Fair processing notice of personal data

Fair processing notice of personal data belonging to pupils, parents / legal guardians, attendants, visitors Notificare de procesare echitabila a datelor cu caracter personal apartinand elevilor, parintilor / tutorilor, insotitorilor, vizitatorilor

THE CRAWFORD HOUSE FOUNDATION, located in Zagazului Street no. 4E, sc. B, ground floor, ap. B4, cam.

3, sector 1, Bucharest, with the correspondence address in Erou Iancu Nicolae Street no. 42, Voluntari 077190, Ilfov County, processes the following personal data belonging to pupils, parents / guardians, attendants, visitors:

FUNDATIA CRAWFORD HOUSE, cu sediul in str. Zagazului nr. 4E, sc. B, parter, ap. B4, cam. 3, sector 1, Bucuresti, cu adresa de corespondenta in str. Erou Iancu Nicolae nr. 42, Voluntari 077190, jud. Ilfov, prelucreaza urmatoarele date cu caracter personal apartinand elevilor, parintilor/ tutorilor, insotitorilor, vizitatorilor:

Pupils / Elevi Personal data category Categorie de date personale

Personal details (name, address, height) Detalii personale (nume, adresa, inaltime)

Personal details (name, car model and registration number) Detalii personale (nume, modelul masinii nr auto)

Video images Imagini video

Maximum To whom data is or may storage period be transmitted Perioada Cui sunt sau pot fi maxima de transmise datele pastrare

The purpose of processing

The legal basis of the processing

Scopul prelucrarii

Temeiul legal al prelucrarii

Providing transportation services

Performance of the contract 1 school year

transport companies

Derularea contractului

firme de transport

Asigurarea serviciilor de transport

Access control Control acces

Monitoring (CCTV) Monitorizare (CCTV)

Location and Movement (GPS) data

Monitoring (GPS)

Date privind locatia si miscarile (GPS)

Monitorizare (GPS)

The fulfillment of legal obligations (L333/2003), legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) Legitimate interest of the controller (efficiency of the pupil transport services) Interesul legitim al operatorului (eficientizarea serviciilor de transport elevi)

1 an scolar

For the duration of the contract perioada contractului

30 days 30 zile

30 days 30 zile

security company, the company that maintains the system maintenance firma de paza, firma care asigura mentenanta sistemului

security company, the company that maintains the system, police firma de paza, firma care asigura mentenanta sistemului, Politia

the beneficiary of the transport, parents beneficiarul transportului, parinti

Personal details (name, date of birth, sex, hobbies, information about parents), Identity card details (birth certificate, passport), Study and training data Detalii personale (nume, data nasterii, sex, hobby-uri), Detalii acte de identitate (certificat de nastere, pasaport), Date privind studiile si pregatirea Details of health status (afflictions, special needs or psychological support, learning related issues, allergies) Detalii privind starea de sanatate (afectiuni, nevoi speciale sau suport psihologic, probleme legate de capacitatea de invatare, alergii) Personal details (surname), Images/ Photographs, Video recordings, Study and training data (academic, sports, cultural), hobby Detalii personale (prenume), Imagini, Inregistrari video, Date privind studiile si pregatirea (clasa din care face parte,

Providing educational services

Contract performance and the fulfillment of legal obligation (L272/2004)

Asigurarea serviciilor educationale

Executarea contractului si indeplinirea obligatiilor legale (L272/2004)

Providing educational services

Parent/guardian’s consent, The fulfillment of legal obligations (Health Ministerial Order No. 1002/2015)

Asigurarea serviciilor educationale

Marketing

Consimtamantul parintilor/ tutorelui, Indeplinirea obligatiilor legale (Ordinul Min. Sanatatii nr.

