)
Asigurarea Detalii personale (nume, prenume, e-mail serviciilor scolar, grup de ani), materiale legate educationale de studiu (mesaje, videoclipuri, fisiere (Online learning) trimise sau orice alte materiale care contin date prelucrate utilizand aplicatia / platforma educationala), foto / video / voce, rezultatele evaluarii
The fulfillment of legal obligations (the Ordinance nr. 5545/2020 and associated methodology dated 10.09.2020) Indeplinirea obligatiilor legale (Ordonanta nr. 5545/2020 si metodologia asociata din 10.09.2020)
n/a n/a
10 years
n/a
10 ani
n/a
1 term
Pearson (https:// qualifications. pearson.com/en/ home.html)
1 trimestru
CAIE (https://www. cambridgeinternational.org/)
Parents / legal guardians Parinti / tutori
Personal data category
The purpose of processing
Categorie de date personale
Scopul prelucrarii
Personal details (name, phone number)
Delivery of transport services
Detalii personale (nume, telefon)
Livrarea serviciilor de transport
The legal processing
basis
of
the
Maximum storage To whom data is or may period be transmitted
Temeiul legal al prelucrarii
Perioada maxima de pastrare
Cui sunt sau pot fi transmise datele
Performance of the contract
1 school year
transport companies
Derularea contractului
1 an scolar
firme de transport
Personal details (name, car model and registration number) Detalii personale (nume, nr auto)
Access control Control acces
Video images
Monitoring (CCTV)
Imagini video
Monitorizare (CCTV)
Personal details (name, nationality, address, telephone number, email, language, family status, occupation data), ID (passport), financial details (bank account)
Providing educational services
Detalii personale (nume, Asigurarea serviciilor nationalitate, adresa, educationale telefon, e-mail, limba, status familial, date despre locul de munca), Detalii acte de identitate (nr. CI/pasaport), Detalii financiare (cont bancar) Personal details (place of work, position, address of the place of work, telephone number of the workplace) Direct marketing Detalii personale Direct marketing (loc de munca, functie, adresa loc de munca, telefon loc de munca) Personal details (name, e-mail)
Direct marketing
Detalii personale
Direct marketing
(nume, e-mail)
The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the persons concerned (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)
Contract performance or initiating the contract at the request of the data subject Derularea contractului sau contractarea la cererea persoanei vizate
Consent of the data subject Consimtamantul persoanei vizate
Consent of the data subject Consimtamantul persoanei vizate
the contract period perioada contractului
30 days 30 zile
security company firma de paza
Security company, the company that maintains the system, Police Firma de paza, firma care asigura mentenanta sistemului, Politia
10 years 10 ani
10 years 10 ani
until the end of the studies by the children pana la terminarea studiilor de catre copii
n/a
Personal details (name, car model and registration number) Detalii personale (nume, nr auto)
The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the data subject (physical security)
Access control Control acces
Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)
the contract period perioada contractului
security company firma de paza
Companions Insotitori
Personal data category Categorie de date personale
The purpose processing
of
Scopul prelucrarii
Personal details (name, phone)
Delivery of transport services
Detalii personale (nume, telefon)
Livrarea serviciilor de transport
Personal details (name, car make and registration number) Detalii personale (nume, nr auto)
Access control Control acces
Video images
Monitoring (CCTV)
Imagini video
Monitorizare (CCTV)
The legal basis of the processing
Maximum period
storage To whom data is or may be transmitted
Temeiul legal al prelucrarii
Perioada maxima de pastrare
Cui sunt sau pot fi transmise datele
Performance of the contract
1 school year
Derularea contractului
1 an scolar
transport companies
The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)
the contract period perioada contractului
30 days 30 zile
firme de transport
security company firma de paza
security company, the company that maintains the system, Police firma de paza, firma care asigura mentenanta sistemului, Politia
Personal details (name, nationality, address, telephone, email, language, family status, job data), Identity ID (passport), Financial details (bank account) Detalii personale (nume, nationalitate, adresa, telefon, e-mail, limba, date despre locul de munca), Detalii acte de identitate (nr. pasaport)
