How we use pupil and Family information
The International School of the Basel Region AG (ISB) is the Data Controller of the personal information you provide to the school. ISB determines the purposes for which, and the manner in which, any Personal Data relating to pupils and their families is to be processed. ISB’s Director of Operations, Mr. Balazs Szegedi, acts as a representative for the school as its Data Protection Officer. Responsibilities include; overseeing and monitoring the school’s data protection procedures and ensuring they are compliant with Swiss data protection regulations and EU data protection regulations [General Data Protection Regulations (GDPR)]. He may be contacted at email@example.com.
The categories of pupil and family information that we process include:
- personal identifiers (such as name, unique pupil number, family relationships, contact details and address)
- characteristics (such as language and nationality)
- attendance information (such as classes attended, number of absences, absence reasons and any previous schools attended)
- assessment information (such as data scores, tracking, and internal and external testing)
- relevant medical information (such as insurance information, health conditions, physical and mental health care, immunizations and allergies, dietary requirements, and medication)
- special educational needs information (such as care or support plans)
- safeguarding information
- behavioral information
- photographs (for internal safeguarding & security purposes)
- payment details
- behavioral information (such as exclusions and any relevant provisions put in place)
- information regarding children’s pastoral care and support\
We may also hold data about pupils that we have received from other organisations, including other schools.
Why we collect and use pupil and parent data:
- to support pupil learning
- to monitor and report on pupil progress
- to provide appropriate first-aid and pastoral care
- to assess the quality of our services
- to comply with the law regarding data sharing
- to support our admissions process
- to inform parents about events and other things happening in the school
The lawful basis on which we use this information
Our lawful basis for collecting and processing pupil information is defined under Article 6, and the following sub-paragraphs in the GDPR apply:
- Data subject gives consent for one or more specific purposes.
- Processing is necessary to comply with the legal obligations of the controller.
- Processing is necessary to protect the vital interests of the data subject.
- Processing is necessary for tasks in the public interest or exercise of authority vested in the controller (the provision of education).
Our lawful basis for collecting and processing pupil information is also further defined under Article 9, in that some of the information we process is deemed to be sensitive, or special, information and the following sub-paragraphs in the GDPR apply:
- The data subject has given explicit consent.
- It is necessary to fulfill the obligations of controller or of data subject.
- It is necessary to protect the vital interests of the data subject.
- Processing is carried out by a foundation or not-for-profit organisation (includes religious, political or philosophical organisations and trade unions)
- Reasons of public interest in the area of public health
- It is in the public interest
Collecting pupil and family information
Pupil and family data is essential for the school's operational use. While the majority of pupil and family information you provide to us is mandatory, some of it is provided on a voluntary basis. In order to comply with the Swiss and EU General Data Protection Regulations, we will inform you whether you are required to provide certain pupil information or if you have a choice.
Storing pupil and family data
Personal data relating to pupils at ISB and their families is stored in line with the Swiss data protection regulations and EU GDPR.
The school does not store personal data indefinitely; data is only stored for as long as is necessary to complete the task for which it was originally collected. Where there is a legal obligation to retain the information beyond that period, it will be retained in line with legal obligations.
Who we share pupil and family information with
ISB will not share your personal information with any third parties without your consent, unless the law requires us to do so.
The school routinely shares pupil information with:
- schools that the pupils attend after leaving us
- our local and federal authorities to meet our legal obligations
- the Swiss education authorities
- the pupil’s family and representatives
- educators and examining bodies
- GDPR-compliant service providers to enable them to provide the service we have contracted them for
- our auditors
- health authorities
- police forces,courts, tribunals
Where we transfer personal data to a country or territory outside the European Economic Area, we will do so in accordance with data protection law.
Requesting access to your personal data
Under data protection legislation, parents and pupils have the right to request access to information about them that we hold.
You also have the right to:
- be informed about how ISB uses your personal data
- object to processing of personal data that is likely to cause, or is causing, damage or distress
- request that your personal data is erased where there is no compelling reason for its continued processing
- request that your personal data is amended if it is inaccurate or incomplete
Where the processing of your data is based on your consent, you have the right to withdraw this consent at any time.
We use website statistic packages such as Google Analytics to analyse trends in how our website is accessed and utilised. Information monitored includes internet protocol (IP) addresses, kind of device used, geographic location of visitors, browser type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, time spent on pages, and keywords used to find our site via search engines. This information is anonymous and cannot be directly linked to individual users. We may use it to identify high-use or low-use areas of the site, pinpoint problem areas of the site, analyse broad demographic trends in our visitors and make decisions about how to make it easier for people to find and navigate our website.
If you do not want analytics to be used in your browser, you can install the Google Analytics browser add-on. More information about the ways in which Google Analytics collects and processes personal data may be found here.
This website may contain links to other sites. Please be aware that ISB is not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every website that collects personally identifiable information.
The ISB website may use “cookies” to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you. One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page.
You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the ISB website. If you wish to disable cookies, you may do so through your individual browser options. More detailed information about cookie management with specific web browsers can be found at the browsers’ respective websites.
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with ISB’s Data Protection Officer, Mr. Balazs Szegedi, via email at firstname.lastname@example.org.
We may need to update this privacy notice periodically so we recommend that you revisit this information from time to time. This version was last updated July 2020.