1002/2015)

Parent/guardian’s consent

10 years 10 ani

Child protection services Directia Generala de Asistenta Sociala si Protectia Copilului

10 years

n/a

10 ani

n/a

3 years

Marketing

Consimtamantul parintilor/ tutorelui

Educational purposes

Performance of the contract 3 years

3 ani

Facebook, Twitter, Instagram, LinkedIn, YouTube, TikTok, BSB website

rezultate academice, sportive, culturale), hobby Photographs, Video recordings Imagini, Inregistrari video

Personal Details (Name, Address, Personal Email, Phone, Birth Date) Detalii personale (nume, adresa, email personal, telefon, data nasterii)

Photos Fotografii

Scop educational Users management in the computer system Administrare utilizatori sistem informatic Users management in the computer system Administrare utilizatori sistem informatic

Derularea contractului

3 ani

during Performance of the contract schooling Derularea contractului pe durata scolarizarii

Parent/guardian’s consent Consimtamantul parintilor/ tutorelui

during schooling pe durata scolarizarii

Class Dojo (https:// www.classdojo.com)

n/a n/a

n/a n/a

Location and Movement (GPS) data

Monitoring (GPS)

Date privind locatia si miscarile (GPS)

Monitorizare (GPS)

Legitimate interest of the controller (management of the company’s equipment when it is in the possession of third parties) 30 days Interesul legitim al operatorului (administrarea echipamentelor companiei atunci cand ele sunt in posesia tertilor)

30 zile

n/a n/a

Class Dojo (https:// www.classdojo.com) No more marking (https://www. nomoremarking.com Personal Details (Name), Details of Behavioural Issues (Psychologist Opinion), Details of Particular Problem, Accident Report, photos

Providing educational services

Detalii personale (nume), Detalii privind Asigurarea probleme de comportament (opinie serviciilor psiholog), Detalii privind probleme de educationale participare, Rapoarte privind accident, fotografiie

Performance of the contract 10 years Derularea contractului

10 ani

Please refer to the Parent’s Portal for the full list of applications that the students have access to during their studies Class Dojo (https:// www.classdojo.com) No more marking (https://www. nomoremarking.com) Va rugam sa consultati Portalul Parintilor pentru o lista completa a aplicatiilor la care elevii au acces in timpul studiilor.

Pearson (https:// qualifications. pearson. com/en/ home.html) CAIE (https://www. cambridgeinternational. org/) LAMDA

Personal details (name, surname, date of birth, gender, school email, year group, special considerations and access arrangements – if required), materials related to studying (messages, videos, sent files or any other materials containing data processed by using the computer Providing educational application / platform), educational photo / video / voice, the results of the services evaluation Asigurarea Detalii personale (nume, prenume, serviciilor data de nastere, gen, e-mail scolar, educationale grup de ani, consideratii speciale si arangamente de acces – daca este necesar), materiale legate de studiu (mesaje, videoclipuri, fisiere trimise sau orice alte materiale care contin date prelucrate utilizand aplicatia / platforma educationala), foto / video / voce, rezultatele evaluarii

(https://www.lamda. ac.uk/lamda-privacypolicy) ABRSM (https://www.abrsm.org/ engb/ moreinformation/ policies/privacypolicy)

The fulfillment of legal obligations Indeplinirea obligatiilor legale

During schooling and 4 years in the event of departure Pe durata scolarizarii si timp de 4 ani in cazul plecarii

Google classroom Please refer to the Parent’s Portal for the full list of applications that the students have access to during their studies) Pearson (https:// calificari. pearson. com/ en/ home. html) CAIE (https://www. cambridgeinterna- tional. org/) LAMDA (https://www. lamda.ac.uk/lam daprivacy-policy) ABRSM (https://www. abrsm.org/engb/ moreinformation/ policies/privacypolicy) Google classroom Va rugam sa consultati Portalul Parintilor pentru lista completa a aplicatiilor la care elevii au acces in timpul studiilor

Email address, attendance, name, last name, form, reasons for absence (nondetailed) Adresa de e-mail, prezenta, prenume, nume, clasa, motivele absentei (nespecificate in detaliu

Users management in the computer system Administrare utilizatori sistem informatic Monitoring attendance

Monitorizarea prezentei

Signinapp (https://signinapp.com) The fulfillment of legal obligations

During schooling

Indeplinirea obligatiilor legale

pe durata scolarizarii

Class DOJO (https:// www. classdojo.com) Doordeck (https:// sentryinteractive.com/ privacy-policy/

Parents / legal guardians Parinti / tutori

Personal data category

The purpose of processing

Categorie de date personale

Scopul prelucrarii

Personal details (name, phone number)

Delivery of transport services

Detalii personale (nume, telefon)

