Privacy Policy

Our organisation strives for personal data protection and has undertaken measures to protect personal data in accordance with the principles of transparency, ethical information procedures and valid legislation in the field of personal data protection, including the General Data Protection Regulation (GDPR).

In this memorandum, you will find out about:

the controller of your personal data and the personal data of your child;
the type of personal data we process;
the purpose of processing;
potential recipients of the personal data;
the period for which the personal data will be processed;
your rights with regard to the protection of your rights and the rights of your child.

1. Controller of your personal data

The controller of your personal data is: BRNO INTERNATIONAL SCHOOL S.R.O.

Represented by: JAN ŠVIHÁLEK

Registered seat: KOBYLÍN 463/20, 644 00 BRNO

Company registration number: 07427735

E-mail: info@isob.cz

(hereinafter as “controller”)

whose data protection officer is HANA MOHROVÁ, e-mail: poverenec@isob.cz.

The controller of your personal data has undertaken to exercise due care in accordance with the principles of transparency, ethical information procedures and valid legislation in the area of personal data protection, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

It is the controller’s goal to protect your personal data to the maximum extent with respect to all processes related to processing (e.g. collection, storage, retrieval, structuring, sorting, deletion, etc.).

2. Type of personal data processed

The personal data we can collect and process includes the following:

basic identification data (first name, last name, date of birth, birth number, address, identification number, etc.)
contact information (phone, e-mail, data box, etc.)
information whose processing is mandatory pursuant to the applicable legislation (e.g. decision on admission or rejection of student, etc.)
information necessary to ensure safety and health and the protection of property (e.g. CCTV footage etc.).

3. Purpose of processing

We shall process personal data mostly for the purpose of fulfilment of the obligations arising from the applicable legislation, especially act number 561/2004 Sb., on pre-school, basic, secondary, tertiary professional and other education (the Education Act), as amended; act number 563/2004 Sb., on education professionals and on changes to some related acts, as amended; act number 262/2006 Sb., the Labour Act, as amended; act number 258/2000 Sb., on protection of the public health and on amendment to some related acts, as amended; regulation number 48/2005 Sb., on elementary education and some conditions of mandatory basic education, as amended; regulation number 27/2016 Sb., on the education of pupils with special educational needs and talented pupils, as amended; regulation number 364/2005 Sb., on documentation kept by schools and educational institutions and on transfer of data from documentation kept by schools and educational institutions and school records, as amended; regulation number 64/2005 Sb., on registers of injuries in children, pupils and students, as amended; regulation number 74/2005 Sb., on extracurricular education, as amended; regulation number 107/2005 Sb., on school meals, as amended.

Furthermore, we shall process personal data based on the performance of a contract or in accordance with the principle of legitimate interest.

In the case of purposes not listed above, we shall be required to seek freely given, explicit, specific and informed consent from the data subject (employees, students or their legal guardians). In particular, this is the case of the processing of data concerning the students’ likeness (photos, video) or the processing of basic identification data for the purpose of applications to competitions, extracurricular activities, field trips or sporting events, publication of results of competitions etc. The granting of consent for these purposes is voluntary; the consent can be withdrawn at any time. You can also exercise any other right referred to in this memorandum and the written consent form.

Applicants are hereby informed that, by sending their application for admission, they have given their consent with the processing and with the retention of the personal data for a period not exceeding one year (for contact purposes, if necessary).

Job applicants are hereby informed that, by sending their employment application, they have given their consent with the processing and with the retention of the personal data for a period not exceeding one year (for contact purposes, if necessary).

Legal Guardians are hereby informed that we will process their email addresses for a period not exceeding one year in accordance with the principle of legitimate interest for the purpose of contacting them or their children due to alumni activities.

4. Potential recipients of personal data

Pursuant to the applicable legislation: personal data of individuals can be disclosed to public and judicial authorities, law enforcement bodies and agencies, to the extent required by law. Where acceptable pursuant to the applicable legislation, we may disclose the personal data to third parties for the sake of demonstration, enforcement or protection of legal claims.

Third parties: Personal data may be disclosed, to the extent necessary, to selected contractors who provide certain services to the school, e.g. accounting or IT administration. The processing of personal data under these conditions shall take place in accordance with our instructions and in line with the original purposes.

Transfer of personal data to third countries takes place in exceptional cases only. The data subjects concerned are always notified. Typically, these circumstances include planned trips abroad or exchange programmes etc.

5. Period for which the personal data will be processed

We shall only process personal data for the period necessary to achieve the purpose for which the data is collected. Typically, this period is explicitly stipulated by the applicable legislation. Where you have given consent with the processing of your personal data, it will only be processed for the period stated in the written consent form, typically during school attendance.

6. Your rights with regard to the protection of your rights and the rights of your child

You have the right to contact us in relevant cases, and to the extent governed by the applicable legislation, in order to exercise the following rights:

right of access to personal data;
right to rectification or update of personal data where it is incorrect or obsolete;
right to erasure, where the personal data is processed in violation of the conditions of protection defined by the applicable legislation or the consent given, or where the consent has been withdrawn;
right to restriction of processing;
right to object to processing;
right to data portability and other rights pursuant to GDPR;
right to be informed about serious incidents affecting your personal data;
right to contact us regarding the data processed according to the consent given, or to withdraw your consent to processing;
right to file a complaint with our organisation, which shall be dealt with in coordination with our data protection officer or the supervisory authority, i.e. the Office for Personal Data Protection.

The controller shall reply to your request or provide the information requested within one month:

in writing;
where appropriate, by e-mail, once identity has been confirmed;
orally, should you so request and once your identity has been confirmed (however, no information is provided by phone).

Where appropriate, and as long as the rights and freedoms of other persons are not affected, the controller shall provide copies of the personal data being processed. The first copy is provided free of charge, as is a copy requested after a longer period of time or where the personal data or the conditions of processing have changed. Further copies are subject to a fee.

Effective date of this document: 25 May 2018