GENERAL DATA PROTECTION REGULATION
You may have heard about the new General Data Protection Regulation (GDPR), that came into effect on 25 May 2018. The petite Ecole de Manchester’s Privacy Policy refers directly to this new regulation.
We will not be changing how we use your personal information, but the new Privacy Policy provides you with additional details such as:
- your rights under GDPR in relation to the information that we hold about you;
- how we collect your personal data;
- the type of information that we collect about you
- the legal basis for processing your personal data and how we use it.
- INTRODUCTION
We appreciate the trust you place in us when sharing your personal data. The security of that data is very important to us. In this document, we will explain how we collect, use and protect your personal data.
We will also explain what rights you have with regards to your personal data and how you can exercise those rights.
- WHO WE ARE
We are part of the FLAM worldwide network promoting French language and culture.
We have appointed a Data Protection Officer who is responsible for monitoring our data protection compliance.
If you have questions about how we process personal data, or would like to exercise your data subject rights, please email us at info[at]petiteecolemanchester.com or here.
- COLLECTION OF PERSONAL DATA
- When you contact us using our contact form on our website or by email, you need to provide us with your name and e-mail address so that we can contact you about your message.
- We use the “contract” legal basis for this processing we keep this data for 1 year after the initial purpose of processing is no longer required
- When you pre-register with us
- when you apply for tuitions we collect your personal data so that we can evaluate, prioritise and manage your request. For this we collect: name and contact details, students details (including date of birth), postal code.
- We keep this data until your application has completed. We use the “contract” legal basis for this processing.
- When you or your children are a student with us
- When you successfully enrol with us for tuitions, you become a member of the association and we collect your personal data (parents and students).
- Therefore, we can manage your tuitions, invoicing, payments and the whole of communication.
- We keep this data until the cancellation of your application.
We collect personal data from you for one or more of the following purposes:
- to provide a high level of customer service
• to communicate with you about our upcoming events, reviews and other news – this may be via email.
• To initiate and complete commercial transactions with you, or the entity that you represent, for the purchase of services;
• To fulfil a contract that we have entered with you or with the entity that you represent;
• To manage any communication between you and us.
- LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
We will process your personal data where it is necessary:
• for the performance or entering into of a contract with you, including to provide our service, process your payment and to respond to enquiries and bookings made by you;
• for compliance with our legal obligations
• for furthering our legitimate interests including to:
– prevent, detect and investigate fraud or illegal activity
We may also process your personal data based on any consent given by you.
- PROTECTION OF YOUR PERSONAL DATA
We are committed to protecting your personal data and to keeping it safe and confidential. We will therefore ensure that appropriate technical and organisational physical, electronic and procedural safeguards are implemented to protect it. Access to your personal data will also be limited to our team and certain third parties who process it on our behalf. We do not sell, rent or share personal information with third parties.
We do not, however, have any control over what happens between your device and the boundary of our information infrastructure. You should be aware of the many information security risks that exist and take appropriate steps to safeguard your own information. We accept no liability in respect of breaches that occur beyond our sphere of control.
- YOUR RIGHTS AS A DATA SUBJECT
As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email us at info[at]petiteecolemanchester.com or use the information supplied in the Contact us section below. Your rights are as follows:
• The right to be informed
As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy policy and any related communications we may send you.
• The right of access
You may request a copy of the personal data we hold about you free of charge. Once we have verified your identity and, if relevant, the authority of any third-party requestor, we will provide access to the personal data we hold about you.
• The right to rectification
When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.
• The right to erasure (the ‘right to be forgotten’)
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. We will take all reasonable steps to ensure erasure.
• The right to restrict processing
You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure.
• The right to data portability
You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulfilment of a contractual obligation.
• The right to object
You have the right to object to our processing of your data where
o Processing is based on legitimate interest;
o Processing is for the purpose of direct marketing;
o Processing is for the purposes of scientific or historic research;
o Processing involves automated decision-making and profiling.
- CONTACT US
Any comments, questions or suggestions about this privacy policy or our handling of your personal data should be emailed to info[at]petiteecolemanchester.com or here. Alternatively, you can contact us using the following telephone number: +44 7792582855