Livrarea serviciilor de transport

Personal details (name, car model and registration number) Detalii personale (nume, modelul masinii si nr auto)

Access control Control acces

Video images

Monitoring (CCTV)

Imagini video

Monitorizare (CCTV)

Personal details (name, nationality, address, telephone number, email, language, family status, occupation data), ID (passport), financial details (bank account)

Providing educational services

Detalii personale (nume, Asigurarea serviciilor nationalitate, adresa, educationale telefon, e-mail, limba, status familial, date despre locul de munca), Detalii acte de identitate (nr. CI/pasaport), Detalii financiare (cont bancar) Personal details (place of work, position, address of the place of work, telephone number of the workplace) Direct marketing Detalii personale (loc de munca, functie, adresa loc de munca, telefon loc de munca)

Direct marketing

The legal processing

basis

of

the

Maximum storage To whom data is or may period be transmitted

Temeiul legal al prelucrarii

Perioada maxima de pastrare

Cui sunt sau pot fi transmise datele

Performance of the contract

1 school year

transport companies

Derularea contractului

1 an scolar

firme de transport

For the duration of the contract

security company

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

perioada contractului

The fulfillment of legal obligations (L333/2003), Legitimate interest of the persons concerned (physical 30 days security) 30 zile Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

Contract performance or initiating the contract at the request of the data subject Derularea contractului sau contractarea la cererea persoanei vizate

Consent of the data subject Consimtamantul persoanei vizate

The contract period. If the contract is terminated, the data is stored for 3 extra years Durata contractului. In cazul rezilierii contractului, datele sunt stocate timp de inca 3 ani.

3 years 3 ani

firma de paza

Security company, the company that maintains the system, Police Firma de paza, firma care asigura mentenanta sistemului, Politia

Exact list of the apps we share the data with can be viewed on the Parent´s Portal Lista exacta a aplicatiilor cu care impartasim datele poate fi consultata pe Portalul Parintilor

n/a

Personal details (name, email) Detalii personale (nume, e-mail)

Personal details (name, car model and registration number) Detalii personale (nume, modelul masinii si nr auto)

Email address Adresa de email

Direct marketing Direct marketing

Access control Control acces

Providing access to the applications used

by BSB for tracking performance and attendance of the students Furnizarea accesului la aplicatiile utilizate de BSB pentru monitorizarea performantei si prezentei elevilor

Consent of the data subject Consimtamantul persoanei vizate

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

For the period of schooling

Exact list of the apps the School shares the data with can be viewed on the Parent´s Portal

pentru perioada de Lista exact a aplicatiilor scolarizare cu care Scoala partajeaza datele poate fi consultata pe portalul Parintilor

For the duration of the contract perioada contractului

security company firma de paza

Class DOJO Performance of the contract Derularea contractului

For the duration of the contract perioada contractului

(https:// www. classdojo.com) Doordeck (https:// sentryinteractive.com/ privacy-policy/)

Companions Insotitori

Personal data category Categorie de date personale

The purpose of processing Scopul prelucrarii

Maximum storage period

To whom data is or may be transmitted

Temeiul legal al prelucrarii

Perioada maxima de pastrare

Cui sunt sau pot fi transmise datele

Performance of the contract

1 school year

transport companies

The legal basis of the processing

Personal details (name, phone)

Delivery of transport services

Detalii personale (nume, telefon)

Livrarea serviciilor de Derularea contractului transport

Personal details (name, car make and registration number) Detalii personale (nume, marca masinii si nr auto)

Access control Control acces

Video images

Monitoring (CCTV)

Imagini video

Monitorizare (CCTV)

Personal details (name, nationality, address, telephone, email, language, family status, job data), Identity ID (passport) Detalii personale (nume, nationalitate, adresa, telefon,

Legitimate interest (safeguarding) Interes legitim (privind siguranta)

e-mail, limba, date despre locul de munca), Detalii acte de identitate (nr. pasaport) Details of offenses and convictions (criminal record) Detalii privind infractiuni si condamnari (cazier)

Providing educational services

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica) The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

Initiating the contract at the request of the data subject (of the parents), Legitimate interest of data subject (physical security)

1 an scolar the contract period of the main applicant perioada de contract a solicitantului principal