Initiating the contract at the request of the data subject (of the parents), Providing educational Legitimate interest of data subject services (admissions) (physical security) Asigurarea serviciilor Contractarea la cererea persoanei educationale vizate (a parintilor), Interesul legitim (admitere) al persoanelor vizate (securitate fizica)
Initiating the contract at the request of the data subject (of the parents), Details of offenses and Providing educational legitimate interest ofthe children convictions (criminal record) services (physical security) Detalii privind infractiuni si Asigurarea serviciilor Contractarea la cererea persoanei condamnari (cazier) educationale vizate (a parintilor),Interesul legitim al copiilor (securitate fizica)
10 years
n/a
10 ani
n/a
10 years
n/a
10 ani
n/a
Visitors Vizitatori
Personal data category
Categorie de date personale
Personal Details (Name, Car registration plate), ID Serial / No CI, No of Passport) Detalii personale (nume, nr auto), Detalii acte de identitate (serie/nr CI, nr pasaport)
Personal details (name, car model and registration number) Detalii personale (nume, nr auto)
The purpose processing
of The legal processing
basis
of
the
Scopul prelucrarii
Temeiul legal al prelucrarii
Access control
The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the data subject (physical security)
Control acces
Access control Control acces
Video images
Monitoring (CCTV)
Imagini video
Monitorizare (CCTV)
Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) The fulfillment of legal obligations (L333 / 2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)
Maximum storage To whom data is or period may be transmitted
Perioada maxima Cui sunt sau pot fi de pastrare transmise datele
6 months 6 luni
the contract period perioada contractului
30 days 30 zile
security company, Police firma de paza, Politia
security company firma de paza
security company, the company that maintains the system, Police firma de paza, firma care asigura mentenanta sistemului, Politia
* In addition to the entities mentioned above, personal data may be transmitted under the law of the competent state authorities. In afara entitatilor mentionate, datele personale pot fi transmise in conditiile legii autoritatilor abilitate ale statului.
** Any other processing of occasional data will be notified to the data subjects. Orice alte prelucrari de date ocazionale vor fi notificate persoanelor vizate.
CRAWFORD HOUSE FOUNDATION values the obligation to respect the confidentiality of personal data. FUNDATIA CRAWFORD HOUSE isi asuma obligatia respectarii confidentialitatii datelor cu caracter personal.
The processing of personal data is made in accordance with the provisions of REGULATION no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Directive) and you enjoy the rights set out in Chapter III: The rights of the data subject, namely: access to personal data, rectification or deletion, restriction of processing or the right to oppose processing, and the right to portability of data, subject to compliance with the legal provisions for processing data. For any additional information or other privacy issues, please contact the Data Protection Officer via e -mail: dpo@britishschool.ro or tel. 0729 068 774. In the situation where you consider that your rights provided in Regulation no. 679/2016 have been violated, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (www. dataprotection.ro). Prelucrarea datelor cu caracter personal se face in conformitate cu prevederile REGULAMENTULUI nr. 679 din 27 aprilie 2016 privind protecţia persoanelor fizice in ceea ce priveşte prelucrarea datelor cu caracter personal şi privind libera circulaţie a acestor date şi de abrogare a Directivei 95/46/CE (Regulamentul general privind protecţia datelor), iar dumneavoastra beneficiati de drepturile prevazute in Capitolul III: Drepturile persoanei vizate, respectiv: accesul la datele cu caracter personal proprii, rectificarea sau ştergerea acestora, restricţionarea prelucrarii sau a dreptul de a se opune prelucrarii, precum şi dreptul la portabilitatea datelor, in conditiile respectarii prevederilor ce constituie temei legal pentru prelucrarea datelor. Pentru informatii sau alte probleme legate de protectia datelor cu caracter personal va puteti adresa Responsabilului cu Protectia Datelor pe e-mail: dpo@britishschool.ro sau tel. 0729 068 774. In situatia in care considerati ca drepturile dumneavoastra prevazute in Regulamentul nr. 679/ 2016 au fost incalcate, aveti dreptul de a depune plangere la Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (www.dataprotection.ro).
Published on Sep 14, 2021