30 days

Asigurarea serviciilor Contractarea la cererea persoanei educationale vizate (a parintilor),Interesul legitim al copiilor (securitate fizica)

security company firma de paza

security company, the company that maintains the system, Police

30 zile

firma de paza, firma care asigura mentenanta sistemului, Politia

3 years

n/a

Contractarea la cererea persoanei 3 ani vizate (a parintilor), Interesul legitim al persoanelor vizate (securitate fizica)

Initiating the contract at the request of the data subject (of the parents), legitimate interest ofthe children (physical security)

firme de transport

n/a

10 years

n/a

10 ani

n/a

Visitors Vizitatori

Personal data category

Categorie de date personale

Personal Details (Name), ID Serial / No CI, No of Passport) Detalii personale (nume), Detalii acte de identitate (serie/nr CI, nr pasaport)

The purpose of The legal processing processing

Scopul prelucrarii

Access control Control acces

Personal details (name, car model Access control and registration number) Control acces Detalii personale (nume, nr auto)

Video images Imagini video

Monitoring (CCTV) Monitorizare (CCTV)

basis

of

the

Temeiul legal al prelucrarii The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

Maximum storage To whom data is or may period be transmitted

Perioada maxima Cui sunt sau pot fi de pastrare transmise datele

6 months

Indeplinirea obligatiilor legale 6 luni (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security) Indeplinirea obligatiilor legale (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

The fulfillment of legal obligations (L333/2003), Legitimate interest of the data subject (physical security)

the contract period of the main applicant, 30 days if not related to any applicant perioada de contract a solicitantului principal, 30 de zile daca nu este legata de niciun alt solicitant

security company, Police firma de paza, Politia

security company firma de paza

30 days

security company, the company that maintains the system, Police

Indeplinirea obligatiilor legale 30 zile (L333/2003), Interesul legitim al persoanelor vizate (securitate fizica)

firma de paza, firma care asigura mentenanta sistemului, Politia

* In addition to the entities mentioned above, personal data may be transmitted under the law of the competent state authorities.

In afara entitatilor mentionate, datele personale pot fi transmise in conditiile legii autoritatilor abilitate ale statului.

** Any other processing of occasional data will be notified to the data subjects.

Orice alte prelucrari de date ocazionale vor fi notificate persoanelor vizate.

CRAWFORD HOUSE FOUNDATION values the obligation to respect the confidentiality of personal data.

FUNDATIA CRAWFORD HOUSE isi asuma obligatia respectarii confidentialitatii datelor cu caracter personal.

The processing of personal data is made in accordance with the provisions of REGULATION no. 679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Directive) and you enjoy the rights set out in Chapter III: The rights of the data subject, namely: access

to personal data, rectification or deletion, restriction of processing or the right to oppose processing, and the right to portability of data, subject to compliance with the legal provisions for processing data.

For any additional information or other privacy issues, please contact the Data Protection Officer via email: dpo@britishschool.ro or tel. 0729 068 774.

In the situation where you consider that your rights provided in Regulation no. 679/2016 have been violated, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (www. dataprotection.ro).

Prelucrarea datelor cu caracter personal se face in conformitate cu prevederile REGULAMENTULUI nr. 679 din 27 aprilie 2016 privind protectia persoanelor fizice in ceea ce priveşte prelucrarea datelor cu caracter personal şi privind libera circulatie a acestor date şi de abrogare a Directivei 95/46/CE (Regulamentul general privind protectia datelor), iar dumneavoastra beneficiati de drepturile prevazute in Capitolul III: Drepturile persoanei vizate, respectiv: accesul la datele cu caracter personal proprii, rectificarea sau ştergerea acestora, restrictionarea prelucrarii sau a dreptul de a se opune prelucrarii, precum şi dreptul la portabilitatea datelor, in conditiile respectarii prevederilor ce constituie temei legal pentru prelucrarea datelor.

Pentru informatii sau alte probleme legate de protectia datelor cu caracter personal va puteti adresa Responsabilului cu Protectia Datelor pe e-mail: dpo@britishschool.ro sau tel. 0729 068 774.

In situatia in care considerati ca drepturile dumneavoastra prevazute in Regulamentul nr. 679/ 2016 au fost incalcate, aveti dreptul de a depune plangere la Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (www.dataprotection.ro).